Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d30c475d-8944-47ed-ba1d-63ff537595ba/4b41e20f-4681-3b72-b8c6-62058d29fffa.roa
File:                     4b41e20f-4681-3b72-b8c6-62058d29fffa.roa (raw, json)
Hash identifier:          A7DycgElZN1pcNqiDssFHugEd1AXZR4axMiD+TlpuOc=
Subject key identifier:   98:A9:DF:C1:91:4C:7C:62:F8:16:33:04:81:36:F4:58:60:C3:DD:A2
Certificate issuer:       /CN=d30c475d-8944-47ed-ba1d-63ff537595ba
Certificate serial:       010D0C9F4328584CF2BCF4894A66222289A99EC0
Authority key identifier: 4A:44:7A:35:AC:B8:5B:C6:35:98:E0:D3:A7:A1:14:C8:1A:DA:08:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d30c475d-8944-47ed-ba1d-63ff537595ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d30c475d-8944-47ed-ba1d-63ff537595ba/4b41e20f-4681-3b72-b8c6-62058d29fffa.roa
Signing time:             Sun 22 Feb 2026 14:00:41 +0000
ROA not before:           Sun 22 Feb 2026 14:00:41 +0000
ROA not after:            Sat 23 May 2026 13:00:41 +0000
asID:                     32872
IP address blocks:        23.157.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d30c475d-8944-47ed-ba1d-63ff537595ba/d30c475d-8944-47ed-ba1d-63ff537595ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d30c475d-8944-47ed-ba1d-63ff537595ba/d30c475d-8944-47ed-ba1d-63ff537595ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d30c475d-8944-47ed-ba1d-63ff537595ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f2:bc:f4:89:4a:66:22:22:89:a9:9e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d30c475d-8944-47ed-ba1d-63ff537595ba
        Validity
            Not Before: Feb 22 14:00:41 2026 GMT
            Not After : May 23 13:00:41 2026 GMT
        Subject: CN=510e29c8-898f-4464-94dd-1f53a92efa3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d0:09:86:5f:59:46:90:bc:bf:6f:3f:c7:63:
                    12:db:11:98:ef:61:4d:f4:89:84:d0:22:9c:e5:66:
                    fe:06:23:ea:10:28:b4:23:b6:37:69:93:ce:fb:98:
                    13:7d:91:8a:30:23:01:eb:b4:48:a1:8f:dc:e3:67:
                    10:cb:0f:17:32:e7:a0:42:48:16:22:6a:01:d2:30:
                    5a:77:73:41:5d:c3:4b:ef:d1:70:91:3d:78:d9:ce:
                    f4:f8:57:1b:8f:f0:ac:13:25:59:e9:5f:5b:df:df:
                    5b:6f:2e:75:79:85:59:4b:b7:a1:fd:ca:1a:40:bc:
                    d9:43:d6:f3:7c:cc:d2:ca:92:c0:72:1b:e5:cf:41:
                    0e:bf:49:88:63:0a:5b:71:be:03:a5:e9:02:8b:2d:
                    42:6e:01:b6:49:db:6c:14:3d:26:6a:00:e5:78:03:
                    f7:3f:2c:63:d8:9e:3b:85:fc:d9:5f:d9:65:52:f5:
                    0d:52:72:52:b4:2e:0d:cd:ce:d6:21:e9:ab:5e:2d:
                    66:8a:0e:1a:64:97:e2:eb:a5:e2:ed:55:f5:18:10:
                    f6:28:5d:cc:27:3f:7f:f5:f5:c2:fd:4b:c8:15:d5:
                    05:a4:11:11:fc:2f:f1:02:b9:b7:54:34:cc:58:7c:
                    26:8c:4c:36:8c:66:2b:6f:a5:4e:38:d0:d3:b2:7c:
                    32:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:A9:DF:C1:91:4C:7C:62:F8:16:33:04:81:36:F4:58:60:C3:DD:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d30c475d-8944-47ed-ba1d-63ff537595ba/4b41e20f-4681-3b72-b8c6-62058d29fffa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d30c475d-8944-47ed-ba1d-63ff537595ba/d30c475d-8944-47ed-ba1d-63ff537595ba.crl

            X509v3 Authority Key Identifier:
                keyid:4A:44:7A:35:AC:B8:5B:C6:35:98:E0:D3:A7:A1:14:C8:1A:DA:08:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d30c475d-8944-47ed-ba1d-63ff537595ba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.157.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:f8:90:b3:f6:a7:37:58:91:b0:9c:a5:04:51:88:77:24:94:
         d1:29:cc:7c:a6:17:e5:5a:06:8f:e1:0f:95:8a:f4:6d:0f:74:
         57:b4:d0:87:54:d8:75:cc:a3:05:78:af:eb:6a:6d:98:1b:7e:
         81:32:6b:74:8a:13:e8:fd:e1:e8:77:c3:a2:ef:d7:54:4c:77:
         0d:a7:6d:b5:31:f5:42:e5:50:a1:ef:a1:4e:81:92:18:a7:e6:
         03:58:76:3c:ef:2b:1d:8e:08:fb:0a:5c:96:61:43:50:26:d6:
         52:5b:d2:26:f0:36:cb:f6:40:f3:4d:e1:1c:e7:25:0e:df:05:
         2c:ba:26:97:06:99:9a:e7:55:f2:02:b1:7d:f6:35:fd:d1:7e:
         88:31:cd:23:b5:e4:84:48:da:82:2a:f6:61:3b:dc:51:e2:00:
         ab:04:01:16:51:06:68:f1:7c:5c:e5:f8:5e:65:bb:c7:cd:11:
         e6:31:49:25:2b:21:68:3c:a2:2a:51:c6:c6:db:75:23:95:a5:
         74:6d:10:9e:48:92:62:a6:c0:d0:68:26:8c:24:28:66:9d:5b:
         86:38:8e:3a:56:fd:65:96:9d:c1:00:ae:30:85:20:bb:77:e3:
         8a:70:24:55:0f:72:55:e1:0c:33:31:e0:ee:52:ed:ce:a2:78:
         03:ca:91:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:56:49 2026 by rpki-client