Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1384adb3-843b-4d6e-a2b4-6dc37093dfe1/afcec47f-0abd-3455-98e1-1c658eec0eb8.roa
File:                     afcec47f-0abd-3455-98e1-1c658eec0eb8.roa (raw, json)
Hash identifier:          0NNzi3/emWVcBeKfRo+KkbQ9Cvf73ffZliUaZC2x13c=
Subject key identifier:   53:00:7D:6F:DD:9A:61:68:76:A0:53:04:22:24:6B:D3:5D:8E:8D:77
Certificate issuer:       /CN=1384adb3-843b-4d6e-a2b4-6dc37093dfe1
Certificate serial:       010D0C9F4328584CDC678419F1A1372013E0BC00
Authority key identifier: 53:8D:5C:B5:18:DE:88:4A:47:5D:75:DC:5E:34:E8:DB:6F:C6:6F:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1384adb3-843b-4d6e-a2b4-6dc37093dfe1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1384adb3-843b-4d6e-a2b4-6dc37093dfe1/afcec47f-0abd-3455-98e1-1c658eec0eb8.roa
Signing time:             Sat 14 Feb 2026 14:00:41 +0000
ROA not before:           Sat 14 Feb 2026 14:00:41 +0000
ROA not after:            Fri 15 May 2026 13:00:41 +0000
asID:                     399392
IP address blocks:        23.175.112.0/24 maxlen: 24
                          2602:fcb6::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1384adb3-843b-4d6e-a2b4-6dc37093dfe1/1384adb3-843b-4d6e-a2b4-6dc37093dfe1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1384adb3-843b-4d6e-a2b4-6dc37093dfe1/1384adb3-843b-4d6e-a2b4-6dc37093dfe1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1384adb3-843b-4d6e-a2b4-6dc37093dfe1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:dc:67:84:19:f1:a1:37:20:13:e0:bc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1384adb3-843b-4d6e-a2b4-6dc37093dfe1
        Validity
            Not Before: Feb 14 14:00:41 2026 GMT
            Not After : May 15 13:00:41 2026 GMT
        Subject: CN=ce8a85ef-1139-4af6-9ba7-48b056a9b228
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:bf:27:d4:ac:3c:d3:06:00:9e:69:e0:ff:c5:
                    59:74:9d:9c:8a:0d:d2:48:cd:f8:05:42:4f:fd:c4:
                    9f:44:7b:2b:d6:cb:1c:28:ab:fc:bb:6e:21:46:90:
                    42:9c:26:98:0a:f7:36:6b:7f:70:1b:31:94:4a:4e:
                    26:51:99:95:26:1e:c6:57:07:8c:2e:55:98:f2:d3:
                    10:d5:72:28:11:d0:d7:a6:9e:6d:d0:32:aa:9b:1d:
                    e6:e0:29:de:14:a3:70:de:c7:7b:a8:50:27:be:2f:
                    38:27:9e:75:94:89:4e:15:22:67:32:19:2f:c8:c1:
                    6a:f3:52:57:8f:7c:d3:d1:6e:e0:a5:61:dc:3f:d5:
                    e9:37:7f:c0:97:4c:1f:8d:93:10:04:df:92:09:b9:
                    8b:d8:f7:23:cf:19:92:6d:f4:9d:f5:d2:ae:8e:0e:
                    26:59:17:8d:46:42:6f:9a:de:de:20:aa:d3:b6:d0:
                    ce:b1:01:f4:c2:c6:7c:a0:c1:7b:5a:f0:e0:15:a8:
                    f3:15:6d:c4:2c:52:8f:bc:6c:a8:38:b7:3c:78:a0:
                    7f:16:49:00:cb:15:21:db:ca:ec:92:90:57:6d:71:
                    7c:41:63:51:be:99:29:54:ed:be:ca:ae:cc:1a:2b:
                    b0:78:7e:00:c8:54:b0:c6:5d:10:c1:cb:1b:65:cf:
                    a5:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:00:7D:6F:DD:9A:61:68:76:A0:53:04:22:24:6B:D3:5D:8E:8D:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1384adb3-843b-4d6e-a2b4-6dc37093dfe1/afcec47f-0abd-3455-98e1-1c658eec0eb8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1384adb3-843b-4d6e-a2b4-6dc37093dfe1/1384adb3-843b-4d6e-a2b4-6dc37093dfe1.crl

            X509v3 Authority Key Identifier:
                keyid:53:8D:5C:B5:18:DE:88:4A:47:5D:75:DC:5E:34:E8:DB:6F:C6:6F:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1384adb3-843b-4d6e-a2b4-6dc37093dfe1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.175.112.0/24
                IPv6:
                  2602:fcb6::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:09:57:05:a7:e0:c9:c3:87:3e:65:d3:80:39:c8:82:ff:5c:
         de:a6:dc:9a:f1:ca:a2:2c:a9:89:e7:93:8c:9d:ea:c1:7b:81:
         51:e8:92:18:74:77:e9:31:91:13:8f:1b:3c:af:6c:4f:b7:ca:
         f0:c3:c1:d2:c2:e9:6e:60:a7:44:37:c3:4a:92:a0:ea:f9:11:
         9f:34:9c:b1:08:0b:6b:42:23:79:dd:62:d1:7e:c7:8b:21:07:
         1a:be:10:a1:fe:b3:9d:a8:69:16:19:f3:1d:a7:e7:43:b3:2d:
         bd:f6:60:c7:c9:f1:b7:f6:c4:8c:a6:ea:d5:4a:c4:ee:26:e7:
         25:eb:d3:f4:68:76:f7:14:47:03:bb:94:22:c1:98:cb:22:37:
         c8:55:8b:a3:c9:10:b3:b5:d1:8e:40:83:9d:47:e3:b9:ca:79:
         5d:1e:cd:fe:7d:3e:3e:8a:0c:ad:79:0a:23:2a:80:53:5d:ac:
         b1:c5:b2:cb:97:56:a0:5d:ba:34:f6:2d:29:78:25:07:4c:e0:
         4d:1d:8e:61:3b:6f:f9:8f:f3:ea:7b:83:7d:ce:4d:df:00:e7:
         82:b1:d3:43:3e:d1:d6:a6:cc:6d:33:bc:7c:93:a4:9e:68:9a:
         7e:5f:e1:b9:f9:4f:f3:8a:df:22:54:5f:59:3b:48:c1:0f:9a:
         a8:9b:3b:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:34:58 2026 by rpki-client