Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eea0cb92-050e-479f-bff4-dddd68eb4e04/f892866d-30f5-3571-8c05-96164e674d1f.roa
File:                     f892866d-30f5-3571-8c05-96164e674d1f.roa (raw, json)
Hash identifier:          3WwinARlPyrueGLZlnaVdooGH22SOvpuzA6zY81E/Zc=
Subject key identifier:   C5:F8:30:B1:D7:86:BB:08:49:EF:42:78:D5:6C:C4:3C:03:30:EE:7A
Certificate issuer:       /CN=eea0cb92-050e-479f-bff4-dddd68eb4e04
Certificate serial:       010D0C9F4328584CB6B710E21BE2F1DB2F450600
Authority key identifier: F8:B6:CA:B8:C6:2D:14:6D:0B:16:82:3C:35:57:84:26:9C:01:0E:41
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eea0cb92-050e-479f-bff4-dddd68eb4e04.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eea0cb92-050e-479f-bff4-dddd68eb4e04/f892866d-30f5-3571-8c05-96164e674d1f.roa
Signing time:             Sun 01 Feb 2026 02:00:32 +0000
ROA not before:           Sun 01 Feb 2026 02:00:32 +0000
ROA not after:            Sat 02 May 2026 01:00:32 +0000
asID:                     40806
IP address blocks:        23.149.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eea0cb92-050e-479f-bff4-dddd68eb4e04/eea0cb92-050e-479f-bff4-dddd68eb4e04.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eea0cb92-050e-479f-bff4-dddd68eb4e04/eea0cb92-050e-479f-bff4-dddd68eb4e04.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eea0cb92-050e-479f-bff4-dddd68eb4e04.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b6:b7:10:e2:1b:e2:f1:db:2f:45:06:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eea0cb92-050e-479f-bff4-dddd68eb4e04
        Validity
            Not Before: Feb  1 02:00:32 2026 GMT
            Not After : May  2 01:00:32 2026 GMT
        Subject: CN=d89ef97a-3817-416a-99c2-320ea67c5acd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:37:c1:11:d3:cc:9b:08:82:84:2a:bc:09:2d:
                    f3:fb:e0:60:aa:04:9c:21:2e:6d:70:2e:8c:39:0e:
                    f3:5e:3b:5a:f5:4b:74:95:74:f5:6e:05:46:60:7c:
                    50:f5:8c:4c:5a:76:99:9e:8e:cb:3b:ce:0c:37:48:
                    c9:4d:0c:1f:ab:4a:8b:8a:2a:25:0c:e3:49:2e:2b:
                    94:95:48:ac:1e:e6:d3:e4:ee:41:70:36:bd:95:71:
                    92:6a:6b:d0:40:09:a8:c2:59:54:0b:31:f3:3e:9e:
                    9d:f7:d0:f8:b6:33:3e:ce:d7:74:4d:ed:a3:cd:fd:
                    3c:10:1b:80:f7:62:46:76:85:4f:82:39:c9:a6:fc:
                    a4:74:99:ed:d2:80:16:8a:94:0c:ce:5a:ac:a9:e7:
                    ca:6b:c5:a0:09:af:8a:7c:37:e2:ec:33:18:7b:e6:
                    3f:2d:58:90:30:91:10:e4:c1:32:52:ad:50:c5:8a:
                    c7:6d:59:93:08:ce:19:28:7d:23:22:12:5c:20:b1:
                    dc:c4:35:79:cf:da:dd:32:04:a8:7e:b5:83:43:c0:
                    01:fa:b6:7f:9a:24:4a:44:28:ad:e1:8c:39:df:5f:
                    f2:16:8c:e7:15:fa:da:4f:9f:dc:d9:84:12:3b:58:
                    85:b5:ed:c8:0a:8f:2a:d7:87:b4:b0:44:a5:fa:ed:
                    1a:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:F8:30:B1:D7:86:BB:08:49:EF:42:78:D5:6C:C4:3C:03:30:EE:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eea0cb92-050e-479f-bff4-dddd68eb4e04/f892866d-30f5-3571-8c05-96164e674d1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eea0cb92-050e-479f-bff4-dddd68eb4e04/eea0cb92-050e-479f-bff4-dddd68eb4e04.crl

            X509v3 Authority Key Identifier:
                keyid:F8:B6:CA:B8:C6:2D:14:6D:0B:16:82:3C:35:57:84:26:9C:01:0E:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eea0cb92-050e-479f-bff4-dddd68eb4e04.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.149.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:85:7f:a9:75:88:db:7d:ce:69:4f:b7:1e:11:32:e1:5d:62:
         d9:58:48:4c:fe:45:b7:cd:cb:7b:b6:a5:7a:e0:77:67:17:21:
         1a:a5:1a:52:ae:8c:69:bb:82:53:13:92:b7:75:98:4d:01:0e:
         c1:6e:4d:15:e0:d5:bb:b8:b0:70:d3:52:21:9d:be:67:9b:86:
         85:88:45:3a:b2:9e:cc:6f:e3:50:05:bf:65:b3:a3:0b:54:48:
         e3:d7:7b:d3:7d:3d:21:ac:35:7f:f8:fc:23:20:87:64:ff:fe:
         fb:3c:a8:e9:ec:1b:d4:d0:d2:34:b4:82:ac:e7:c4:72:40:d7:
         44:d9:4a:03:a0:25:4b:23:33:40:53:cf:91:4a:81:4d:7b:e0:
         9b:fb:78:42:aa:d0:50:dd:8c:ee:60:b9:8f:91:90:77:77:96:
         25:87:1e:e4:e1:38:bc:59:ca:24:a0:de:2c:a1:2d:5b:52:0b:
         24:93:11:bd:4e:6d:30:1c:85:4d:ae:55:64:82:01:5d:bc:85:
         17:cd:94:13:a6:16:67:26:6a:cc:2d:cc:77:62:b7:9f:b5:f1:
         a0:72:d3:79:86:7b:3c:f6:1f:2d:33:5d:b4:95:8f:bc:69:90:
         b6:35:34:75:97:12:db:82:32:16:41:b3:c9:b5:9a:97:55:b7:
         d9:00:80:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:27:49 2026 by rpki-client