Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c7e1258b-b65a-3afb-8cc1-b004824fccb6.roa
File:                     c7e1258b-b65a-3afb-8cc1-b004824fccb6.roa (raw, json)
Hash identifier:          S6OQsaysbpKJQHNelzZxYSVIfEkZYLHGoZomUEP36Y8=
Subject key identifier:   3B:A7:44:39:B0:83:FC:1C:2F:C1:18:D3:CC:37:0D:98:B8:CB:36:28
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584CC34743D42EAE63E75A067840
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c7e1258b-b65a-3afb-8cc1-b004824fccb6.roa
Signing time:             Thu 05 Feb 2026 14:00:40 +0000
ROA not before:           Thu 05 Feb 2026 14:00:40 +0000
ROA not after:            Wed 06 May 2026 13:00:40 +0000
asID:                     852
IP address blocks:        173.182.32.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c3:47:43:d4:2e:ae:63:e7:5a:06:78:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Feb  5 14:00:40 2026 GMT
            Not After : May  6 13:00:40 2026 GMT
        Subject: CN=834c1034-9c39-42cb-ab50-3855af0f5959
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:eb:0a:b4:e3:e8:72:a8:78:c2:57:98:0f:64:
                    8a:25:67:7d:02:29:62:65:4c:4c:b7:28:22:03:5e:
                    7e:94:e4:60:ae:24:03:5b:c4:26:bb:47:31:f2:86:
                    60:ea:f7:dd:a2:af:f6:cb:60:8e:f6:30:73:37:c6:
                    27:aa:88:42:3d:70:d8:4e:43:a7:8a:14:51:4f:42:
                    4f:84:7c:5d:f1:87:d6:fa:6d:43:2f:25:42:37:6a:
                    c8:1c:65:3d:a9:40:f0:6d:cb:9c:b1:f9:6d:7b:fb:
                    cf:89:cf:90:77:8b:1b:71:63:cc:ff:f3:c6:9d:75:
                    dc:1f:b5:cf:e3:d3:54:d6:6b:b5:7e:46:7e:b3:a1:
                    e3:23:af:cd:e8:e1:73:ca:e9:12:48:97:b9:e8:42:
                    39:eb:5a:23:32:d6:94:f5:1b:7d:75:fc:d2:d3:b5:
                    cf:ae:6c:b3:ea:32:22:3c:b3:28:b2:7e:90:59:a2:
                    f7:dd:b5:a8:86:88:ec:ea:d6:a8:29:9c:e3:62:38:
                    54:4b:21:50:3a:82:13:bf:02:ad:fc:dc:a6:01:3f:
                    ca:90:99:43:08:99:69:ac:ca:c4:bc:23:6c:3b:b7:
                    ad:ce:68:9b:95:a2:e7:79:e0:71:89:07:2c:37:44:
                    c0:30:89:1e:f8:5a:6f:0c:23:b9:4c:7c:f0:4b:6a:
                    5f:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:A7:44:39:B0:83:FC:1C:2F:C1:18:D3:CC:37:0D:98:B8:CB:36:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c7e1258b-b65a-3afb-8cc1-b004824fccb6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.182.32.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c6:17:53:6e:2d:55:13:58:a6:85:d8:75:24:fa:d7:ff:18:2f:
         a4:4e:a5:ef:c9:9d:42:d9:4e:2b:af:47:8b:fd:dc:58:92:17:
         b0:24:6d:00:fc:44:83:cf:0f:fb:0d:ab:82:87:d3:91:d4:2c:
         41:c4:51:14:57:c8:a5:f0:bd:bf:e4:b7:d9:92:83:16:f5:d7:
         8d:f1:e5:4c:ee:1e:fc:e9:b9:a3:fb:eb:7b:ab:9e:f5:f8:bb:
         f3:2c:ff:ce:b5:30:b0:a1:e2:01:95:58:94:d9:b9:75:27:be:
         77:76:e3:09:d8:8f:bf:7f:ab:97:c4:50:36:8c:35:b7:70:9d:
         b9:75:a0:c9:2e:9d:94:3d:57:d8:8b:38:df:75:07:50:36:1c:
         02:2b:c0:69:81:29:bf:01:2a:72:1b:5f:15:0b:44:3b:9c:71:
         d8:7f:bc:be:49:d7:a1:24:8f:ab:89:14:cc:ea:ac:a0:a6:85:
         dd:fb:cf:4b:d1:26:57:90:1f:c0:17:06:84:40:2e:ee:ae:df:
         bb:54:e2:4b:eb:b0:d2:ee:73:96:d4:2c:9b:b6:7e:dc:d7:b1:
         3d:37:ff:59:f2:b6:11:1e:ed:0d:35:34:11:29:17:23:ce:65:
         7e:21:cc:00:42:fa:a9:37:77:89:6d:b3:f3:59:7b:5a:80:fa:
         91:2a:17:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:58:19 2026 by rpki-client