Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/10e81901-486f-483f-806f-344bd4fe0341/f790e733-5968-35d0-8b67-400bde956cc8.roa
File:                     f790e733-5968-35d0-8b67-400bde956cc8.roa (raw, json)
Hash identifier:          Ah4a4KIVBFNXH3xmNaRzMi4flVgMhzr1a5lc+dPR3WE=
Subject key identifier:   E1:D5:8D:DF:B3:F7:78:C8:6B:A8:32:16:D6:10:8B:8A:0F:B5:97:43
Certificate issuer:       /CN=10e81901-486f-483f-806f-344bd4fe0341
Certificate serial:       010D0C9F4328584CE62CB5758017133B2A142B20
Authority key identifier: 5F:95:1B:50:BE:51:5C:E6:54:C6:F3:D1:B8:87:A2:9D:73:41:8F:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/10e81901-486f-483f-806f-344bd4fe0341.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/10e81901-486f-483f-806f-344bd4fe0341/f790e733-5968-35d0-8b67-400bde956cc8.roa
Signing time:             Wed 18 Feb 2026 02:00:31 +0000
ROA not before:           Wed 18 Feb 2026 02:00:31 +0000
ROA not after:            Tue 19 May 2026 01:00:31 +0000
asID:                     33000
IP address blocks:        23.147.248.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/10e81901-486f-483f-806f-344bd4fe0341/10e81901-486f-483f-806f-344bd4fe0341.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/10e81901-486f-483f-806f-344bd4fe0341/10e81901-486f-483f-806f-344bd4fe0341.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/10e81901-486f-483f-806f-344bd4fe0341.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e6:2c:b5:75:80:17:13:3b:2a:14:2b:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10e81901-486f-483f-806f-344bd4fe0341
        Validity
            Not Before: Feb 18 02:00:31 2026 GMT
            Not After : May 19 01:00:31 2026 GMT
        Subject: CN=c8148c2f-8810-455f-b7f3-4fa29a85164c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:49:13:a2:33:10:8e:7b:ff:10:3f:3a:db:50:
                    f1:06:7c:45:f0:1d:de:e0:00:af:41:da:ed:c4:b8:
                    3a:62:38:0a:75:45:8a:a2:5c:c5:c7:ac:f5:89:c7:
                    52:cf:32:91:be:21:8e:2a:ca:ca:85:11:55:79:e0:
                    8f:2c:4f:3b:fd:39:4d:34:dc:62:6d:a4:59:b9:28:
                    8b:8e:42:5b:6a:04:45:2b:7e:1d:71:d6:3f:b0:40:
                    85:ea:fd:4a:17:fd:dd:c1:fc:c7:ce:85:ea:a3:9e:
                    aa:8a:68:da:97:69:94:b1:17:c3:bf:63:d7:bb:c0:
                    09:07:78:c9:d5:92:37:ec:d3:80:65:27:f7:ba:3f:
                    23:dc:29:5b:a3:54:45:74:98:c6:16:50:0a:bf:55:
                    57:3f:2a:d1:51:45:71:60:0b:81:2d:5b:bd:c1:4c:
                    76:2d:5c:56:7a:04:e4:ce:23:af:8f:13:44:14:59:
                    15:08:d4:e3:70:cb:38:23:7f:cd:1a:0d:13:ec:d1:
                    7f:21:1a:c7:dd:88:62:2d:0b:c3:dd:9a:7e:56:27:
                    ab:01:89:e2:03:7e:9d:45:42:fc:ca:e7:e0:02:07:
                    5c:db:dc:73:22:e2:d6:bd:80:ce:1f:09:41:bd:eb:
                    50:8a:4f:5c:13:d1:4a:9d:0f:2c:76:a7:78:66:7f:
                    da:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:D5:8D:DF:B3:F7:78:C8:6B:A8:32:16:D6:10:8B:8A:0F:B5:97:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/10e81901-486f-483f-806f-344bd4fe0341/f790e733-5968-35d0-8b67-400bde956cc8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/10e81901-486f-483f-806f-344bd4fe0341/10e81901-486f-483f-806f-344bd4fe0341.crl

            X509v3 Authority Key Identifier:
                keyid:5F:95:1B:50:BE:51:5C:E6:54:C6:F3:D1:B8:87:A2:9D:73:41:8F:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/10e81901-486f-483f-806f-344bd4fe0341.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.147.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:69:26:46:95:26:fb:13:3c:99:2e:b3:2e:dd:d8:5d:e8:ec:
         3e:21:3d:05:90:89:de:ae:23:2d:e6:27:97:c7:2d:d1:8a:72:
         ab:2a:c1:bc:1c:c2:85:8c:57:71:4d:0f:fa:dc:c1:c6:bc:c2:
         c6:0c:ae:a7:a4:3d:6c:ba:ba:63:a7:9f:14:6e:87:53:c3:ff:
         c1:4f:6d:ec:28:3a:91:30:99:ac:5d:60:e5:e5:b5:a7:6b:fb:
         3d:db:49:8d:17:5e:c1:00:a5:ff:76:12:93:c7:91:6f:36:6e:
         49:62:3c:1b:a2:67:20:6a:8d:70:8f:cb:e1:44:4f:e6:d3:41:
         e8:2f:5a:41:e6:b0:13:86:ff:16:e4:c0:e0:b0:50:af:13:4d:
         63:f1:55:19:79:6b:ce:73:3c:51:32:24:c5:bd:11:5e:e4:6f:
         09:ca:1f:2e:1a:94:76:6b:e7:f0:6c:d5:18:5c:20:98:7f:68:
         b7:57:34:56:7b:46:bb:6b:ff:4c:86:08:5e:05:05:15:4e:37:
         91:86:7d:3d:7b:18:ea:d6:1d:d1:54:d1:7e:34:2a:9c:38:34:
         be:67:77:eb:9b:d7:3f:86:3d:e1:0c:32:b3:30:f1:66:ef:75:
         23:bd:02:e8:d3:33:ab:1c:1b:aa:c2:8c:da:70:0b:a9:0c:e6:
         32:b1:08:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:31:37 2026 by rpki-client