Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/226199ff-c84a-4ff0-9ddd-8c19169b5404/6c05e886-82cb-3923-b78a-e1f178a13410.roa
File:                     6c05e886-82cb-3923-b78a-e1f178a13410.roa (raw, json)
Hash identifier:          1ZJUvELqdWJctRC/WZ3Wdtnu+ezH8TrwrPP+x3LboPU=
Subject key identifier:   FC:60:34:91:AC:65:49:1C:BA:3A:C8:67:36:9E:B0:17:E8:D7:00:81
Certificate issuer:       /CN=226199ff-c84a-4ff0-9ddd-8c19169b5404
Certificate serial:       010D0C9F4328584CBDB2029F9BA89DE210D10100
Authority key identifier: 94:1E:71:4E:59:90:57:2C:22:6D:24:E8:76:DB:98:F3:A6:0F:05:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/226199ff-c84a-4ff0-9ddd-8c19169b5404.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/226199ff-c84a-4ff0-9ddd-8c19169b5404/6c05e886-82cb-3923-b78a-e1f178a13410.roa
Signing time:             Tue 03 Feb 2026 14:00:39 +0000
ROA not before:           Tue 03 Feb 2026 14:00:39 +0000
ROA not after:            Mon 04 May 2026 13:00:39 +0000
asID:                     401031
IP address blocks:        23.179.168.0/24 maxlen: 24
                          2602:f903::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/226199ff-c84a-4ff0-9ddd-8c19169b5404/226199ff-c84a-4ff0-9ddd-8c19169b5404.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/226199ff-c84a-4ff0-9ddd-8c19169b5404/226199ff-c84a-4ff0-9ddd-8c19169b5404.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/226199ff-c84a-4ff0-9ddd-8c19169b5404.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:bd:b2:02:9f:9b:a8:9d:e2:10:d1:01:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=226199ff-c84a-4ff0-9ddd-8c19169b5404
        Validity
            Not Before: Feb  3 14:00:39 2026 GMT
            Not After : May  4 13:00:39 2026 GMT
        Subject: CN=e0f39bd9-dd6c-4292-9623-5ab23a2f2c89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:6e:e9:1c:31:61:c3:ce:94:b7:cb:7c:74:51:
                    80:2d:4c:8a:06:15:71:5d:28:c3:b7:1e:00:92:36:
                    61:1b:74:86:3d:a0:e6:d9:67:67:a6:a8:1b:36:ab:
                    7e:e9:f4:89:29:6b:bd:59:35:32:8e:cf:43:6e:ac:
                    11:d9:fa:da:51:c9:77:7d:50:11:14:16:63:6f:78:
                    cd:01:5f:e7:1d:78:a8:db:0a:33:99:b9:97:ae:86:
                    73:a6:05:53:48:bf:c5:0c:cf:f3:eb:cf:27:f0:7e:
                    e0:e4:ad:ad:a8:9c:2f:1d:53:d4:3e:33:2e:b6:7c:
                    2b:74:5a:15:94:d8:b9:e1:0c:f4:89:c4:23:49:da:
                    7a:f6:2f:e7:a5:f4:2a:64:67:a6:3d:8b:68:b5:2b:
                    91:ba:a2:a3:58:91:dc:82:08:0f:3f:e8:5c:78:ae:
                    02:5f:a5:f1:8a:04:0f:03:28:d5:16:2f:08:84:b5:
                    84:66:e7:19:78:9d:29:6e:e8:61:af:92:ff:55:25:
                    76:89:28:48:e5:c1:dd:b2:77:fd:b0:05:1a:8f:bb:
                    b9:51:41:44:2b:61:27:2b:e1:d4:f0:fd:02:3e:6e:
                    89:8a:49:bb:69:e7:73:af:39:29:4e:a7:a2:4f:d9:
                    92:93:0c:23:16:63:89:83:b5:1f:bb:bc:0e:ce:6a:
                    63:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:60:34:91:AC:65:49:1C:BA:3A:C8:67:36:9E:B0:17:E8:D7:00:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/226199ff-c84a-4ff0-9ddd-8c19169b5404/6c05e886-82cb-3923-b78a-e1f178a13410.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/226199ff-c84a-4ff0-9ddd-8c19169b5404/226199ff-c84a-4ff0-9ddd-8c19169b5404.crl

            X509v3 Authority Key Identifier:
                keyid:94:1E:71:4E:59:90:57:2C:22:6D:24:E8:76:DB:98:F3:A6:0F:05:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/226199ff-c84a-4ff0-9ddd-8c19169b5404.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.179.168.0/24
                IPv6:
                  2602:f903::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:99:0d:a9:0d:88:6b:57:73:a1:be:7b:03:01:97:0d:52:17:
         4f:b9:be:60:cd:21:8c:6d:f5:fc:f4:83:c6:2f:5d:ac:58:6c:
         aa:c0:ad:62:8a:d5:5b:98:c3:58:93:30:7d:d0:0d:83:b2:58:
         7e:9c:2f:d0:ef:6f:1e:ba:b8:36:cd:94:a4:f0:27:6f:f8:9e:
         12:a2:c8:bd:c6:ad:ed:31:fa:89:f7:81:8c:61:17:4c:9d:fd:
         34:00:7c:40:47:31:ac:e0:10:2f:51:32:b7:bf:21:b1:d5:4a:
         47:d5:9c:f6:5f:ae:7f:2b:a5:ed:d9:f6:78:d6:d7:a1:ae:94:
         24:a6:fd:a2:f8:ec:f9:49:05:25:7e:1a:43:ce:90:ce:6f:6d:
         5d:7c:13:bb:4b:76:04:63:fe:2b:01:77:ea:f6:b3:fc:dd:1b:
         72:a2:54:34:f0:74:e4:c8:2f:46:c7:44:9e:49:a4:34:a5:12:
         39:df:42:c6:81:5c:fa:63:67:86:6b:df:50:c3:7d:0f:94:e3:
         fd:a8:bd:48:1e:54:38:33:8f:25:75:58:51:b9:98:b2:87:51:
         a7:94:6c:3b:46:46:ac:47:30:b9:1d:62:ab:f8:d6:43:5a:f4:
         44:83:5f:11:b9:68:94:13:7a:a5:48:35:31:f9:9a:39:be:f5:
         ba:a6:ef:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:00:56 2026 by rpki-client