Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6a80343-5648-4b19-a2ae-d61e9d8fd359/7eb4c798-440e-3ba5-9cba-9d8b7059e315.roa
File:                     7eb4c798-440e-3ba5-9cba-9d8b7059e315.roa (raw, json)
Hash identifier:          SJl8OAdkEdI1QGpYi4UZ7W5v7cOMxmFQPxSH9PODl4Q=
Subject key identifier:   DA:BE:00:A4:85:0A:A8:33:28:F2:32:6E:CF:E7:58:A4:7D:4D:1C:98
Certificate issuer:       /CN=f6a80343-5648-4b19-a2ae-d61e9d8fd359
Certificate serial:       010D0C9F4328584D7F9AA0004099F7CA5361AA00
Authority key identifier: 4B:4C:33:15:8C:7A:06:17:06:BC:29:29:2B:94:64:52:3B:BB:24:2F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6a80343-5648-4b19-a2ae-d61e9d8fd359.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6a80343-5648-4b19-a2ae-d61e9d8fd359/7eb4c798-440e-3ba5-9cba-9d8b7059e315.roa
Signing time:             Tue 14 Apr 2026 01:00:24 +0000
ROA not before:           Tue 14 Apr 2026 01:00:24 +0000
ROA not after:            Mon 13 Jul 2026 01:00:24 +0000
asID:                     46743
IP address blocks:        23.139.156.0/24 maxlen: 24
                          2602:f62b::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6a80343-5648-4b19-a2ae-d61e9d8fd359/f6a80343-5648-4b19-a2ae-d61e9d8fd359.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6a80343-5648-4b19-a2ae-d61e9d8fd359/f6a80343-5648-4b19-a2ae-d61e9d8fd359.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6a80343-5648-4b19-a2ae-d61e9d8fd359.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7f:9a:a0:00:40:99:f7:ca:53:61:aa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6a80343-5648-4b19-a2ae-d61e9d8fd359
        Validity
            Not Before: Apr 14 01:00:24 2026 GMT
            Not After : Jul 13 01:00:24 2026 GMT
        Subject: CN=1f2534fe-e0ec-4617-ae94-5697373a39eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c7:39:b8:82:da:bf:d4:3d:7c:ef:cd:a2:55:
                    fc:06:9e:54:ee:2d:ec:60:9d:11:35:ac:ad:98:e2:
                    ce:dd:ae:95:1a:11:dd:3c:06:d8:56:65:13:8e:8d:
                    1c:c5:a6:89:6d:ea:f4:65:cf:e5:d5:12:51:76:87:
                    2c:98:59:8b:6e:b5:45:e0:82:c6:b4:1c:26:69:81:
                    f6:c1:84:76:43:0a:67:a4:7c:d7:be:a3:b8:66:54:
                    ec:e3:a1:bb:99:56:0e:df:ee:6f:96:23:fe:dd:2d:
                    f7:36:17:13:65:a8:a5:ac:f2:1e:8f:a0:7e:c2:ea:
                    50:58:96:93:70:05:10:84:27:09:01:65:51:c7:cb:
                    dc:27:32:ba:99:77:e4:b8:f9:79:c6:93:c6:5d:de:
                    68:68:8f:ab:5d:71:d3:bf:04:d0:29:59:62:a9:23:
                    c2:cb:ce:2b:a4:6b:b7:49:c4:f8:bc:f8:3a:2b:97:
                    04:9f:84:de:b3:b3:d7:b7:2b:4c:d7:18:af:72:d5:
                    a0:b3:6d:98:5b:f3:c2:4e:b2:84:5f:80:f3:05:74:
                    7b:8b:7f:35:01:29:90:a6:00:d3:2a:22:c8:90:bf:
                    0f:1f:77:83:91:b5:1d:56:72:41:68:ed:e7:02:42:
                    68:96:0f:02:62:fd:3a:7d:c6:91:c6:4d:41:1e:32:
                    73:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:BE:00:A4:85:0A:A8:33:28:F2:32:6E:CF:E7:58:A4:7D:4D:1C:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6a80343-5648-4b19-a2ae-d61e9d8fd359/7eb4c798-440e-3ba5-9cba-9d8b7059e315.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6a80343-5648-4b19-a2ae-d61e9d8fd359/f6a80343-5648-4b19-a2ae-d61e9d8fd359.crl

            X509v3 Authority Key Identifier:
                keyid:4B:4C:33:15:8C:7A:06:17:06:BC:29:29:2B:94:64:52:3B:BB:24:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6a80343-5648-4b19-a2ae-d61e9d8fd359.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.139.156.0/24
                IPv6:
                  2602:f62b::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:49:76:1f:35:4b:83:22:88:df:69:29:36:37:33:15:0e:8d:
         47:e5:d2:a0:31:a8:0b:0f:65:f5:21:d8:b7:58:b1:39:8a:47:
         50:07:95:62:d6:b4:9e:2a:1f:60:98:47:54:15:7a:0d:06:63:
         70:18:ff:6a:25:f5:63:0c:8d:60:c4:b0:75:a4:44:3a:02:0c:
         8d:db:56:15:85:3c:e8:67:4d:ed:1d:f6:a8:a7:0f:ce:a9:e6:
         1d:e1:f6:37:86:3c:4b:1d:df:e3:43:be:6c:cd:58:c7:c3:1b:
         6d:7b:c8:6f:1f:6b:df:54:09:3b:5f:d3:ad:39:96:d0:b7:b4:
         c5:19:f1:e4:fa:bd:f5:c5:cc:1d:fa:ac:ec:f0:8a:2e:46:19:
         17:f9:7c:32:09:3e:c9:7f:fa:3d:22:2d:65:eb:ef:d2:d8:4c:
         1c:cc:ca:24:8a:d5:f3:bc:68:8a:a7:ad:8d:9d:8d:03:ea:3c:
         f9:75:df:da:1e:69:38:bb:65:ca:dc:55:96:d4:b4:94:73:ce:
         dc:20:e6:23:f1:c7:68:cb:fe:23:0a:cb:77:24:0b:1d:ca:a8:
         4d:f4:0b:8a:05:ac:fe:d1:4f:88:cb:f7:96:85:01:fb:23:6a:
         b1:9f:58:f2:4f:4b:95:c2:83:f6:ed:05:8e:35:e5:19:ed:ff:
         77:03:2c:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:02:22 2026 by rpki-client