Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39cfcd95-1931-4846-b938-e8a3b993f2a8/da50a8cf-2a79-3e92-9fbf-4cbe7954bb9c.roa
File:                     da50a8cf-2a79-3e92-9fbf-4cbe7954bb9c.roa (raw, json)
Hash identifier:          E3wTp/9d8Q6BZJ5T1+BUa9UqpRMeCCQEghAjmvNDis0=
Subject key identifier:   7B:9F:BD:8C:8E:13:FC:6E:5A:F9:3B:8F:58:E6:82:3B:12:4C:E4:A9
Certificate issuer:       /CN=39cfcd95-1931-4846-b938-e8a3b993f2a8
Certificate serial:       010D0C9F4328584CF5878D0C3828E8CF664C7980
Authority key identifier: A6:1B:F9:85:3A:1E:5C:B3:ED:13:85:38:AA:19:47:1F:11:40:E8:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39cfcd95-1931-4846-b938-e8a3b993f2a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39cfcd95-1931-4846-b938-e8a3b993f2a8/da50a8cf-2a79-3e92-9fbf-4cbe7954bb9c.roa
Signing time:             Mon 23 Feb 2026 14:00:41 +0000
ROA not before:           Mon 23 Feb 2026 14:00:41 +0000
ROA not after:            Sun 24 May 2026 13:00:41 +0000
asID:                     63023
IP address blocks:        23.137.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39cfcd95-1931-4846-b938-e8a3b993f2a8/39cfcd95-1931-4846-b938-e8a3b993f2a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39cfcd95-1931-4846-b938-e8a3b993f2a8/39cfcd95-1931-4846-b938-e8a3b993f2a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39cfcd95-1931-4846-b938-e8a3b993f2a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f5:87:8d:0c:38:28:e8:cf:66:4c:79:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39cfcd95-1931-4846-b938-e8a3b993f2a8
        Validity
            Not Before: Feb 23 14:00:41 2026 GMT
            Not After : May 24 13:00:41 2026 GMT
        Subject: CN=02ff47db-71a4-4da2-bc10-a9bba8cc83ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:b7:3b:87:1d:ec:49:46:64:df:a3:d4:08:da:
                    d4:39:29:65:8f:29:46:da:a5:cd:0b:78:ae:03:0c:
                    2e:8b:5e:7c:c9:f1:37:eb:21:04:71:57:47:85:56:
                    4f:dd:91:58:02:d3:19:52:d1:05:82:78:a1:c1:74:
                    c8:17:5b:5e:da:40:58:74:75:8f:d5:d2:a2:27:d8:
                    dc:0b:e7:9f:5b:02:3a:b4:95:11:d1:ab:0c:ad:86:
                    aa:e2:51:18:08:eb:76:3c:b3:21:0d:63:b8:f6:85:
                    92:45:74:a1:1f:c5:ed:90:49:4c:e2:dd:ff:46:af:
                    73:f2:c0:ea:8a:b0:1c:ca:58:55:af:38:d9:5d:87:
                    74:c3:58:90:34:78:64:e9:da:6d:f5:97:9d:6b:6b:
                    87:7c:dd:91:81:fb:8a:18:72:b0:89:59:1e:7a:30:
                    44:64:c1:c6:cd:28:83:70:27:68:a8:17:a2:a1:51:
                    86:ec:d2:3a:12:13:2d:73:13:e0:b4:b2:5f:6a:3c:
                    54:8a:02:b7:f0:2d:9e:b3:8e:05:0f:58:f8:04:a9:
                    dc:d9:e2:76:29:40:f9:e8:e8:95:c1:ac:c8:ff:55:
                    32:0a:c6:88:19:ce:d6:05:97:71:55:2e:f7:60:b3:
                    b9:21:0a:e5:35:fd:44:7c:75:51:eb:7b:9e:99:ac:
                    3b:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:9F:BD:8C:8E:13:FC:6E:5A:F9:3B:8F:58:E6:82:3B:12:4C:E4:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39cfcd95-1931-4846-b938-e8a3b993f2a8/da50a8cf-2a79-3e92-9fbf-4cbe7954bb9c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39cfcd95-1931-4846-b938-e8a3b993f2a8/39cfcd95-1931-4846-b938-e8a3b993f2a8.crl

            X509v3 Authority Key Identifier:
                keyid:A6:1B:F9:85:3A:1E:5C:B3:ED:13:85:38:AA:19:47:1F:11:40:E8:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39cfcd95-1931-4846-b938-e8a3b993f2a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.137.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:7f:0b:92:91:bd:b3:b3:08:51:05:43:30:be:8b:88:28:73:
         2f:87:48:db:38:f9:5f:14:ef:a7:45:a6:e4:b5:79:e0:60:bb:
         34:24:c1:a3:98:da:40:6c:85:ea:d9:46:ec:5e:12:91:e5:d2:
         e0:9e:b0:c4:51:5c:d5:47:6c:51:3b:a9:c2:bd:27:fd:b3:25:
         cb:63:fb:b9:ae:36:0a:0d:d6:79:88:aa:cb:88:a3:31:d8:e3:
         e0:93:e5:8e:5a:02:1a:6d:86:01:86:27:4c:ff:a1:c4:0a:01:
         fd:4b:18:7d:ff:3f:c0:53:ac:df:6a:27:45:1f:43:60:78:e5:
         85:3c:68:09:8d:8f:0c:cb:bc:f0:75:cd:79:7e:6d:a7:ec:54:
         06:36:23:74:6e:44:86:20:aa:1a:81:5e:1a:02:9a:fd:4c:46:
         c4:ec:7a:6f:f9:9a:34:8d:b4:4a:66:14:f7:97:87:83:30:1c:
         1b:b6:e5:25:66:09:07:0c:f7:af:f8:64:4c:0d:91:02:de:83:
         53:04:b5:02:8b:84:ad:df:0b:98:0f:05:4a:78:ca:6a:6b:a3:
         aa:ce:1a:b5:d5:f0:65:98:37:cd:3d:51:8a:71:76:ec:e5:07:
         bc:eb:f3:fe:19:ac:d7:f3:dd:30:c1:66:1b:18:e9:7f:49:0c:
         f6:75:7e:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:45:18 2026 by rpki-client