Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/f2695b63-b118-39e4-8015-114589695a4c.roa
File:                     f2695b63-b118-39e4-8015-114589695a4c.roa (raw, json)
Hash identifier:          XTv652F6m/Q3iWe3uqXVnHY078aoGrvXV1qaGZ7ls1M=
Subject key identifier:   4F:1D:73:B1:90:AB:95:64:88:94:E9:D4:45:6E:DB:9A:08:44:7A:7A
Certificate issuer:       /CN=1fc85ba4-8d72-48ed-a166-a76dc2f04287
Certificate serial:       010D0C9F4328584CA78BD8338E3D477907688880
Authority key identifier: 11:BC:5D:01:E6:C9:1B:FB:7F:23:E5:D2:22:91:D6:B4:28:A4:92:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/f2695b63-b118-39e4-8015-114589695a4c.roa
Signing time:             Fri 26 Dec 2025 12:47:06 +0000
ROA not before:           Fri 26 Dec 2025 12:47:06 +0000
ROA not after:            Thu 26 Mar 2026 11:47:06 +0000
asID:                     2516
IP address blocks:        23.226.37.0/24 maxlen: 24
                          23.239.160.0/24 maxlen: 24
                          23.239.164.0/24 maxlen: 24
                          23.239.166.0/24 maxlen: 24
                          107.155.199.0/24 maxlen: 24
                          107.155.240.0/24 maxlen: 24
                          107.155.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/1fc85ba4-8d72-48ed-a166-a76dc2f04287.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/1fc85ba4-8d72-48ed-a166-a76dc2f04287.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:a7:8b:d8:33:8e:3d:47:79:07:68:88:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fc85ba4-8d72-48ed-a166-a76dc2f04287
        Validity
            Not Before: Dec 26 12:47:06 2025 GMT
            Not After : Mar 26 11:47:06 2026 GMT
        Subject: CN=58e98910-1c84-4d4b-95ff-9564a873c781
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:0e:21:f9:3d:25:fb:47:87:59:f2:a2:ed:0a:
                    66:41:e8:61:56:3b:b6:d0:0f:e6:64:b2:34:90:d2:
                    2b:bb:3e:18:ab:e8:78:81:0f:17:f7:96:8c:f7:ba:
                    e5:ce:c5:fa:00:66:c5:41:48:82:e7:da:36:79:eb:
                    ed:bd:06:4a:a4:5e:ea:19:8d:86:56:32:1c:1b:aa:
                    b6:55:2c:7b:48:0d:28:7f:3e:cc:c4:dc:d8:e6:55:
                    bc:0a:1c:65:b2:3f:6c:f1:30:df:6c:42:54:2c:72:
                    61:a1:f7:27:e6:b8:c5:a4:8d:87:29:9f:78:40:49:
                    5e:c4:3a:21:ec:62:c5:5d:61:50:ae:4a:5e:7c:18:
                    cf:3a:7f:a9:4b:9c:e2:ad:24:3b:fa:20:60:93:e3:
                    2d:88:73:40:1b:53:b1:b7:b1:ee:35:b5:50:66:e2:
                    71:69:fd:6a:8f:a3:36:ce:39:f4:05:ec:d9:9e:e3:
                    74:4b:78:69:20:f9:9f:e5:06:ad:7e:7d:fc:9f:bf:
                    69:f6:3f:96:1e:c2:6a:66:7c:bc:cf:1c:3c:88:a0:
                    bc:95:08:7a:cf:bc:e8:68:6a:8f:38:b9:a7:0e:bc:
                    87:65:12:68:13:ce:90:fb:60:30:68:34:11:81:dc:
                    c0:1c:d7:d7:fb:e6:b4:f1:65:d6:d4:1a:ab:9e:7a:
                    c6:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:1D:73:B1:90:AB:95:64:88:94:E9:D4:45:6E:DB:9A:08:44:7A:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/f2695b63-b118-39e4-8015-114589695a4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/1fc85ba4-8d72-48ed-a166-a76dc2f04287.crl

            X509v3 Authority Key Identifier:
                keyid:11:BC:5D:01:E6:C9:1B:FB:7F:23:E5:D2:22:91:D6:B4:28:A4:92:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.226.37.0/24
                  23.239.160.0/24
                  23.239.164.0/24
                  23.239.166.0/24
                  107.155.199.0/24
                  107.155.240.0/24
                  107.155.242.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:1a:aa:77:83:e5:1f:38:0c:82:17:61:06:52:35:a4:45:94:
         4f:5e:bb:8f:78:90:2a:59:0a:e9:69:e1:30:fa:07:06:78:4b:
         2b:1c:eb:08:e9:01:e8:43:a4:ec:a8:66:65:25:55:12:db:23:
         90:bf:3f:09:78:e8:9e:8e:d9:35:33:13:37:7b:c4:5e:84:3a:
         86:9d:16:35:09:9f:f8:a4:65:e5:fa:43:33:d6:de:b7:eb:b2:
         eb:0c:86:94:79:34:47:f6:8d:32:09:85:fb:47:08:14:41:94:
         b6:c2:32:2b:a9:b3:4d:e0:4a:0a:46:ec:65:da:66:51:b8:38:
         e7:a4:43:40:99:59:27:43:f1:fc:3b:2e:52:52:1d:2c:d8:90:
         36:99:9f:40:97:b9:90:62:19:dc:91:6e:03:b1:67:de:4e:84:
         24:de:2a:cd:e9:a0:dd:22:ec:72:23:14:d2:e1:42:58:39:89:
         d7:e6:00:d3:9b:27:10:58:02:db:aa:ac:a1:f9:f0:12:7f:98:
         87:dd:f6:9c:d4:47:9b:b6:1b:7c:7e:a9:93:c0:6a:47:08:6a:
         db:02:87:f5:76:09:aa:5c:0a:c6:b5:f3:82:ae:98:8b:54:85:
         f1:27:24:9a:17:f4:23:6a:03:f5:b7:5d:31:2e:e6:d4:60:1e:
         e3:b9:a7:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:14:11 2026 by rpki-client