Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/283c6446-5d85-4184-867b-d2ac918134d8/035e5fc3-d5eb-3296-a054-53d41207f7c9.roa
File:                     035e5fc3-d5eb-3296-a054-53d41207f7c9.roa (raw, json)
Hash identifier:          HUbGwE7+sp+N4ybuwduvkookTfdpJf5a6rPN2SU32gM=
Subject key identifier:   04:DF:A4:3F:13:93:0C:60:4C:AA:54:3D:B2:DF:36:58:8F:1D:5F:FE
Certificate issuer:       /CN=283c6446-5d85-4184-867b-d2ac918134d8
Certificate serial:       010D0C9F4328584CEA5CF0F0B0B0349CE4260F80
Authority key identifier: F4:68:FE:92:FD:F8:D8:43:4F:21:A1:EB:8F:9D:FC:A8:EE:60:CB:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/283c6446-5d85-4184-867b-d2ac918134d8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/283c6446-5d85-4184-867b-d2ac918134d8/035e5fc3-d5eb-3296-a054-53d41207f7c9.roa
Signing time:             Thu 19 Feb 2026 14:00:40 +0000
ROA not before:           Thu 19 Feb 2026 14:00:40 +0000
ROA not after:            Wed 20 May 2026 13:00:40 +0000
asID:                     36382
IP address blocks:        23.185.24.0/24 maxlen: 24
                          130.12.31.0/24 maxlen: 24
                          2607:c8c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/283c6446-5d85-4184-867b-d2ac918134d8/283c6446-5d85-4184-867b-d2ac918134d8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/283c6446-5d85-4184-867b-d2ac918134d8/283c6446-5d85-4184-867b-d2ac918134d8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/283c6446-5d85-4184-867b-d2ac918134d8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ea:5c:f0:f0:b0:b0:34:9c:e4:26:0f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=283c6446-5d85-4184-867b-d2ac918134d8
        Validity
            Not Before: Feb 19 14:00:40 2026 GMT
            Not After : May 20 13:00:40 2026 GMT
        Subject: CN=2cbd8306-1262-46fe-bbfa-3d2179d23d8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:98:f9:13:4d:33:7c:cd:96:94:02:3c:7c:5e:
                    e4:18:05:1e:85:f8:c0:37:2a:cb:21:39:46:c3:1a:
                    3a:7d:3c:d6:40:e2:05:e2:11:9a:30:fc:e1:6b:ed:
                    0f:75:cd:3d:22:07:39:20:93:bd:9f:ea:c2:fa:cd:
                    47:5a:47:1a:8f:bf:16:0d:58:cc:12:3a:dc:75:d4:
                    7a:5d:03:b3:b9:e8:9a:c1:33:90:14:7a:e8:6f:de:
                    0c:ff:63:86:7b:47:3e:41:8a:b3:79:67:0b:dc:8a:
                    9d:e1:36:7a:8b:a5:04:bc:71:43:e1:c4:15:fc:90:
                    37:fe:c4:6f:24:30:d1:36:2a:57:af:73:63:8e:93:
                    96:eb:47:7e:cc:07:b5:2d:0d:53:fd:c2:11:04:a4:
                    d2:15:34:39:fe:cf:13:ca:8d:42:99:d6:23:2d:04:
                    e0:f5:d6:54:b4:0c:a5:3c:7b:d0:ba:87:83:48:dc:
                    3f:a1:cb:4b:16:d4:98:ff:2f:ee:25:29:9b:81:76:
                    d6:f2:5d:c2:bb:82:97:70:50:c5:20:ff:77:86:d8:
                    9c:6c:d2:10:3a:ba:ce:a1:33:6a:73:74:ca:37:58:
                    52:c8:3a:bf:de:3b:91:5d:f7:7c:11:37:1f:be:a9:
                    fe:61:ac:ae:df:7c:83:63:b0:8d:d4:6a:f5:29:80:
                    4a:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:DF:A4:3F:13:93:0C:60:4C:AA:54:3D:B2:DF:36:58:8F:1D:5F:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/283c6446-5d85-4184-867b-d2ac918134d8/035e5fc3-d5eb-3296-a054-53d41207f7c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/283c6446-5d85-4184-867b-d2ac918134d8/283c6446-5d85-4184-867b-d2ac918134d8.crl

            X509v3 Authority Key Identifier:
                keyid:F4:68:FE:92:FD:F8:D8:43:4F:21:A1:EB:8F:9D:FC:A8:EE:60:CB:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/283c6446-5d85-4184-867b-d2ac918134d8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.185.24.0/24
                  130.12.31.0/24
                IPv6:
                  2607:c8c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:0f:2e:be:02:0a:7c:6d:35:5e:84:ec:40:5e:44:d0:ae:00:
         bd:42:fe:d6:13:05:a4:b9:d3:82:b0:21:c2:cb:b1:bb:bc:6d:
         86:96:96:c6:29:29:ec:c4:6d:03:dc:f6:ff:2e:3e:dd:b8:08:
         a7:16:a9:eb:06:43:4d:62:b0:4a:fb:15:cb:94:b6:3e:da:46:
         93:c5:ac:96:b8:4d:9f:c4:c0:0a:bf:ba:df:68:f8:f7:c7:fd:
         23:0b:4c:e0:16:d9:df:33:a8:5d:d2:9b:51:e7:04:e4:ea:b9:
         2a:89:6e:dc:41:37:d8:ea:b8:8c:d4:75:8f:c8:13:a7:3e:9c:
         1d:e0:ff:70:b1:1b:a8:a3:6a:73:dd:3c:2e:d4:9a:67:a3:08:
         4d:51:24:6a:ef:3a:3c:f9:71:09:32:79:75:5c:22:2b:3e:16:
         32:a7:91:f6:34:40:47:04:45:19:cb:e7:45:ef:65:37:91:07:
         14:38:01:fa:64:87:39:98:19:27:4e:b8:47:19:21:7e:32:0d:
         27:27:01:88:a6:3f:fb:38:9a:04:e2:c8:43:0a:46:fc:3a:0f:
         7d:48:d2:2b:e8:a4:b0:fe:2f:13:c1:6e:c4:f7:eb:05:a9:45:
         a3:8c:e9:a5:23:6d:4a:31:26:3a:4b:d8:7f:8f:87:bf:3e:21:
         c7:ad:5c:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:21:12 2026 by rpki-client