Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/b4648fdc-ac99-31eb-8591-7ffa3ffc4150.roa
File:                     b4648fdc-ac99-31eb-8591-7ffa3ffc4150.roa (raw, json)
Hash identifier:          RzoVnzqSRWMWGb790ck9a4pgcnROUfxSLmrG7BKoVBw=
Subject key identifier:   C2:CA:FD:01:D1:DD:FD:20:3E:9C:7D:38:0D:FD:48:7F:E7:54:5F:08
Certificate issuer:       /CN=b02dc6e7-fa1a-4acf-a036-5b4487100de9
Certificate serial:       010D0C9F4328584CCD0CA26E46B8B77F27B594C0
Authority key identifier: CD:A8:CE:37:4F:36:4A:E1:38:F6:F0:7E:CF:6D:76:B1:CA:C4:E8:3E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/b4648fdc-ac99-31eb-8591-7ffa3ffc4150.roa
Signing time:             Mon 09 Feb 2026 02:00:31 +0000
ROA not before:           Mon 09 Feb 2026 02:00:31 +0000
ROA not after:            Sun 10 May 2026 01:00:31 +0000
asID:                     852
IP address blocks:        43.245.236.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/b02dc6e7-fa1a-4acf-a036-5b4487100de9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/b02dc6e7-fa1a-4acf-a036-5b4487100de9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:cd:0c:a2:6e:46:b8:b7:7f:27:b5:94:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b02dc6e7-fa1a-4acf-a036-5b4487100de9
        Validity
            Not Before: Feb  9 02:00:31 2026 GMT
            Not After : May 10 01:00:31 2026 GMT
        Subject: CN=c3e7fe11-fdf1-4d58-95c2-2d6946c041ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:5a:c7:a9:2f:dd:e1:bc:75:c3:9e:6f:c1:c0:
                    81:f7:ce:ca:1b:c6:97:cc:cf:21:33:4d:09:c4:56:
                    97:d1:9a:4a:d7:8d:b7:5a:2a:ec:28:c8:37:5b:8a:
                    79:03:66:8e:32:2a:44:90:1c:0b:d3:3a:23:a2:d8:
                    e7:6c:f6:65:62:05:0b:72:23:4f:fe:34:36:f1:a2:
                    b5:ea:55:6b:cf:d5:b1:0b:58:95:ec:0c:e4:fb:92:
                    56:76:ca:ad:34:61:82:4b:c1:0f:9a:f2:9d:d3:da:
                    a2:a7:b1:e1:93:4b:57:c7:54:df:d3:6d:16:af:24:
                    a9:31:a8:70:3d:25:f1:89:17:40:1a:09:36:38:f5:
                    b8:19:8b:6e:46:91:5c:ed:96:bd:6c:09:c1:ca:4e:
                    0d:f9:9f:fa:1f:29:e5:e8:40:76:b1:c7:aa:84:f5:
                    85:e2:79:90:12:09:36:2a:93:d7:02:fe:8c:07:23:
                    e5:1d:09:9c:e0:b5:cc:a3:04:94:d7:f7:b5:79:42:
                    5f:9a:6a:f6:a9:68:9a:c9:9d:3d:eb:44:5a:b0:6a:
                    99:4e:12:8d:d4:a1:76:25:a1:5e:24:ae:d3:fe:d0:
                    3f:c5:09:ab:13:2d:a9:11:c4:90:58:44:a8:26:7e:
                    8e:50:c7:c4:dd:f6:87:b3:d2:81:b1:37:13:a3:94:
                    0e:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:CA:FD:01:D1:DD:FD:20:3E:9C:7D:38:0D:FD:48:7F:E7:54:5F:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/b4648fdc-ac99-31eb-8591-7ffa3ffc4150.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/b02dc6e7-fa1a-4acf-a036-5b4487100de9.crl

            X509v3 Authority Key Identifier:
                keyid:CD:A8:CE:37:4F:36:4A:E1:38:F6:F0:7E:CF:6D:76:B1:CA:C4:E8:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.245.236.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:6c:87:52:46:67:36:f4:ed:a4:b0:08:a0:ef:f7:a4:c2:97:
         6d:9a:e2:06:18:d1:9b:ca:54:34:e4:10:60:a6:48:34:b9:1a:
         e4:6e:ec:ba:d2:14:2e:cc:81:e1:86:cd:dc:69:bc:46:f1:47:
         0c:cc:45:15:05:c1:0f:22:4b:9d:4b:eb:c4:52:27:ce:46:7d:
         f2:3b:8a:00:2f:12:4d:e7:c2:c8:e7:1a:80:2a:d5:ef:bc:fb:
         73:31:04:dd:6d:02:0a:58:c2:05:54:76:3c:63:a5:88:86:cc:
         44:52:67:e8:0f:64:2a:d3:eb:f5:e1:d0:2b:e1:19:b2:36:8a:
         ad:8b:a6:f3:5c:33:ee:62:b4:df:42:fe:3e:a2:a8:b7:41:5d:
         11:75:1d:50:2b:d3:19:d1:f5:c6:c3:4b:11:f3:98:bc:df:c3:
         c8:a3:ab:ca:93:8f:9a:67:77:a1:2a:b7:dd:07:29:1d:f1:f1:
         9d:6b:e9:a9:95:2f:e4:b4:ec:98:b6:f7:63:fd:41:7b:0a:e4:
         8a:c5:ef:2a:3b:80:fc:9f:2c:ab:5c:10:72:e7:49:06:d0:6f:
         d8:46:48:99:85:c7:be:7f:7b:be:73:b9:a7:8b:4e:76:22:86:
         08:8a:7b:92:4f:c4:14:24:b0:bc:b6:df:a5:de:2e:06:b8:97:
         df:c2:64:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:22:40 2026 by rpki-client