Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0a56c444-c0a3-4b03-975e-06645fc31115/38149da3-b996-3207-ae47-a2ea9f87f0be.roa
File:                     38149da3-b996-3207-ae47-a2ea9f87f0be.roa (raw, json)
Hash identifier:          ccmx8kTRdReY0Bt3FlJ2ZZgwPul8AkONXLYMJ2sqnJI=
Subject key identifier:   57:88:40:97:B8:20:C2:BD:06:47:EC:04:4C:3B:F9:DA:64:03:F6:B1
Certificate issuer:       /CN=0a56c444-c0a3-4b03-975e-06645fc31115
Certificate serial:       010D0C9F4328584CF5878CEDDCD0A3D3EEAF1880
Authority key identifier: FF:B3:B6:11:EC:3F:7D:80:F3:08:5F:00:69:01:E4:7A:63:FD:D9:5D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0a56c444-c0a3-4b03-975e-06645fc31115.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0a56c444-c0a3-4b03-975e-06645fc31115/38149da3-b996-3207-ae47-a2ea9f87f0be.roa
Signing time:             Mon 23 Feb 2026 14:00:41 +0000
ROA not before:           Mon 23 Feb 2026 14:00:41 +0000
ROA not after:            Sun 24 May 2026 13:00:41 +0000
asID:                     63023
IP address blocks:        23.137.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0a56c444-c0a3-4b03-975e-06645fc31115/0a56c444-c0a3-4b03-975e-06645fc31115.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0a56c444-c0a3-4b03-975e-06645fc31115/0a56c444-c0a3-4b03-975e-06645fc31115.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0a56c444-c0a3-4b03-975e-06645fc31115.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f5:87:8c:ed:dc:d0:a3:d3:ee:af:18:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a56c444-c0a3-4b03-975e-06645fc31115
        Validity
            Not Before: Feb 23 14:00:41 2026 GMT
            Not After : May 24 13:00:41 2026 GMT
        Subject: CN=d4cee4ab-13f2-4197-b73a-3f0e0e7a51d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:a7:ac:19:a1:5f:a2:e2:b1:97:03:9c:44:c8:
                    94:5f:cf:69:25:f4:64:12:18:cb:f8:2d:6b:8d:6a:
                    a2:92:27:68:55:d0:55:c6:f4:df:31:06:21:f6:15:
                    00:17:53:17:71:ac:cb:8d:5a:d5:42:50:4e:35:a6:
                    f7:03:2d:a3:fb:02:f0:ad:a3:91:c6:ec:5f:08:15:
                    4e:e8:fe:22:97:81:a0:e8:78:c4:32:ca:30:23:42:
                    e0:ae:5c:aa:f0:02:67:9b:a8:48:7d:92:0d:9a:63:
                    50:4b:75:3f:c8:a2:99:8d:5d:34:2d:93:69:3a:83:
                    f3:94:ff:fa:75:eb:3f:cb:b1:f0:45:05:dc:f0:35:
                    d6:11:8b:a7:90:49:d9:f5:db:01:23:fd:8c:66:45:
                    94:4f:bc:85:d7:84:af:60:ff:fa:ee:70:11:3c:f6:
                    48:27:40:07:f6:69:79:0e:03:4e:b9:c9:67:dd:f1:
                    e0:17:10:1e:8e:86:ee:2f:f5:99:eb:3b:91:b6:2a:
                    02:bb:d7:24:09:b9:8b:65:32:17:55:36:a5:91:a1:
                    74:bc:db:42:66:26:af:89:cc:9c:4b:e6:20:11:63:
                    cd:a6:31:dc:f8:2d:3a:b6:2e:08:0c:bf:7c:1e:1b:
                    71:ee:0b:55:bd:16:89:c1:5f:9f:61:63:7a:7b:73:
                    2a:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:88:40:97:B8:20:C2:BD:06:47:EC:04:4C:3B:F9:DA:64:03:F6:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0a56c444-c0a3-4b03-975e-06645fc31115/38149da3-b996-3207-ae47-a2ea9f87f0be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0a56c444-c0a3-4b03-975e-06645fc31115/0a56c444-c0a3-4b03-975e-06645fc31115.crl

            X509v3 Authority Key Identifier:
                keyid:FF:B3:B6:11:EC:3F:7D:80:F3:08:5F:00:69:01:E4:7A:63:FD:D9:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0a56c444-c0a3-4b03-975e-06645fc31115.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.137.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:71:bb:ab:63:1a:20:da:b4:cf:26:25:53:b6:00:d8:4c:7a:
         cd:90:3a:de:dd:4d:bc:2b:0a:86:da:6b:5e:1f:f6:d2:06:61:
         f6:9d:33:7d:5f:00:d7:ea:b9:b7:78:b6:91:9d:9b:32:6a:de:
         ff:0d:b9:1f:27:66:1b:e2:f3:e6:bd:d5:d5:dc:8d:11:9e:98:
         34:e1:ac:aa:7c:2d:df:a5:0a:c0:d6:5b:09:26:55:88:30:88:
         a8:c6:15:e3:4f:93:ff:4e:63:2a:d8:45:66:55:43:39:48:82:
         7d:f5:07:82:dd:74:b1:9d:fe:27:b7:a9:f0:91:b8:f2:5a:cf:
         8e:e1:6c:22:a3:63:20:5d:98:ca:f4:ca:6b:98:90:6a:22:91:
         9d:ae:e5:3c:69:16:fb:41:aa:b5:b3:bd:b4:e8:dc:59:bf:e3:
         4b:0f:55:3f:7a:6d:b7:45:a9:dc:17:8f:e9:16:90:0d:f6:98:
         f8:1d:79:03:46:73:58:90:14:b1:a4:65:35:87:d8:b4:57:48:
         47:d2:b9:00:13:46:34:ef:9c:96:1c:5a:ce:25:df:17:07:d8:
         49:e5:d6:e6:11:9c:b1:64:55:26:09:d1:c7:6d:b0:66:cd:d5:
         71:b2:6f:9a:c2:40:d9:c3:d9:cf:f6:4c:de:3e:89:0e:1c:6c:
         e8:6f:2f:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:56:53 2026 by rpki-client