Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/31a10786-3695-3d98-b839-686672740ad1.roa
File:                     31a10786-3695-3d98-b839-686672740ad1.roa (raw, json)
Hash identifier:          BJ9z88eUZDkQ4Ny62nj74WNaUGpO4Nw4xtHXtp5zYV4=
Subject key identifier:   44:3B:14:AB:C5:F2:83:56:9C:69:47:88:69:83:83:2C:0E:9A:B3:95
Certificate issuer:       /CN=73f2847d-53ab-4abb-a5e5-26b998c7ff98
Certificate serial:       010D0C9F4328584CD99CDD24C9314CCE9E0DCBA0
Authority key identifier: E3:3F:43:4B:85:C3:26:0D:9C:56:B0:BB:C8:3F:B6:4D:E8:3B:7D:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/31a10786-3695-3d98-b839-686672740ad1.roa
Signing time:             Fri 13 Feb 2026 14:00:41 +0000
ROA not before:           Fri 13 Feb 2026 14:00:41 +0000
ROA not after:            Thu 14 May 2026 13:00:41 +0000
asID:                     7992
IP address blocks:        24.157.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/73f2847d-53ab-4abb-a5e5-26b998c7ff98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/73f2847d-53ab-4abb-a5e5-26b998c7ff98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d9:9c:dd:24:c9:31:4c:ce:9e:0d:cb:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73f2847d-53ab-4abb-a5e5-26b998c7ff98
        Validity
            Not Before: Feb 13 14:00:41 2026 GMT
            Not After : May 14 13:00:41 2026 GMT
        Subject: CN=69672745-0d29-4c03-8c99-900f2af4f56a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:3e:9e:cc:09:2b:77:29:90:90:e1:3c:81:ee:
                    cb:43:6f:5e:47:7e:ec:12:ed:70:57:d4:ea:a5:d8:
                    31:4e:f7:b0:77:df:8a:df:8c:08:71:6b:56:73:cc:
                    c8:70:91:88:b6:5a:f3:94:e2:67:63:ba:79:6e:6d:
                    db:bb:f7:89:b4:c5:a9:ed:44:60:ab:2f:a4:35:77:
                    bb:bb:5a:a1:d2:44:2e:58:28:33:2c:c3:3d:42:c0:
                    28:54:21:e5:ee:ba:8a:4f:0d:56:fb:b7:48:72:cc:
                    6b:cd:b7:b8:2a:c5:1d:a1:a2:a2:fb:db:5a:de:c8:
                    ab:44:e2:9b:5d:d2:1d:19:89:66:47:50:57:89:9f:
                    d2:ae:de:e3:1d:b3:87:26:b8:7c:ca:06:42:d1:46:
                    f3:ec:09:d4:03:36:2f:d7:33:8a:95:44:00:d1:0c:
                    dd:dd:ea:79:1a:8e:ac:1e:5a:90:68:63:17:d8:31:
                    62:cf:c0:22:33:ae:56:d3:33:ae:8a:9c:9a:6b:78:
                    c9:b8:3d:b3:e9:de:fb:ae:b0:9c:aa:d3:4d:f0:41:
                    91:e7:29:45:dd:f6:ee:b8:64:7f:e1:99:f9:ea:77:
                    68:a4:8c:47:3f:7d:9f:b4:54:90:b0:2f:b9:13:a5:
                    aa:fd:02:5b:8f:af:c2:26:20:a9:b0:1b:34:1f:78:
                    0e:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:3B:14:AB:C5:F2:83:56:9C:69:47:88:69:83:83:2C:0E:9A:B3:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/31a10786-3695-3d98-b839-686672740ad1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/73f2847d-53ab-4abb-a5e5-26b998c7ff98.crl

            X509v3 Authority Key Identifier:
                keyid:E3:3F:43:4B:85:C3:26:0D:9C:56:B0:BB:C8:3F:B6:4D:E8:3B:7D:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.157.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:0f:21:a4:0c:73:24:b2:c6:e1:02:ac:ed:a5:39:1a:97:5f:
         5b:a1:2d:c3:64:ce:26:67:e5:f6:9b:9c:a9:4a:48:92:6b:5c:
         f1:1f:8b:d6:0a:48:d7:6b:bd:cb:a8:81:33:87:79:65:a1:92:
         82:c5:da:2b:f0:40:02:4e:7e:38:fe:f1:c4:14:78:9a:d2:a8:
         5a:1b:aa:bb:2a:55:56:dc:5e:77:e4:26:49:58:b4:e4:3b:cd:
         88:98:61:a6:64:74:be:dd:56:13:7c:de:b8:be:7d:62:89:45:
         f9:23:ac:3a:33:48:81:d1:a1:c9:1b:44:c6:43:42:61:01:e8:
         08:77:ab:c1:91:35:be:c8:9b:7e:ef:68:bb:18:b2:be:f4:9b:
         53:56:fd:8c:41:be:17:6b:ae:39:dd:c2:4a:79:73:50:3c:53:
         9d:ab:8d:9b:e0:cd:e1:8f:e5:09:2c:8d:4a:23:bc:21:0f:29:
         4b:5f:e6:e9:bd:9c:ad:9b:6d:db:a9:e5:b7:06:8b:2b:2d:4a:
         a0:f9:18:3a:5d:25:f4:77:6c:5c:62:6a:b2:9b:a3:d7:cf:db:
         49:f7:14:86:6a:af:2a:be:02:5c:d5:70:58:75:08:00:c2:bb:
         69:37:9c:80:d7:9b:f4:5f:a0:a4:d1:d7:6d:8e:50:26:21:ce:
         0d:bd:8b:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:42:33 2026 by rpki-client