Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2eee75b4-9a8a-44e7-9358-b5ada51ddc74/938d5892-6a64-3f55-9ce7-0180f67571e7.roa
File:                     938d5892-6a64-3f55-9ce7-0180f67571e7.roa (raw, json)
Hash identifier:          ejQXGOXRcw9s/B72Wb0UmwpXkThdwxoKLqTbQ9Hw9w0=
Subject key identifier:   4A:C5:EA:9D:B7:90:7C:E5:B1:56:67:CC:FB:72:6F:8B:39:9F:86:39
Certificate issuer:       /CN=2eee75b4-9a8a-44e7-9358-b5ada51ddc74
Certificate serial:       010D0C9F4328584CC3474600620534DB197050C0
Authority key identifier: 05:FF:93:67:74:72:1D:14:4F:93:FE:03:A9:57:A4:81:50:21:25:3E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2eee75b4-9a8a-44e7-9358-b5ada51ddc74.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2eee75b4-9a8a-44e7-9358-b5ada51ddc74/938d5892-6a64-3f55-9ce7-0180f67571e7.roa
Signing time:             Thu 05 Feb 2026 14:00:40 +0000
ROA not before:           Thu 05 Feb 2026 14:00:40 +0000
ROA not after:            Wed 06 May 2026 13:00:40 +0000
asID:                     398157
IP address blocks:        23.151.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2eee75b4-9a8a-44e7-9358-b5ada51ddc74/2eee75b4-9a8a-44e7-9358-b5ada51ddc74.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2eee75b4-9a8a-44e7-9358-b5ada51ddc74/2eee75b4-9a8a-44e7-9358-b5ada51ddc74.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2eee75b4-9a8a-44e7-9358-b5ada51ddc74.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c3:47:46:00:62:05:34:db:19:70:50:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2eee75b4-9a8a-44e7-9358-b5ada51ddc74
        Validity
            Not Before: Feb  5 14:00:40 2026 GMT
            Not After : May  6 13:00:40 2026 GMT
        Subject: CN=4c6ffca2-c7c1-43e8-8f33-06aefe2bb538
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:8f:cc:0c:e5:70:ea:53:64:d4:57:be:b5:4b:
                    24:40:99:68:dc:77:51:5d:85:63:a7:db:1d:c2:e7:
                    34:42:5f:fa:92:38:25:bf:d3:9b:4c:03:56:ea:b9:
                    0e:31:46:24:f7:0c:39:be:d5:ca:c8:0d:ab:7f:03:
                    f7:89:47:ab:12:c7:fb:ee:2b:01:05:46:ad:67:88:
                    90:cf:f7:91:c8:06:3f:d4:e3:58:42:57:d1:21:69:
                    6b:21:54:8e:1b:b9:5a:bd:2d:8c:24:da:63:2d:c7:
                    00:2d:80:32:bb:b6:f6:b2:05:fa:2c:12:12:46:16:
                    87:f6:14:09:6a:34:eb:85:3d:a0:39:cd:28:35:be:
                    6c:c2:78:da:18:5f:f1:fc:05:bb:cb:32:a4:6e:93:
                    fb:d5:6d:ca:21:fb:eb:da:1c:7f:45:1a:ec:d1:cb:
                    e9:b1:67:1f:2d:6c:ee:44:d1:9f:bd:9f:6f:92:5d:
                    51:4c:93:ad:0a:1b:7b:5e:60:cd:ba:cc:c8:22:90:
                    7c:a2:47:f5:d5:97:a2:a0:aa:3c:a7:99:ec:5d:00:
                    bd:01:d4:2b:3f:d2:0f:6e:f3:3c:0f:ee:7b:b3:53:
                    4a:cd:b1:20:cc:1d:2f:89:2c:5e:7f:ec:a6:f3:59:
                    87:84:b5:41:3f:e6:ed:8a:55:6b:35:75:57:07:b7:
                    5e:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:C5:EA:9D:B7:90:7C:E5:B1:56:67:CC:FB:72:6F:8B:39:9F:86:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2eee75b4-9a8a-44e7-9358-b5ada51ddc74/938d5892-6a64-3f55-9ce7-0180f67571e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2eee75b4-9a8a-44e7-9358-b5ada51ddc74/2eee75b4-9a8a-44e7-9358-b5ada51ddc74.crl

            X509v3 Authority Key Identifier:
                keyid:05:FF:93:67:74:72:1D:14:4F:93:FE:03:A9:57:A4:81:50:21:25:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2eee75b4-9a8a-44e7-9358-b5ada51ddc74.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.151.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:99:95:fd:fe:7d:5e:8a:b9:1e:32:31:aa:93:08:61:72:05:
         7c:7e:c2:e2:27:e4:e4:cf:89:39:40:10:39:cd:53:34:94:c9:
         b2:06:37:cc:2c:75:7c:b4:0a:9f:da:86:75:7a:e0:e2:a2:9c:
         4a:94:b8:25:a0:11:92:2e:6c:e9:ed:d8:ed:35:00:1f:ef:df:
         f9:7d:ad:db:e1:b1:e7:a2:5c:70:3a:0e:d2:06:54:c7:d7:d3:
         11:e0:f8:fe:3d:bd:1a:a3:60:62:c1:05:e6:35:8b:0b:54:db:
         9f:08:a8:5c:85:8f:a1:4b:5e:9d:f3:53:24:83:cd:a6:12:66:
         1b:5d:1c:41:f3:a3:8a:a3:d3:15:29:64:99:4a:63:e6:e3:ba:
         3d:93:6f:38:ea:18:c8:ed:a8:83:c1:87:7d:ee:07:3c:a3:c3:
         bc:d5:9b:4c:4a:48:92:6f:cd:49:c9:47:77:56:6c:a8:23:28:
         58:0f:30:e2:05:8f:60:0f:d9:7f:64:46:b1:89:46:05:74:14:
         94:f1:de:47:71:0c:99:0e:b2:9f:b5:c7:e3:31:d4:6a:b3:6e:
         a9:b7:70:db:0e:e5:ee:2a:eb:a7:22:04:76:36:6c:ad:7a:3a:
         d0:9d:74:ae:2c:bd:17:1c:2f:cd:50:cc:8d:91:81:95:9a:f1:
         86:1c:f5:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:29:04 2026 by rpki-client