Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ab1a140b-878b-41cc-864f-08e0177f7325/b54f4269-34b2-3d57-8d81-e3a6a7e3fc64.roa
File:                     b54f4269-34b2-3d57-8d81-e3a6a7e3fc64.roa (raw, json)
Hash identifier:          PTyW5m3PipNhs/yl8HAsIQlw3hM3zrRYiuxFMUgV2Ts=
Subject key identifier:   6D:9A:39:58:36:AF:CF:4E:94:12:70:0D:9B:8E:52:6E:D8:12:7F:A8
Certificate issuer:       /CN=ab1a140b-878b-41cc-864f-08e0177f7325
Certificate serial:       010D0C9F4328584D6AAA73F8885C5960BC186880
Authority key identifier: 71:2D:7B:15:D7:47:DF:6C:DB:98:B1:DC:CB:ED:1A:2D:28:94:57:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ab1a140b-878b-41cc-864f-08e0177f7325.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ab1a140b-878b-41cc-864f-08e0177f7325/b54f4269-34b2-3d57-8d81-e3a6a7e3fc64.roa
Signing time:             Mon 06 Apr 2026 13:00:30 +0000
ROA not before:           Mon 06 Apr 2026 13:00:30 +0000
ROA not after:            Sun 05 Jul 2026 13:00:30 +0000
asID:                     46793
IP address blocks:        23.150.240.0/24 maxlen: 24
                          204.238.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ab1a140b-878b-41cc-864f-08e0177f7325/ab1a140b-878b-41cc-864f-08e0177f7325.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ab1a140b-878b-41cc-864f-08e0177f7325/ab1a140b-878b-41cc-864f-08e0177f7325.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ab1a140b-878b-41cc-864f-08e0177f7325.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6a:aa:73:f8:88:5c:59:60:bc:18:68:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab1a140b-878b-41cc-864f-08e0177f7325
        Validity
            Not Before: Apr  6 13:00:30 2026 GMT
            Not After : Jul  5 13:00:30 2026 GMT
        Subject: CN=d1998ecf-e5c5-46e2-83a3-08d48e2f3ab8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c7:96:70:39:55:3b:6d:42:e5:4e:20:7e:7c:
                    0f:a1:02:ad:22:65:c7:fc:af:88:cf:a8:9d:ee:7f:
                    12:8d:b5:97:a6:ec:d8:b9:f4:01:0f:ea:85:c3:e9:
                    fd:f2:08:2b:67:a9:d0:4e:ff:00:db:04:64:e0:c4:
                    12:4b:0f:16:5d:db:2c:c1:4a:f8:00:2e:cb:e8:6b:
                    34:08:c0:10:9f:dc:c9:58:18:22:78:85:21:cf:27:
                    44:76:59:ba:34:74:c3:5c:df:e8:84:3d:a4:12:89:
                    fb:db:97:24:ee:fc:2a:ba:f3:24:da:91:2f:1d:86:
                    7d:5f:b6:74:71:72:50:7f:46:d5:49:c1:60:d9:0d:
                    70:8e:ed:1a:bf:1f:f7:2c:fd:50:f7:dd:97:b5:ef:
                    2a:de:9b:13:94:0b:5e:39:2c:50:a2:a7:51:70:5d:
                    f1:50:e7:88:00:f8:6a:2b:e6:29:4c:69:7d:00:3b:
                    e6:26:42:93:fd:90:5f:4e:a7:83:32:6b:03:18:67:
                    62:41:66:06:54:af:d1:23:3c:4e:03:7e:f6:f1:2f:
                    fd:65:12:25:ee:1c:29:f8:98:95:c2:5b:0b:4a:a4:
                    d0:26:1f:fa:c5:03:bb:d0:89:39:b2:5e:b7:2e:c5:
                    d6:5f:59:53:67:f1:1f:fa:0b:10:85:72:f5:61:55:
                    81:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:9A:39:58:36:AF:CF:4E:94:12:70:0D:9B:8E:52:6E:D8:12:7F:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ab1a140b-878b-41cc-864f-08e0177f7325/b54f4269-34b2-3d57-8d81-e3a6a7e3fc64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ab1a140b-878b-41cc-864f-08e0177f7325/ab1a140b-878b-41cc-864f-08e0177f7325.crl

            X509v3 Authority Key Identifier:
                keyid:71:2D:7B:15:D7:47:DF:6C:DB:98:B1:DC:CB:ED:1A:2D:28:94:57:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ab1a140b-878b-41cc-864f-08e0177f7325.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.150.240.0/24
                  204.238.70.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:f7:95:c8:a6:2d:30:15:d2:a6:75:d5:e2:1d:b3:58:f7:20:
         19:19:2a:0d:38:38:a5:f8:ab:91:4a:72:6f:4f:99:45:a4:86:
         3e:40:3e:47:bf:20:98:8a:e3:0a:44:df:6c:3a:8f:06:09:53:
         8d:d6:1a:0c:0d:34:3b:13:8d:c3:ff:ee:e7:e3:8d:f5:d2:c7:
         eb:af:d6:cb:b3:81:fb:bb:53:ad:ce:9d:6e:2a:31:cd:1e:d6:
         9d:74:66:ff:65:7d:f7:64:65:57:14:d5:bc:1a:44:ea:a2:00:
         3b:7a:e9:92:54:34:a7:1e:a0:f7:8c:76:f3:34:43:84:c6:40:
         c6:bc:6b:cf:9b:7a:12:e2:1c:d2:c7:2f:d6:d5:d9:e1:98:57:
         cb:99:82:6b:73:d8:a7:66:ce:c2:61:9b:a6:4d:60:7e:08:d9:
         ca:24:0b:fa:51:0a:12:a2:61:69:3a:a2:e8:00:33:50:f1:29:
         a3:38:fb:49:1f:f9:95:b4:99:fa:5d:68:26:8e:14:b7:a0:f5:
         ed:c7:51:76:81:ba:e3:76:7a:9b:85:c1:a0:22:14:ad:63:10:
         d0:78:57:f1:f5:83:00:16:52:24:40:8f:06:61:37:a9:ef:7e:
         d3:78:ab:c6:0e:ad:dc:c9:07:f2:3c:7a:77:99:a8:09:22:c0:
         6f:43:fb:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:09:34 2026 by rpki-client