Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3c7535f4-d3f1-4e7f-b379-0835e02fb280/fb9f7f15-6477-3f7a-b6fd-fb663e418131.roa
File:                     fb9f7f15-6477-3f7a-b6fd-fb663e418131.roa (raw, json)
Hash identifier:          1zZSVKSG5VTE4NZKRmJPCOw+P4CfD8o6k37665ZK81I=
Subject key identifier:   F2:50:08:14:60:04:5D:59:2F:41:5C:95:8F:EB:4B:35:7D:AD:22:D7
Certificate issuer:       /CN=3c7535f4-d3f1-4e7f-b379-0835e02fb280
Certificate serial:       010D0C9F4328584CF5878FF62DA6FBB9463E7780
Authority key identifier: 6A:75:98:EE:10:F6:3C:A4:73:F2:97:8B:E2:08:9A:00:F0:E2:DA:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3c7535f4-d3f1-4e7f-b379-0835e02fb280.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3c7535f4-d3f1-4e7f-b379-0835e02fb280/fb9f7f15-6477-3f7a-b6fd-fb663e418131.roa
Signing time:             Mon 23 Feb 2026 14:00:41 +0000
ROA not before:           Mon 23 Feb 2026 14:00:41 +0000
ROA not after:            Sun 24 May 2026 13:00:41 +0000
asID:                     393224
IP address blocks:        23.128.98.0/24 maxlen: 24
                          2620:137:e001::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3c7535f4-d3f1-4e7f-b379-0835e02fb280/3c7535f4-d3f1-4e7f-b379-0835e02fb280.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3c7535f4-d3f1-4e7f-b379-0835e02fb280/3c7535f4-d3f1-4e7f-b379-0835e02fb280.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3c7535f4-d3f1-4e7f-b379-0835e02fb280.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f5:87:8f:f6:2d:a6:fb:b9:46:3e:77:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c7535f4-d3f1-4e7f-b379-0835e02fb280
        Validity
            Not Before: Feb 23 14:00:41 2026 GMT
            Not After : May 24 13:00:41 2026 GMT
        Subject: CN=f31a02b2-b555-477c-a404-b2bdcee2510a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:20:44:ad:35:10:b3:6f:ba:a9:90:38:94:eb:
                    7f:1a:25:9e:e0:2f:2f:49:d0:ae:3b:43:8b:99:e7:
                    ff:53:50:aa:56:20:3c:25:10:cf:e2:c0:ff:87:ad:
                    c4:64:af:14:6b:6d:46:91:b6:76:9b:d6:61:dc:93:
                    65:f7:ee:8c:4e:bf:0f:eb:48:d5:eb:52:af:91:22:
                    c2:0c:77:9a:35:a5:1b:74:c0:60:19:86:bd:e1:65:
                    d5:87:6e:f0:db:75:b3:1a:4d:e7:da:44:d7:65:4f:
                    d5:3d:97:20:88:a2:50:e6:f6:68:72:63:c0:15:dd:
                    46:46:a8:38:d2:b8:13:f3:c7:6a:b3:c3:60:d9:87:
                    27:d8:9f:78:e6:ce:7f:d0:6b:9d:28:69:61:50:73:
                    59:5e:7c:71:1a:39:ac:c0:75:35:2c:c7:d9:aa:11:
                    84:ec:bb:a1:c4:54:52:1d:85:41:d8:51:9c:68:f8:
                    1b:2a:51:bf:b9:36:58:05:64:dc:74:5a:ee:39:87:
                    e4:f1:be:57:88:ad:06:85:c6:39:5c:65:7d:14:64:
                    7d:4c:eb:96:6b:6c:fa:98:ae:da:56:09:45:d6:18:
                    dc:3f:93:f4:f9:80:9a:cb:63:ed:dd:61:2e:6a:3e:
                    c0:88:59:7d:38:76:9b:e2:ff:f4:51:b2:c3:87:a8:
                    22:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:50:08:14:60:04:5D:59:2F:41:5C:95:8F:EB:4B:35:7D:AD:22:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3c7535f4-d3f1-4e7f-b379-0835e02fb280/fb9f7f15-6477-3f7a-b6fd-fb663e418131.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3c7535f4-d3f1-4e7f-b379-0835e02fb280/3c7535f4-d3f1-4e7f-b379-0835e02fb280.crl

            X509v3 Authority Key Identifier:
                keyid:6A:75:98:EE:10:F6:3C:A4:73:F2:97:8B:E2:08:9A:00:F0:E2:DA:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3c7535f4-d3f1-4e7f-b379-0835e02fb280.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.128.98.0/24
                IPv6:
                  2620:137:e001::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:c1:5c:b9:e2:6e:41:b6:dc:42:10:e0:8f:96:1f:1a:73:97:
         3e:f8:78:33:48:19:ab:50:70:dc:1e:a5:9b:10:09:4f:7c:04:
         88:64:72:41:25:d4:ef:73:fd:e6:9a:88:4b:e0:0d:2c:64:63:
         88:ef:31:9a:95:af:57:66:06:0f:36:75:24:4f:54:a3:7e:e7:
         ea:e8:eb:45:2c:80:48:77:f3:31:e1:a6:f2:43:8f:a4:c8:bc:
         c4:32:b9:81:d5:03:d0:b7:5f:dc:37:3b:76:b0:4c:87:47:ff:
         31:cf:12:5d:fe:79:0d:7f:a7:ac:56:bb:d7:85:9c:0a:ca:43:
         8f:89:85:98:4d:6e:9f:bc:f0:d3:06:9b:0a:a6:92:1a:c2:eb:
         65:d5:67:03:71:57:80:cd:bb:50:75:b1:95:c7:b5:55:6e:97:
         67:59:5b:98:52:9b:74:cf:a3:8c:d1:64:ce:91:84:15:13:b1:
         23:ae:04:88:19:5a:4b:fe:79:fb:16:fc:d7:4a:49:cb:c2:d8:
         81:bd:4a:ae:f3:1e:99:42:04:c9:ae:f3:62:d2:09:c9:55:f7:
         c8:5b:5b:af:60:c2:ac:f7:c2:7c:66:03:9b:ea:56:ee:6a:ff:
         09:b0:5b:b5:95:0f:a2:3d:ec:18:78:8b:da:98:6a:a2:bc:5f:
         fd:d0:61:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:59:43 2026 by rpki-client