Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/724dc813-9136-3075-bcba-f77834af4133.roa
File:                     724dc813-9136-3075-bcba-f77834af4133.roa (raw, json)
Hash identifier:          7kNwpGjKUhyT6ccor6dNCBTYJrDbEcAjQWFdOjVba6o=
Subject key identifier:   1B:3F:1D:05:2E:38:B5:AC:C8:8A:BA:23:50:5F:25:BD:29:AD:42:55
Certificate issuer:       /CN=add35f11-0294-4be9-94b7-49cac2bcb001
Certificate serial:       010D0C9F4328584CC611EB6C7FCC6DF141A3C900
Authority key identifier: A5:7A:61:2C:B0:49:28:3C:1F:09:9D:0D:5E:0C:F3:8E:B9:58:F8:CA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/724dc813-9136-3075-bcba-f77834af4133.roa
Signing time:             Fri 06 Feb 2026 14:00:40 +0000
ROA not before:           Fri 06 Feb 2026 14:00:40 +0000
ROA not after:            Thu 07 May 2026 13:00:40 +0000
asID:                     923
IP address blocks:        23.144.156.0/24 maxlen: 24
                          207.167.121.0/24 maxlen: 24
                          2602:fbf5::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/add35f11-0294-4be9-94b7-49cac2bcb001.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/add35f11-0294-4be9-94b7-49cac2bcb001.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c6:11:eb:6c:7f:cc:6d:f1:41:a3:c9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=add35f11-0294-4be9-94b7-49cac2bcb001
        Validity
            Not Before: Feb  6 14:00:40 2026 GMT
            Not After : May  7 13:00:40 2026 GMT
        Subject: CN=14716730-c3b8-4a60-a4fa-5e7538f9605c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:4f:00:1e:2c:17:1b:29:7c:c7:d7:29:44:4f:
                    19:82:66:99:a9:99:c3:f2:45:64:a4:0a:90:e3:f6:
                    6d:c1:9c:12:d3:ee:c3:43:4e:13:32:62:c2:08:43:
                    93:c5:40:9e:4b:dc:23:09:15:16:9b:c0:15:5c:d7:
                    d8:19:80:9d:f1:84:11:d5:67:51:a9:b5:3b:7b:d3:
                    8c:70:ff:20:9c:6a:aa:15:4f:d8:b0:96:fb:45:1a:
                    a9:e0:9b:41:e0:31:c1:ae:38:33:96:9b:12:cb:9c:
                    3b:3d:4c:d8:24:4c:91:45:81:24:76:38:88:02:4f:
                    21:b8:86:a4:af:4d:60:02:03:d6:6f:41:2a:c0:09:
                    de:8d:69:ba:9b:02:c5:96:19:db:24:c9:5f:15:d3:
                    70:2e:cf:9b:f9:f2:7c:f2:05:21:c1:02:8d:c6:69:
                    31:a7:f3:2d:bd:42:ed:57:41:bc:94:87:dd:c9:de:
                    5e:dc:15:f3:2f:a4:7d:78:c4:e7:56:23:ec:da:65:
                    ad:17:46:90:4d:90:88:b2:58:0a:f1:0c:51:ca:43:
                    f5:7a:9a:0d:ac:74:0c:7f:b8:d3:a6:39:cd:96:ce:
                    34:11:40:c9:4e:8f:fc:76:33:4d:da:35:cc:02:0e:
                    ff:c0:ce:60:45:00:35:31:2c:ce:46:c6:62:d1:f1:
                    c5:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:3F:1D:05:2E:38:B5:AC:C8:8A:BA:23:50:5F:25:BD:29:AD:42:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/724dc813-9136-3075-bcba-f77834af4133.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/add35f11-0294-4be9-94b7-49cac2bcb001.crl

            X509v3 Authority Key Identifier:
                keyid:A5:7A:61:2C:B0:49:28:3C:1F:09:9D:0D:5E:0C:F3:8E:B9:58:F8:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.144.156.0/24
                  207.167.121.0/24
                IPv6:
                  2602:fbf5::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:8d:57:56:d9:af:03:ee:d3:7e:7a:e0:83:32:83:53:21:87:
         4c:e5:69:95:51:5e:9d:1e:0b:ff:2a:60:7b:7c:c7:e4:85:f1:
         2b:97:bb:31:2c:40:7e:55:32:96:89:4b:7d:95:79:64:12:fc:
         56:b8:e3:a3:76:35:99:0a:8f:d1:aa:a7:3b:c2:b0:cd:14:68:
         c8:2d:5f:46:64:6d:0b:92:a8:8d:7c:55:93:45:a7:b7:0e:f9:
         7f:55:60:76:0b:94:e2:4b:89:d1:58:75:4e:bb:cb:6f:0b:77:
         3d:56:33:62:d5:e4:02:87:21:9d:10:cc:c2:90:e3:fc:bb:03:
         e2:22:4a:7a:72:98:ca:03:c2:f3:55:09:4c:9b:a9:b2:9e:1d:
         9d:b3:00:c1:e6:56:6e:fe:5f:5d:db:f3:06:9f:b2:a8:a8:46:
         12:eb:c1:40:b1:b4:44:d7:a6:f6:af:32:18:76:91:d0:81:bf:
         bd:ec:0e:c3:2b:29:f5:66:99:0e:2b:16:0f:ff:31:e1:b7:45:
         87:23:3b:74:fd:19:13:1c:7e:ba:2e:9b:48:9e:96:56:3c:cf:
         52:cf:d8:62:ce:26:16:88:5c:d2:ff:db:fc:78:f4:56:e7:93:
         ce:21:b4:8e:db:f7:33:c2:ab:d2:25:2d:71:a5:0c:db:6b:14:
         dc:52:3a:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:20:12 2026 by rpki-client