Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8deb6383-7043-43c4-b39c-395a97ee0114/cfaae5c8-a32a-3937-8b38-0909380010e1.roa
File:                     cfaae5c8-a32a-3937-8b38-0909380010e1.roa (raw, json)
Hash identifier:          a5CGfOUC/beKU+64783JmQho5RojPpYQCfwZwicyyOA=
Subject key identifier:   7A:C6:94:9F:0B:11:C1:1F:29:AC:2B:36:4D:80:25:1B:88:1C:6B:6D
Certificate issuer:       /CN=8deb6383-7043-43c4-b39c-395a97ee0114
Certificate serial:       010D0C9F4328584CE097879876B982BA498767C0
Authority key identifier: E9:6F:FF:46:73:D9:F6:E1:34:56:E9:8D:8F:04:8D:D0:60:1C:E8:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8deb6383-7043-43c4-b39c-395a97ee0114.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8deb6383-7043-43c4-b39c-395a97ee0114/cfaae5c8-a32a-3937-8b38-0909380010e1.roa
Signing time:             Mon 16 Feb 2026 02:00:32 +0000
ROA not before:           Mon 16 Feb 2026 02:00:32 +0000
ROA not after:            Sun 17 May 2026 01:00:32 +0000
asID:                     13925
IP address blocks:        23.131.160.0/24 maxlen: 24
                          23.131.161.0/24 maxlen: 24
                          2620:138:5000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8deb6383-7043-43c4-b39c-395a97ee0114/8deb6383-7043-43c4-b39c-395a97ee0114.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8deb6383-7043-43c4-b39c-395a97ee0114/8deb6383-7043-43c4-b39c-395a97ee0114.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8deb6383-7043-43c4-b39c-395a97ee0114.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e0:97:87:98:76:b9:82:ba:49:87:67:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8deb6383-7043-43c4-b39c-395a97ee0114
        Validity
            Not Before: Feb 16 02:00:32 2026 GMT
            Not After : May 17 01:00:32 2026 GMT
        Subject: CN=c7375f5f-0742-424e-a63b-e20cd69bf926
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a5:e1:53:50:44:5c:bc:db:e6:f1:70:7c:84:
                    0d:7e:c5:07:8b:92:fa:f7:75:0a:ae:ba:7c:a5:9c:
                    fe:1e:16:5f:87:73:68:73:95:7b:7e:cd:f2:1a:94:
                    2b:6d:41:f9:92:7e:c2:84:7d:53:d8:45:95:9a:00:
                    d6:b8:df:3b:36:30:ae:f2:fb:ec:d8:be:2a:9f:88:
                    55:d8:f3:2b:96:b3:01:81:e6:3a:51:d2:d8:63:e9:
                    94:ab:53:8d:aa:55:e2:18:74:ec:2b:99:ac:e9:72:
                    d3:87:b0:0e:ad:3d:4c:4e:78:56:4c:29:f5:e2:5b:
                    39:c5:0b:38:7e:7e:a3:bd:c0:0f:68:5f:d2:0d:85:
                    18:c4:5d:9e:00:e7:8d:04:44:9f:5b:0a:a9:b8:f4:
                    5c:47:52:5c:a6:fc:e5:15:5d:96:bd:44:c8:52:e0:
                    b9:46:57:5e:75:6e:12:74:5e:0a:bc:1b:2d:d4:86:
                    10:cf:b9:a4:c7:59:a2:a8:5c:6f:2a:f9:b6:27:b9:
                    a3:3c:e1:12:18:a6:82:58:a5:00:30:2c:6b:a4:27:
                    6b:7f:44:90:c6:fd:57:9b:26:1d:9a:ad:d0:78:56:
                    c7:95:37:14:fd:9a:db:00:4c:4c:bb:fc:b9:f0:53:
                    27:51:b4:d8:91:0c:63:7b:2a:d4:df:2c:24:26:5f:
                    62:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:C6:94:9F:0B:11:C1:1F:29:AC:2B:36:4D:80:25:1B:88:1C:6B:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8deb6383-7043-43c4-b39c-395a97ee0114/cfaae5c8-a32a-3937-8b38-0909380010e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8deb6383-7043-43c4-b39c-395a97ee0114/8deb6383-7043-43c4-b39c-395a97ee0114.crl

            X509v3 Authority Key Identifier:
                keyid:E9:6F:FF:46:73:D9:F6:E1:34:56:E9:8D:8F:04:8D:D0:60:1C:E8:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8deb6383-7043-43c4-b39c-395a97ee0114.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.131.160.0/23
                IPv6:
                  2620:138:5000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:af:8a:eb:f5:2a:24:6c:66:f0:df:f7:43:f4:e9:08:bb:3e:
         f0:77:6e:91:85:39:03:00:45:e7:5a:57:f8:1d:df:66:69:1c:
         24:5f:d3:34:7f:ad:66:df:63:d3:fb:ea:87:c7:73:42:ce:99:
         88:d1:0b:8b:27:e1:65:7b:7d:a2:c1:e0:ad:23:fb:6d:73:89:
         b7:32:ce:94:ff:bd:92:4d:00:8e:7b:56:9e:9f:55:2c:c3:93:
         6b:93:cc:80:24:11:51:71:f8:fa:34:02:1d:10:93:71:18:b3:
         e1:bd:4a:5f:27:b4:68:b4:40:eb:0e:da:ee:ef:a5:a5:b0:4a:
         1f:0e:87:e9:17:96:36:d0:38:76:ea:3c:4e:98:67:ab:26:d2:
         d8:7b:86:09:e9:93:75:1f:9f:1b:4c:fc:4b:00:5e:bc:d3:6d:
         0b:07:76:d0:02:15:4f:88:26:ea:95:8c:e0:20:98:e3:7c:24:
         67:91:e9:96:c6:2f:a5:33:5a:75:13:54:30:02:1c:41:94:c8:
         79:18:91:eb:01:b4:e8:c4:22:57:e7:bf:75:85:f7:9e:62:09:
         de:e3:c1:90:3f:b5:96:01:cc:23:9c:13:fe:d4:f1:56:ee:2c:
         29:43:c6:e8:70:93:64:92:ac:3c:b9:f3:53:13:b2:48:ce:ac:
         4d:d1:b2:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:08:34 2026 by rpki-client