Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d59d93e7-5c7e-424e-960f-2edf15fa5db0/356e9326-e69c-3c5b-9030-c62d6acfbed1.roa
File:                     356e9326-e69c-3c5b-9030-c62d6acfbed1.roa (raw, json)
Hash identifier:          EMIDBvP+oTwGHqQRr8fy5t91Fk2T3kG1RJBwYUwo7tE=
Subject key identifier:   39:28:04:EF:2E:A8:41:F3:ED:58:1E:89:72:E8:DD:B1:66:3D:39:96
Certificate issuer:       /CN=d59d93e7-5c7e-424e-960f-2edf15fa5db0
Certificate serial:       010D0C9F4328584CB981F8E857DF8A0BBFD5C458
Authority key identifier: 8B:4B:FF:B3:1B:84:06:63:B6:F8:46:E4:98:54:04:B6:A3:F5:1B:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d59d93e7-5c7e-424e-960f-2edf15fa5db0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d59d93e7-5c7e-424e-960f-2edf15fa5db0/356e9326-e69c-3c5b-9030-c62d6acfbed1.roa
Signing time:             Mon 02 Feb 2026 02:00:32 +0000
ROA not before:           Mon 02 Feb 2026 02:00:32 +0000
ROA not after:            Sun 03 May 2026 01:00:32 +0000
asID:                     399599
IP address blocks:        23.182.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d59d93e7-5c7e-424e-960f-2edf15fa5db0/d59d93e7-5c7e-424e-960f-2edf15fa5db0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d59d93e7-5c7e-424e-960f-2edf15fa5db0/d59d93e7-5c7e-424e-960f-2edf15fa5db0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d59d93e7-5c7e-424e-960f-2edf15fa5db0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b9:81:f8:e8:57:df:8a:0b:bf:d5:c4:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d59d93e7-5c7e-424e-960f-2edf15fa5db0
        Validity
            Not Before: Feb  2 02:00:32 2026 GMT
            Not After : May  3 01:00:32 2026 GMT
        Subject: CN=abb1470c-c026-46e6-b881-19a9d536d9b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:28:02:84:cf:eb:7d:32:d5:14:92:dd:30:30:
                    9b:27:f3:81:f1:6e:d5:07:1c:5c:f3:60:02:73:1c:
                    7d:71:f8:a7:02:91:f2:be:79:c4:d9:f6:7c:3c:9d:
                    41:08:46:91:c4:dd:7d:6b:ca:f7:17:45:66:e0:90:
                    69:aa:91:64:e7:1d:10:e2:63:01:26:70:24:4e:47:
                    0c:97:23:8b:3b:d3:11:25:77:af:e3:aa:9c:c2:32:
                    de:c8:47:98:65:af:00:35:87:77:d8:6b:e2:b7:c1:
                    3f:93:1e:74:7e:d4:ba:26:66:6a:ee:fa:71:a7:7e:
                    da:81:d8:46:12:d8:7d:c9:f5:cc:98:b3:0c:29:99:
                    0f:a4:c3:8e:85:ef:c7:07:ee:a3:d2:43:6f:cb:90:
                    b1:f9:b0:97:de:94:26:e5:d1:da:38:1e:be:04:16:
                    da:6a:35:1c:61:bf:bc:71:35:de:8b:ee:45:58:a8:
                    19:48:36:27:24:90:02:ff:91:c4:34:0b:1f:c0:2f:
                    d0:88:2c:30:91:49:2f:71:31:d8:70:2f:77:6b:af:
                    e6:88:b3:d5:c9:67:1f:1c:46:3b:24:94:3d:b6:02:
                    6a:b0:6a:11:01:e0:a5:16:c2:e1:36:db:c0:6b:e3:
                    61:4b:ea:47:00:31:e5:23:72:6b:7f:d0:82:ba:cd:
                    9a:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:28:04:EF:2E:A8:41:F3:ED:58:1E:89:72:E8:DD:B1:66:3D:39:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d59d93e7-5c7e-424e-960f-2edf15fa5db0/356e9326-e69c-3c5b-9030-c62d6acfbed1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d59d93e7-5c7e-424e-960f-2edf15fa5db0/d59d93e7-5c7e-424e-960f-2edf15fa5db0.crl

            X509v3 Authority Key Identifier:
                keyid:8B:4B:FF:B3:1B:84:06:63:B6:F8:46:E4:98:54:04:B6:A3:F5:1B:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d59d93e7-5c7e-424e-960f-2edf15fa5db0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.182.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:0f:88:8f:39:bc:a1:a0:cc:1b:8d:30:ef:8d:ed:cd:fa:90:
         d0:13:34:ff:4d:5d:58:e0:52:ed:39:3a:77:ac:fb:ab:f0:2d:
         bd:d5:e2:63:aa:fa:b2:bb:00:c8:b3:f7:0e:f8:2d:1c:2d:55:
         f8:bf:55:bd:16:90:4a:c8:88:ec:1f:14:8c:9c:43:29:d4:25:
         fd:b0:51:89:f8:2f:67:a2:fd:80:47:f1:82:16:6d:33:12:e4:
         8c:c5:b3:c4:88:91:45:49:e1:aa:24:5d:d0:9f:cf:c4:af:4b:
         78:04:f8:ea:a4:17:9e:dc:ed:47:24:15:52:0f:d3:9a:14:60:
         c3:eb:e1:7c:c7:4f:57:3d:7f:16:18:51:8f:49:40:1b:4d:68:
         64:b9:b3:9e:e3:cd:75:6d:6a:61:73:74:3e:32:4f:73:8a:99:
         9e:97:76:4e:ae:b1:26:12:f4:ac:19:bd:96:77:cd:ee:9f:85:
         53:1e:de:ae:57:47:cd:e7:c0:13:d6:8c:e0:3a:12:1a:59:29:
         86:b2:93:7f:9f:44:bb:c5:a1:15:93:67:06:e2:a7:7b:6c:f3:
         0d:17:30:08:84:93:c4:55:fc:a0:3f:95:8f:e7:23:22:01:6d:
         26:69:2a:dd:c4:d6:4d:3d:18:de:0d:1e:33:56:f5:1a:58:bb:
         15:62:ef:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:56:02 2026 by rpki-client