Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/4420efee-d6ff-34dc-a90c-8a60f36af65e.roa
File:                     4420efee-d6ff-34dc-a90c-8a60f36af65e.roa (raw, json)
Hash identifier:          Jjo/8f35c98uDaO0ltRE/YBUrJaBH++QiXZGCVLTu1o=
Subject key identifier:   53:94:BB:3D:81:62:5C:19:4D:D8:C8:0E:B5:F3:1F:41:68:13:E2:37
Certificate issuer:       /CN=e96b24c4-b692-4b94-83f5-1da5490b8f3c
Certificate serial:       010D0C9F4328584CC7773968947E6622623F2780
Authority key identifier: AB:B6:E3:90:36:46:4B:D0:0B:9A:D5:22:5A:5E:A3:60:7C:9D:D5:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/4420efee-d6ff-34dc-a90c-8a60f36af65e.roa
Signing time:             Sat 07 Feb 2026 02:00:31 +0000
ROA not before:           Sat 07 Feb 2026 02:00:31 +0000
ROA not after:            Fri 08 May 2026 01:00:31 +0000
asID:                     36231
IP address blocks:        172.111.32.0/23 maxlen: 24
                          172.111.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c7:77:39:68:94:7e:66:22:62:3f:27:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e96b24c4-b692-4b94-83f5-1da5490b8f3c
        Validity
            Not Before: Feb  7 02:00:31 2026 GMT
            Not After : May  8 01:00:31 2026 GMT
        Subject: CN=d667ed36-fce7-4e65-ae45-39fc2bb08d64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:63:14:5f:1e:15:24:70:a1:34:ec:d0:b4:10:
                    52:e0:09:65:c4:bb:3e:e6:3a:9a:e3:5d:01:85:08:
                    ce:39:99:fa:62:15:5c:b1:54:9a:50:b5:6d:ce:b1:
                    f0:94:bc:24:5f:0b:fa:a9:a6:96:ad:17:6a:30:18:
                    47:36:11:44:f4:cc:d3:92:92:05:c3:91:05:2f:a9:
                    a3:44:e9:67:c6:f7:c0:70:81:92:b9:cc:99:8b:f0:
                    5c:cf:e3:8b:a6:17:b3:83:53:4f:b6:98:b5:df:49:
                    78:6b:9e:2c:fb:a8:c2:34:92:0f:83:e9:5a:d4:06:
                    34:0e:a6:8b:40:2b:26:f3:f6:1f:e1:88:b2:d4:1b:
                    d1:bf:34:ce:65:f1:1f:cf:bb:f0:0e:b2:df:f7:f9:
                    80:b0:22:e6:fc:02:cd:79:ef:f1:77:c2:cc:9f:fe:
                    e2:20:6f:fa:0f:af:f0:3e:8d:06:82:67:3c:65:9c:
                    2c:fc:9a:d9:49:66:b8:bd:4f:19:a0:d5:be:10:4e:
                    21:79:42:c2:86:9d:fa:03:42:c7:b5:46:21:66:60:
                    07:4e:9a:4f:3d:11:cd:c7:8e:0b:bb:30:41:27:59:
                    9a:1b:49:95:83:43:32:10:df:82:ac:44:3e:da:bc:
                    6a:c6:26:7d:3a:f6:cb:0d:98:0d:0f:9d:bb:61:80:
                    77:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:94:BB:3D:81:62:5C:19:4D:D8:C8:0E:B5:F3:1F:41:68:13:E2:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/4420efee-d6ff-34dc-a90c-8a60f36af65e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.crl

            X509v3 Authority Key Identifier:
                keyid:AB:B6:E3:90:36:46:4B:D0:0B:9A:D5:22:5A:5E:A3:60:7C:9D:D5:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.32.0/23
                  172.111.35.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:65:50:51:76:79:51:15:3d:74:58:35:c4:a4:87:76:80:04:
         75:d4:97:fc:68:26:ab:c9:d5:98:41:74:b2:c8:71:30:12:be:
         e0:57:0a:9e:f0:0e:5d:06:cc:92:eb:9c:16:46:1b:5f:77:69:
         f8:a3:ed:0c:8c:d2:76:c5:7f:c3:a3:f1:bd:ad:a0:b2:a8:88:
         e2:c0:9d:dc:01:73:0f:15:a7:ea:50:ed:ce:74:07:22:61:32:
         90:87:20:cc:99:a0:46:40:ca:58:14:9c:21:17:03:a9:e2:ff:
         3d:82:de:44:2d:89:bf:2f:cd:3c:5a:a3:54:ab:7e:c1:fe:3b:
         b6:e4:4d:53:10:d0:d2:8c:b8:63:8e:59:24:f6:ea:4d:d5:ce:
         0f:f2:ee:48:17:6a:95:76:70:46:94:83:b2:1e:5f:2a:da:6f:
         07:fa:1c:62:e1:85:fc:86:dd:37:0b:45:d6:68:88:a0:f5:6a:
         a3:01:57:75:97:50:14:2f:14:54:8e:f7:cc:f1:36:f1:a1:73:
         bb:a1:76:ad:e9:11:88:58:e6:24:30:59:b8:f8:67:6e:e6:87:
         fd:70:fc:be:74:a3:a7:6c:b4:79:5b:24:35:c2:73:3e:e1:7b:
         78:e4:72:4f:52:33:f1:40:08:6b:f8:24:fe:22:43:50:db:91:
         2f:6b:e6:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:38:12 2026 by rpki-client