Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e056707d-838a-4b8b-bd8e-8a874ea0684d/e0b86d7c-f4b6-3de4-b3f5-3ebbf7e6cba3.roa
File:                     e0b86d7c-f4b6-3de4-b3f5-3ebbf7e6cba3.roa (raw, json)
Hash identifier:          +hnFos3tIHs1jBCu7TC0tpEP/B5Yk+66Wuz7aBaqhk4=
Subject key identifier:   CB:CA:70:6B:77:FB:86:8A:36:6C:85:48:28:15:0A:5C:66:CA:43:AD
Certificate issuer:       /CN=e056707d-838a-4b8b-bd8e-8a874ea0684d
Certificate serial:       010D0C9F4328584DE150AC6FECB512E606C0A200
Authority key identifier: 21:73:27:CC:A7:57:0A:AF:9B:53:F6:47:A1:F4:EE:A3:36:32:1C:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e056707d-838a-4b8b-bd8e-8a874ea0684d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e056707d-838a-4b8b-bd8e-8a874ea0684d/e0b86d7c-f4b6-3de4-b3f5-3ebbf7e6cba3.roa
Signing time:             Tue 19 May 2026 01:00:24 +0000
ROA not before:           Tue 19 May 2026 01:00:24 +0000
ROA not after:            Mon 17 Aug 2026 01:00:24 +0000
asID:                     400011
IP address blocks:        23.155.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e056707d-838a-4b8b-bd8e-8a874ea0684d/e056707d-838a-4b8b-bd8e-8a874ea0684d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e056707d-838a-4b8b-bd8e-8a874ea0684d/e056707d-838a-4b8b-bd8e-8a874ea0684d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e056707d-838a-4b8b-bd8e-8a874ea0684d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e1:50:ac:6f:ec:b5:12:e6:06:c0:a2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e056707d-838a-4b8b-bd8e-8a874ea0684d
        Validity
            Not Before: May 19 01:00:24 2026 GMT
            Not After : Aug 17 01:00:24 2026 GMT
        Subject: CN=8edebe0b-039b-42b4-b3a7-48ce18d43b69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d9:09:fc:90:79:c4:05:0c:36:b2:42:e6:1a:
                    07:9c:9e:f1:80:07:0b:78:25:3b:8e:01:a0:d9:be:
                    35:55:f9:d1:de:67:f3:f8:28:e5:59:e3:20:3a:13:
                    80:83:18:86:f6:37:15:f5:a2:dc:0d:2c:08:39:8e:
                    3a:16:c3:09:9f:20:6f:87:f4:86:33:44:71:74:8e:
                    98:4a:82:26:97:b0:30:df:dd:90:e5:05:ba:84:33:
                    db:ae:e0:b5:d5:bd:c7:b5:b8:54:25:8c:bf:bb:07:
                    2c:d2:29:e3:ab:1e:ef:9f:c0:e9:1f:95:a4:05:bc:
                    4e:17:8b:9d:13:bc:54:bd:93:be:18:a3:bc:54:d6:
                    52:e1:c2:5d:67:09:27:67:00:b4:28:93:52:d0:5d:
                    a9:ce:9b:84:31:89:1b:f1:a5:8d:e7:45:65:5e:3c:
                    75:eb:95:81:d5:ad:10:08:e0:19:07:4c:3f:8f:3e:
                    eb:1e:5f:e4:81:ac:46:c8:a0:9a:95:43:73:b1:d1:
                    68:6f:75:17:c2:92:c6:df:bb:d7:75:25:1c:9e:df:
                    b0:ec:ee:55:89:9b:32:d2:6d:68:0e:f9:ac:f5:90:
                    07:94:82:fa:7e:37:38:48:cb:d1:a6:09:56:2f:b4:
                    16:66:80:5d:47:71:31:ec:cf:59:73:53:da:b5:37:
                    cf:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:CA:70:6B:77:FB:86:8A:36:6C:85:48:28:15:0A:5C:66:CA:43:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e056707d-838a-4b8b-bd8e-8a874ea0684d/e0b86d7c-f4b6-3de4-b3f5-3ebbf7e6cba3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e056707d-838a-4b8b-bd8e-8a874ea0684d/e056707d-838a-4b8b-bd8e-8a874ea0684d.crl

            X509v3 Authority Key Identifier:
                keyid:21:73:27:CC:A7:57:0A:AF:9B:53:F6:47:A1:F4:EE:A3:36:32:1C:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e056707d-838a-4b8b-bd8e-8a874ea0684d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.155.18.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:a4:52:d0:4f:eb:80:a2:81:c6:80:64:ae:fd:34:30:a9:52:
         f3:fd:12:43:23:8a:25:9c:6a:9f:3d:00:d1:16:c0:e4:a0:bf:
         63:ba:14:72:70:2b:1c:ac:11:22:df:d5:08:27:94:ec:4c:83:
         4f:82:b9:45:23:38:47:d5:e3:89:27:e7:53:51:15:be:76:28:
         7e:d3:d4:30:3d:a1:9b:8d:39:fd:5d:e6:2e:99:e4:36:f7:ed:
         c2:b3:f0:5b:ca:de:51:5e:51:59:85:75:6d:88:92:20:aa:f4:
         88:a6:bc:e6:dd:a2:aa:fa:b4:1d:82:d6:c4:13:21:f0:c8:d5:
         6e:69:24:1f:a4:49:92:b9:e4:9a:e3:f6:ab:ad:09:06:0b:f7:
         8d:1e:28:f1:f1:0d:94:ff:69:ba:40:97:8c:41:8a:48:57:8b:
         ec:15:96:59:0e:b6:ab:5e:9c:c1:ef:64:41:77:e7:57:87:5c:
         fa:55:96:31:48:5d:46:ec:43:6a:64:de:2b:9d:32:cb:8d:54:
         b8:4e:d5:cb:15:ce:46:a2:59:55:85:c4:79:ee:b6:97:3e:7b:
         c8:20:2c:f6:3f:e9:e2:85:1d:84:96:7a:ef:1f:6b:1d:ad:fa:
         5d:58:6f:01:0f:3b:eb:de:fe:54:24:8f:9e:16:85:af:a7:6c:
         cd:68:1e:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:18:12 2026 by rpki-client