Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1fccd091-855f-326e-a4f4-19c1ae871dcc.roa
File:                     1fccd091-855f-326e-a4f4-19c1ae871dcc.roa (raw, json)
Hash identifier:          lmzHGTWpLEmAptHXnSw2/g83GrKlT+4SVQizsxOol5E=
Subject key identifier:   7B:14:70:71:C7:A8:3A:E4:5D:40:6C:5C:CE:70:32:27:80:6A:B5:86
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584CF42216BB471DE0EFFDFF7080
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1fccd091-855f-326e-a4f4-19c1ae871dcc.roa
Signing time:             Mon 23 Feb 2026 02:00:31 +0000
ROA not before:           Mon 23 Feb 2026 02:00:31 +0000
ROA not after:            Sun 24 May 2026 01:00:31 +0000
asID:                     30036
IP address blocks:        173.24.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f4:22:16:bb:47:1d:e0:ef:fd:ff:70:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb 23 02:00:31 2026 GMT
            Not After : May 24 01:00:31 2026 GMT
        Subject: CN=a28e4dd5-2ef5-4303-a77c-b75f5857a529
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ca:41:5e:a5:69:e6:d4:44:a3:cf:be:5d:a2:
                    b6:f2:a2:35:e2:06:b3:db:d0:85:b9:6d:d3:86:0b:
                    2d:22:d9:b0:03:6a:b0:06:ca:df:f9:23:0a:a3:52:
                    c4:64:ae:1a:fd:ef:95:1b:31:87:d3:9a:fd:88:01:
                    7b:4a:68:f1:cd:6a:ed:bb:a7:46:1d:ac:e0:b7:c0:
                    86:06:13:64:59:43:7f:34:9f:2b:fc:87:df:5b:09:
                    c6:76:b5:e7:1a:c6:e1:27:9d:4b:27:ab:22:8f:ab:
                    14:27:f5:76:1c:8b:b9:f6:4e:e1:70:02:4a:21:58:
                    a4:5a:d2:29:f6:ed:99:2b:4a:6b:f8:62:47:05:dc:
                    13:17:7f:4d:f0:ca:1c:f7:65:8c:77:8d:8f:73:63:
                    7a:8a:30:32:fe:45:db:d8:c8:fa:6c:9c:ea:ca:55:
                    17:4b:9d:ee:04:e8:7d:d2:8c:91:36:15:cd:51:e8:
                    84:d6:f2:3c:84:6e:b8:16:95:6f:77:e1:8a:9f:b1:
                    5d:0d:c2:14:10:81:d8:17:ae:7d:1d:a6:a8:6d:e9:
                    26:33:5a:d5:29:a4:4f:db:81:fd:c3:1d:a9:15:64:
                    a5:da:6d:9f:04:6b:4b:68:d1:d8:20:49:1b:66:8a:
                    32:b3:07:62:75:12:94:bc:b0:d6:e0:83:c5:d8:01:
                    dd:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:14:70:71:C7:A8:3A:E4:5D:40:6C:5C:CE:70:32:27:80:6A:B5:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1fccd091-855f-326e-a4f4-19c1ae871dcc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.24.165.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:51:2a:84:06:aa:49:e7:7a:2f:15:fc:0c:5f:ed:62:1f:26:
         45:9e:be:e8:0f:4c:b0:df:be:d7:f6:cc:54:4e:2e:66:e0:e7:
         c6:45:0f:e9:70:b1:8f:69:4f:37:48:6a:f4:ba:c2:f0:b3:11:
         2e:49:93:64:0c:05:20:e6:bf:aa:7a:28:46:34:ce:df:91:7f:
         6f:fa:7a:1c:83:81:7f:28:59:57:07:bf:df:8e:a4:5b:19:f3:
         74:d2:b2:5e:2f:06:90:91:ee:90:92:18:da:fd:44:67:81:e8:
         17:03:1f:6a:6b:ef:66:fc:74:76:3c:91:dc:5d:82:6f:55:23:
         af:fa:00:03:9b:df:85:13:07:88:4d:8c:ee:bd:d9:48:c7:60:
         11:63:0a:ad:75:bd:60:a0:db:ef:0b:4f:58:96:bd:82:2b:4e:
         3a:d1:75:f2:56:fd:3a:2a:fb:d8:64:fe:75:4a:c7:79:2f:56:
         94:1a:95:c6:d9:57:e2:50:6c:76:cb:f3:cd:ea:dc:f0:f5:f1:
         3e:61:4f:3d:7f:53:a0:33:ea:dc:62:8f:98:2c:0e:71:3f:aa:
         5d:61:99:55:51:18:4f:bf:ce:29:3e:38:c0:c5:05:9a:8b:03:
         cd:77:51:cf:76:7f:17:01:1f:35:68:7a:94:90:c2:7b:e5:5a:
         41:59:ad:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:59:49 2026 by rpki-client