Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/7eeffff2-ead2-3c15-b288-2f9b9a033511.roa
File:                     7eeffff2-ead2-3c15-b288-2f9b9a033511.roa (raw, json)
Hash identifier:          78gvHI6ZV5iu2gd/1GYZBg9MAeBNh/7idFbFS41bvEo=
Subject key identifier:   24:F8:B9:4E:1D:39:F9:F7:73:2B:F9:F2:96:02:AF:22:10:F8:7F:EA
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584CF8524D45247CED5FD75D5AC0
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/7eeffff2-ead2-3c15-b288-2f9b9a033511.roa
Signing time:             Tue 24 Feb 2026 14:00:41 +0000
ROA not before:           Tue 24 Feb 2026 14:00:41 +0000
ROA not after:            Mon 25 May 2026 13:00:41 +0000
asID:                     4229
IP address blocks:        23.91.109.0/24 maxlen: 24
                          98.98.230.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f8:52:4d:45:24:7c:ed:5f:d7:5d:5a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Feb 24 14:00:41 2026 GMT
            Not After : May 25 13:00:41 2026 GMT
        Subject: CN=8c57a9b2-c3c2-47ec-a5bd-f09e812f4282
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:10:28:ff:af:5e:83:ca:00:1c:ee:85:e1:06:
                    ff:df:33:26:27:89:c9:0b:8b:dc:99:a4:14:e8:8e:
                    2a:6c:01:58:7c:d6:2b:71:d0:85:ca:ba:d1:5d:50:
                    bc:08:bb:84:1a:e6:aa:54:b5:17:81:f7:7c:2f:cd:
                    0c:74:79:5b:e5:8b:30:99:2a:a0:80:3d:ac:d1:5e:
                    ad:52:0e:50:bd:75:23:42:53:ef:bc:d2:0f:69:de:
                    86:20:f3:c3:47:0c:e4:6b:f9:97:e4:3f:24:58:c3:
                    2a:dd:90:3a:4c:3c:38:79:b5:95:e0:78:ba:0b:dd:
                    6e:c6:e2:80:dd:7d:de:2b:58:aa:9f:f3:ec:f1:b8:
                    d8:0d:1e:49:f0:ea:96:86:7c:3e:e5:81:bd:95:2f:
                    58:6f:89:7e:3e:95:b6:d0:d9:9a:b1:61:c2:b4:8d:
                    f5:e4:bf:de:60:94:2a:be:ba:05:51:b6:41:b7:e9:
                    e2:45:fe:4e:88:6b:1e:71:7a:1e:16:db:01:d3:fb:
                    68:4d:0d:52:fa:45:f6:9b:ab:8b:e3:23:1e:40:93:
                    7d:60:72:1c:8e:44:b9:fe:2c:2d:0f:99:f4:3b:4b:
                    9c:33:f5:c8:c7:ea:89:63:7d:86:0d:db:8a:17:ad:
                    ee:9a:da:a6:59:80:dc:0e:ac:78:94:09:fc:9c:bb:
                    ab:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:F8:B9:4E:1D:39:F9:F7:73:2B:F9:F2:96:02:AF:22:10:F8:7F:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/7eeffff2-ead2-3c15-b288-2f9b9a033511.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.91.109.0/24
                  98.98.230.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:67:b6:8e:9b:34:eb:50:0a:96:40:28:9e:21:1e:32:66:ad:
         8b:27:ce:4f:b0:69:b6:3f:fa:79:93:2a:e1:e0:9f:46:8f:af:
         4d:e7:5f:4e:e2:bf:ef:99:04:d5:42:2e:2a:54:9c:3c:c1:3e:
         44:6c:a1:b8:ed:57:2a:6c:7d:39:3f:d1:37:c1:4c:40:1c:84:
         4f:bb:a3:2f:a7:73:72:f5:cb:7b:89:c2:f8:ac:c8:36:82:46:
         54:76:09:1a:e5:3f:48:b8:93:80:e9:98:e9:9a:e6:82:89:82:
         59:9d:90:6c:81:b5:28:1c:cb:f4:cb:40:63:ac:71:b3:6e:cb:
         1c:18:39:7c:65:14:40:25:fb:e2:ee:cc:bd:ee:15:e2:56:c7:
         15:c8:a6:65:bb:75:c9:b4:d2:67:2e:5d:49:30:f2:5b:c6:ae:
         4a:2b:2d:a3:5b:ae:64:d7:19:9f:ca:06:fc:25:e8:f3:ee:68:
         0e:56:a8:d4:cd:b6:75:a0:2d:b8:7e:a5:2d:b0:9d:b2:53:3c:
         1c:fe:65:90:66:bf:b6:4f:4d:6d:c9:96:97:42:38:22:d2:2b:
         11:32:fb:ca:48:74:66:8d:d6:fd:0f:fc:6a:d3:da:8c:f3:db:
         ea:53:6f:1c:2c:df:ef:3a:85:66:33:72:4e:be:b0:44:00:04:
         5f:29:33:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:40:25 2026 by rpki-client