Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1496e1f0-76eb-4e96-9a74-121b9e2d3a1f/4a07fed4-5bc8-3b93-8f3a-f1bb4472123f.roa
File:                     4a07fed4-5bc8-3b93-8f3a-f1bb4472123f.roa (raw, json)
Hash identifier:          O/UhXfS/2lxtpLQbvPBh51KF5GmDLHlRK4ihx45MLF0=
Subject key identifier:   24:A9:A5:3B:DA:3F:B7:0D:CA:C5:BC:56:98:B3:D3:81:97:C4:2F:5B
Certificate issuer:       /CN=1496e1f0-76eb-4e96-9a74-121b9e2d3a1f
Certificate serial:       010D0C9F4328584D00B279F06374ABD9781D1100
Authority key identifier: B6:CE:63:1A:D1:1C:0D:C4:48:F1:02:2E:39:1B:C4:D5:2B:EE:C8:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1496e1f0-76eb-4e96-9a74-121b9e2d3a1f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1496e1f0-76eb-4e96-9a74-121b9e2d3a1f/4a07fed4-5bc8-3b93-8f3a-f1bb4472123f.roa
Signing time:             Fri 27 Feb 2026 14:00:40 +0000
ROA not before:           Fri 27 Feb 2026 14:00:40 +0000
ROA not after:            Thu 28 May 2026 13:00:40 +0000
asID:                     399055
IP address blocks:        23.173.16.0/24 maxlen: 24
                          2606:22c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1496e1f0-76eb-4e96-9a74-121b9e2d3a1f/1496e1f0-76eb-4e96-9a74-121b9e2d3a1f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1496e1f0-76eb-4e96-9a74-121b9e2d3a1f/1496e1f0-76eb-4e96-9a74-121b9e2d3a1f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1496e1f0-76eb-4e96-9a74-121b9e2d3a1f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:00:b2:79:f0:63:74:ab:d9:78:1d:11:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1496e1f0-76eb-4e96-9a74-121b9e2d3a1f
        Validity
            Not Before: Feb 27 14:00:40 2026 GMT
            Not After : May 28 13:00:40 2026 GMT
        Subject: CN=3e61591a-809b-4ad4-9c64-385f273d446d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:0b:ef:35:89:91:d6:26:2b:14:8f:84:5c:9d:
                    19:74:65:9a:e2:8b:dc:1b:ff:64:be:ba:25:8b:61:
                    9d:9e:28:d9:67:51:2a:c4:48:f7:4c:d0:71:bd:eb:
                    79:2b:f9:ee:8f:e3:26:31:50:18:81:0a:62:ce:4d:
                    e2:6f:73:4f:1a:db:d9:aa:ee:1a:d8:29:ad:db:50:
                    da:8a:88:b4:95:72:6a:9b:ef:39:d4:ef:a5:2c:08:
                    6e:29:f7:5c:ae:ab:ce:7f:88:7e:9f:1c:44:33:06:
                    51:96:25:e2:db:41:55:da:ea:59:03:ae:ec:47:32:
                    36:1b:79:d8:44:4e:99:23:70:6d:9a:8a:09:a8:39:
                    e6:4e:0e:0c:2b:ba:5a:0e:74:75:5b:70:37:bc:d6:
                    4f:c0:e4:2b:77:09:df:eb:0e:36:2b:14:3e:d2:eb:
                    ac:f5:c0:a9:08:94:d1:67:1a:2d:c3:e1:7b:b0:d7:
                    62:ce:91:48:df:8c:8e:f9:f4:d7:f4:f3:58:0c:11:
                    bc:9d:23:2b:b9:73:90:71:ed:07:20:65:ff:73:7f:
                    1c:95:fc:fc:5b:83:14:dd:13:7a:60:e2:62:7b:d1:
                    71:42:f2:8d:8a:d8:d1:8a:02:ea:0d:b6:b6:6c:99:
                    83:8c:8d:75:b7:d2:d6:33:ab:96:1c:63:90:e0:73:
                    22:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:A9:A5:3B:DA:3F:B7:0D:CA:C5:BC:56:98:B3:D3:81:97:C4:2F:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1496e1f0-76eb-4e96-9a74-121b9e2d3a1f/4a07fed4-5bc8-3b93-8f3a-f1bb4472123f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1496e1f0-76eb-4e96-9a74-121b9e2d3a1f/1496e1f0-76eb-4e96-9a74-121b9e2d3a1f.crl

            X509v3 Authority Key Identifier:
                keyid:B6:CE:63:1A:D1:1C:0D:C4:48:F1:02:2E:39:1B:C4:D5:2B:EE:C8:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1496e1f0-76eb-4e96-9a74-121b9e2d3a1f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.173.16.0/24
                IPv6:
                  2606:22c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:89:25:96:30:93:68:72:02:af:ee:ec:3c:c2:00:82:cc:89:
         1e:79:59:d8:ac:5c:be:73:46:b5:89:24:33:40:2c:ff:21:ad:
         29:4b:4e:b7:cd:d5:2e:33:31:4b:72:a6:7e:64:b6:90:b9:fc:
         3d:91:a2:5f:65:91:bb:2a:53:e3:19:fb:a8:94:16:0d:70:00:
         22:87:d5:b4:95:0e:99:88:11:ec:e4:08:26:e2:71:a8:b7:e1:
         d9:02:60:d2:ea:2e:57:da:6e:c0:5b:ca:2a:a7:df:91:4c:6c:
         43:97:8f:c3:4f:84:5d:dc:2b:4d:46:02:ec:ab:61:83:fd:59:
         22:68:27:d2:86:3a:7d:4e:b7:19:f6:2d:29:a6:c0:e9:78:51:
         63:53:55:c8:71:a3:40:91:ee:3e:9d:be:2c:38:70:55:17:e0:
         31:5c:3e:46:72:65:0d:2f:f9:32:fc:51:fd:1f:49:83:53:0b:
         86:ae:ef:71:1b:bf:fa:13:0b:86:2b:1e:6c:fa:af:02:72:c3:
         1a:e4:40:4d:36:53:a6:77:58:40:0c:b8:13:ee:63:57:26:5f:
         a6:7c:f1:46:67:94:92:50:e2:46:67:5c:e4:bc:cc:91:33:32:
         68:6c:8e:b0:1e:44:fb:ac:95:0d:c6:c5:13:a0:6d:34:35:09:
         e7:7f:98:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:35:20 2026 by rpki-client