Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9a6b843c-48fb-4949-86c8-29317b8cb12c/70c1be47-61d4-30b1-8808-92c328e5b495.roa
File:                     70c1be47-61d4-30b1-8808-92c328e5b495.roa (raw, json)
Hash identifier:          FIlVml4pWbkpzfvwDb00UIry1INiAQwn5Q6QtoTimTw=
Subject key identifier:   8D:27:20:38:95:F6:25:70:D4:D9:26:CD:9D:FE:26:02:DA:5E:D2:01
Certificate issuer:       /CN=9a6b843c-48fb-4949-86c8-29317b8cb12c
Certificate serial:       010D0C9F4328584CD407A4AFA2F1A6E02F4C7480
Authority key identifier: C0:85:62:C5:E0:98:47:70:33:E5:23:3A:DD:A8:4F:34:6E:10:F0:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9a6b843c-48fb-4949-86c8-29317b8cb12c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9a6b843c-48fb-4949-86c8-29317b8cb12c/70c1be47-61d4-30b1-8808-92c328e5b495.roa
Signing time:             Wed 11 Feb 2026 14:00:41 +0000
ROA not before:           Wed 11 Feb 2026 14:00:41 +0000
ROA not after:            Tue 12 May 2026 13:00:41 +0000
asID:                     395409
IP address blocks:        23.143.32.0/24 maxlen: 24
                          198.51.233.0/24 maxlen: 24
                          2620:2:6000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9a6b843c-48fb-4949-86c8-29317b8cb12c/9a6b843c-48fb-4949-86c8-29317b8cb12c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9a6b843c-48fb-4949-86c8-29317b8cb12c/9a6b843c-48fb-4949-86c8-29317b8cb12c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9a6b843c-48fb-4949-86c8-29317b8cb12c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d4:07:a4:af:a2:f1:a6:e0:2f:4c:74:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a6b843c-48fb-4949-86c8-29317b8cb12c
        Validity
            Not Before: Feb 11 14:00:41 2026 GMT
            Not After : May 12 13:00:41 2026 GMT
        Subject: CN=02265e11-241e-4f21-aac4-ae87b96ab54e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:94:b2:ac:20:c2:43:cb:72:16:54:a8:08:7d:
                    46:44:55:14:b7:a1:c6:0c:bd:61:f1:41:ed:0f:20:
                    02:ce:5b:fb:e5:38:18:ad:b4:08:17:8a:46:f9:66:
                    8f:aa:d8:f6:5c:a1:da:34:43:39:57:07:72:3a:4c:
                    5a:a7:cd:ac:15:2f:bf:dc:71:99:74:6d:9f:fc:c4:
                    70:32:ad:88:36:57:6b:21:df:6b:c3:f6:90:63:95:
                    fd:87:a1:fc:d1:98:9c:50:45:9d:59:a9:64:e7:43:
                    fb:28:cd:4f:2d:e5:dd:1b:6f:5b:49:47:c5:c5:ff:
                    e5:51:7d:68:da:c1:82:43:bf:9f:08:47:c2:3d:01:
                    26:24:73:dc:d9:87:92:d5:bf:b5:c9:01:45:29:ea:
                    23:78:a9:17:c0:8f:ac:47:a9:6d:69:8f:6e:1f:a9:
                    87:23:5a:28:19:b0:12:0a:27:ff:fb:a3:1a:2e:93:
                    a7:a8:4c:d6:32:d1:df:ea:ef:ff:c9:12:1d:a4:ca:
                    e5:47:04:20:47:25:70:9f:51:4e:26:b6:11:9a:87:
                    bb:a4:36:96:1d:e0:e6:39:8f:bb:a4:b7:77:aa:44:
                    17:78:8f:3d:13:f5:9f:7f:21:2a:a2:6e:24:6b:54:
                    cb:7d:95:91:c7:10:71:7b:e3:07:39:00:27:43:14:
                    b5:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:27:20:38:95:F6:25:70:D4:D9:26:CD:9D:FE:26:02:DA:5E:D2:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9a6b843c-48fb-4949-86c8-29317b8cb12c/70c1be47-61d4-30b1-8808-92c328e5b495.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9a6b843c-48fb-4949-86c8-29317b8cb12c/9a6b843c-48fb-4949-86c8-29317b8cb12c.crl

            X509v3 Authority Key Identifier:
                keyid:C0:85:62:C5:E0:98:47:70:33:E5:23:3A:DD:A8:4F:34:6E:10:F0:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9a6b843c-48fb-4949-86c8-29317b8cb12c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.143.32.0/24
                  198.51.233.0/24
                IPv6:
                  2620:2:6000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:40:15:ea:57:64:41:6b:0b:53:58:ef:da:b8:d7:b3:7b:eb:
         d1:d5:37:44:69:57:cf:b6:43:01:98:42:e4:f9:a1:87:99:2e:
         c2:73:79:9c:08:77:57:f9:ad:d5:d0:cb:c8:c4:af:5e:29:a0:
         e6:4e:f5:bc:ff:8b:1c:eb:e8:44:13:1a:7a:37:a7:77:3f:eb:
         95:48:6b:17:c8:36:44:e2:ca:9c:47:3c:73:b7:62:36:f4:bc:
         1e:5a:65:a6:6e:dc:5e:91:72:76:67:df:c0:45:b5:82:a3:e3:
         42:98:8c:e0:c1:3a:ae:51:13:a6:2a:f7:8d:f6:c4:de:e5:eb:
         76:f3:97:c4:5f:d7:05:e9:59:b8:7b:3b:71:bd:a4:c9:95:72:
         d5:32:dd:78:eb:06:e4:a0:28:2c:85:57:e3:ec:76:34:77:0b:
         7d:2b:2d:20:8d:dc:97:ed:5e:5b:14:ef:d8:84:2d:7a:02:f0:
         f1:c7:28:7c:2c:b8:26:b3:41:74:f1:9c:50:0d:54:d4:36:ea:
         ab:e7:e2:78:0a:d7:c7:ad:75:07:b6:8a:58:5b:a6:ab:54:c3:
         80:45:54:a5:85:01:85:41:87:65:1f:ee:83:26:a8:4b:48:37:
         7f:30:78:c9:24:3e:a8:2e:df:3d:24:76:15:fc:ca:35:a3:f0:
         7f:01:b0:13
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:16:54 2026 by rpki-client