Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23fa747f-0e53-4654-913d-ebe4ae8f453b/0d0d9704-647b-32f6-9304-e2dd0f7e7d05.roa
File:                     0d0d9704-647b-32f6-9304-e2dd0f7e7d05.roa (raw, json)
Hash identifier:          HZHZ67TKSgJNvFLrbkiSJCYovcg9VT44YJ5ZfRC/oFY=
Subject key identifier:   6E:A8:2C:B9:8F:3B:59:9B:31:B6:B0:25:D8:66:D8:97:AE:BA:8F:01
Certificate issuer:       /CN=23fa747f-0e53-4654-913d-ebe4ae8f453b
Certificate serial:       010D0C9F4328584CF852366FAC3EC672B1F5F6C0
Authority key identifier: 4B:07:70:44:0A:64:F7:A4:10:4A:2A:58:81:04:85:C1:C9:B1:EE:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23fa747f-0e53-4654-913d-ebe4ae8f453b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23fa747f-0e53-4654-913d-ebe4ae8f453b/0d0d9704-647b-32f6-9304-e2dd0f7e7d05.roa
Signing time:             Tue 24 Feb 2026 14:00:41 +0000
ROA not before:           Tue 24 Feb 2026 14:00:41 +0000
ROA not after:            Mon 25 May 2026 13:00:41 +0000
asID:                     11170
IP address blocks:        74.118.152.0/21 maxlen: 24
                          142.147.55.0/24 maxlen: 24
                          208.79.240.0/22 maxlen: 24
                          2607:fe70::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23fa747f-0e53-4654-913d-ebe4ae8f453b/23fa747f-0e53-4654-913d-ebe4ae8f453b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23fa747f-0e53-4654-913d-ebe4ae8f453b/23fa747f-0e53-4654-913d-ebe4ae8f453b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23fa747f-0e53-4654-913d-ebe4ae8f453b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f8:52:36:6f:ac:3e:c6:72:b1:f5:f6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23fa747f-0e53-4654-913d-ebe4ae8f453b
        Validity
            Not Before: Feb 24 14:00:41 2026 GMT
            Not After : May 25 13:00:41 2026 GMT
        Subject: CN=ad8abbf7-60df-4a12-b853-2bf388dbb07a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:91:1c:88:ef:31:41:f3:24:a9:68:fe:2a:d0:
                    50:ba:9a:31:b4:e3:3b:ad:f5:65:d1:6e:c5:0a:7e:
                    eb:2d:4b:99:f5:8a:36:fb:57:e3:89:b5:da:3b:66:
                    66:ca:23:41:af:47:a7:dc:6c:da:2c:e1:92:7c:7c:
                    d0:6b:73:03:9b:88:7e:54:18:f0:83:b3:03:e2:d8:
                    1b:5d:ba:6e:22:ee:18:4c:eb:36:5e:1f:ec:d3:f1:
                    09:ab:53:97:66:63:cd:b5:c6:d6:46:6e:95:ff:2b:
                    a3:31:53:1a:bf:86:a7:df:50:16:45:41:57:e0:66:
                    a3:69:15:29:fb:c6:d3:10:46:7a:80:ad:3d:62:d0:
                    71:91:53:a5:77:a4:5a:1d:d9:1f:af:5d:c4:ba:14:
                    a0:e7:ae:2d:ca:b8:05:f6:ce:28:af:ce:8f:c3:8a:
                    de:33:0a:b5:a0:d6:20:f3:47:e7:e4:a4:7e:4b:15:
                    f8:c8:1e:57:7d:3d:65:db:11:2b:5e:f6:a3:3e:b6:
                    c4:68:07:96:fb:02:a9:dc:0e:25:3d:42:5c:f0:21:
                    22:4e:8e:79:1e:83:f1:28:0c:42:76:d8:6f:81:a4:
                    52:a7:35:77:f5:2c:62:05:8d:17:5d:4e:14:7f:f9:
                    32:41:e8:50:25:af:b1:d0:c0:4f:36:02:87:cd:03:
                    00:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:A8:2C:B9:8F:3B:59:9B:31:B6:B0:25:D8:66:D8:97:AE:BA:8F:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23fa747f-0e53-4654-913d-ebe4ae8f453b/0d0d9704-647b-32f6-9304-e2dd0f7e7d05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23fa747f-0e53-4654-913d-ebe4ae8f453b/23fa747f-0e53-4654-913d-ebe4ae8f453b.crl

            X509v3 Authority Key Identifier:
                keyid:4B:07:70:44:0A:64:F7:A4:10:4A:2A:58:81:04:85:C1:C9:B1:EE:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23fa747f-0e53-4654-913d-ebe4ae8f453b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.118.152.0/21
                  142.147.55.0/24
                  208.79.240.0/22
                IPv6:
                  2607:fe70::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:77:ed:db:e0:c0:00:0a:16:e0:b9:78:5a:0e:c8:46:bf:b8:
         a4:26:23:dd:b8:83:35:d2:a3:c0:2d:88:1c:bd:29:b5:54:05:
         85:98:4f:bc:ed:b7:2e:04:aa:9c:4f:72:9c:d2:96:86:c8:ec:
         e7:32:ce:96:7f:e9:65:34:1f:2e:dc:e7:1e:76:c8:2f:1f:74:
         ed:e0:56:bd:ef:8a:33:09:ef:ee:21:48:a2:42:6a:7f:7e:60:
         e1:1c:99:1a:03:ba:2f:73:ab:49:ef:f4:50:97:d5:89:29:a9:
         cd:c0:5d:8a:45:d7:33:cd:cd:fc:6a:56:4b:c9:b3:c5:45:8c:
         73:ab:28:f8:ca:c3:02:0a:12:38:07:85:fb:a0:7a:f2:3c:85:
         f4:65:d6:75:0d:0c:73:ab:8e:68:e6:d1:92:ec:07:fd:6e:fe:
         e4:1f:d5:be:38:d5:3d:b1:df:85:22:00:d9:fd:e3:f3:8c:9e:
         d0:5f:9e:97:b4:d6:fb:45:2f:b5:f4:a0:03:67:a4:85:21:30:
         c0:5d:45:6c:30:1c:34:42:e8:94:33:08:f7:fc:e1:23:eb:91:
         d1:31:5b:a9:62:3b:16:59:35:10:dd:55:71:ac:ee:02:74:86:
         82:83:83:dc:0f:44:aa:a8:d7:ea:ad:fb:c9:9b:bb:ea:6b:d9:
         bf:99:01:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:39:08 2026 by rpki-client