Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a120b5d4-da56-49b1-8ae1-7987a6afde99/c7fb0120-8473-316e-81b4-70f9121c05f9.roa
File:                     c7fb0120-8473-316e-81b4-70f9121c05f9.roa (raw, json)
Hash identifier:          csgCr2j+nkp+tMVixFVwlUEpImhaCvewIhw+N3qz6lY=
Subject key identifier:   C1:78:08:AF:7C:83:1F:EF:52:BF:B0:87:E6:2F:E2:E8:C1:28:99:AC
Certificate issuer:       /CN=a120b5d4-da56-49b1-8ae1-7987a6afde99
Certificate serial:       010D0C9F4328584CAE5737BB4FE5B8740A63B320
Authority key identifier: C0:D7:33:E0:5D:4C:05:6E:3A:7E:94:33:2D:C4:6B:E8:01:48:68:8A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a120b5d4-da56-49b1-8ae1-7987a6afde99.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a120b5d4-da56-49b1-8ae1-7987a6afde99/c7fb0120-8473-316e-81b4-70f9121c05f9.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     394989
IP address blocks:        23.151.192.0/24 maxlen: 24
                          23.151.193.0/24 maxlen: 24
                          2602:febb::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a120b5d4-da56-49b1-8ae1-7987a6afde99/a120b5d4-da56-49b1-8ae1-7987a6afde99.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a120b5d4-da56-49b1-8ae1-7987a6afde99/a120b5d4-da56-49b1-8ae1-7987a6afde99.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a120b5d4-da56-49b1-8ae1-7987a6afde99.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:57:37:bb:4f:e5:b8:74:0a:63:b3:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a120b5d4-da56-49b1-8ae1-7987a6afde99
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=6e9eafa3-bb08-4fba-ac2e-256737ff0854
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:b5:23:01:67:38:ef:9c:72:bc:dc:ec:96:63:
                    52:42:8a:14:4b:ec:b2:89:7e:c0:41:9d:64:70:04:
                    86:64:87:a8:d0:07:ce:03:10:f9:af:e3:81:c3:6d:
                    75:4a:f9:2c:46:df:23:e8:01:84:52:ff:f4:3d:a3:
                    16:ee:b2:c8:75:5e:4f:51:08:cc:ff:3d:3f:e5:3e:
                    eb:30:84:1c:9e:0e:fa:61:78:9d:ef:ed:87:20:a3:
                    da:e5:4a:7f:1a:a1:39:7f:88:1a:da:62:67:91:73:
                    91:15:b2:2b:d5:be:51:43:de:79:ca:7b:e1:bd:9b:
                    7e:03:66:f0:c1:9f:8c:d5:81:cc:c3:2d:23:ed:67:
                    d7:7c:48:e0:70:d2:04:2a:b6:e8:b3:87:9c:f3:c2:
                    10:a0:00:8d:a8:5a:3f:25:e4:75:49:ed:da:0b:79:
                    3e:c9:cb:d0:78:f0:1d:0e:64:48:9c:b1:3a:7d:e8:
                    f9:cd:00:9b:5d:e7:4c:ca:46:e2:a6:fe:da:20:4a:
                    3e:6c:cc:55:f0:2d:4f:ad:57:77:4d:be:48:5e:3e:
                    75:f3:6f:af:04:39:7d:a3:1a:68:07:02:c0:9c:b7:
                    7f:22:0b:38:11:67:82:98:7b:d9:11:70:5c:b0:47:
                    eb:f9:a5:fd:8c:31:23:79:5b:c3:cc:a0:7b:f6:e7:
                    a7:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:78:08:AF:7C:83:1F:EF:52:BF:B0:87:E6:2F:E2:E8:C1:28:99:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a120b5d4-da56-49b1-8ae1-7987a6afde99/c7fb0120-8473-316e-81b4-70f9121c05f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a120b5d4-da56-49b1-8ae1-7987a6afde99/a120b5d4-da56-49b1-8ae1-7987a6afde99.crl

            X509v3 Authority Key Identifier:
                keyid:C0:D7:33:E0:5D:4C:05:6E:3A:7E:94:33:2D:C4:6B:E8:01:48:68:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a120b5d4-da56-49b1-8ae1-7987a6afde99.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.151.192.0/23
                IPv6:
                  2602:febb::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:72:14:fe:a3:ea:98:95:9f:e3:c9:b7:f2:84:20:f3:f4:7d:
         eb:54:21:cd:6e:d2:46:2f:e1:d9:bd:42:73:2b:fc:23:86:98:
         c2:dd:74:23:16:bf:8d:ed:23:18:c8:4c:50:0a:a2:ce:12:e2:
         12:1e:05:66:53:5d:0e:d7:40:bd:49:97:33:eb:46:ca:d3:cf:
         24:ad:28:3d:4e:e0:76:d0:0a:3f:00:5b:2d:35:ce:a9:84:07:
         85:fa:0b:3f:84:58:c3:ab:5a:de:45:63:6e:7e:01:e8:04:16:
         c6:92:cd:9c:24:f6:fa:ee:6e:6f:b2:82:73:fd:ef:36:50:e1:
         cb:99:17:2a:d3:f3:44:34:4f:a0:89:e5:6c:b8:4d:fc:f0:c5:
         d5:18:cc:17:bd:8c:d0:8e:91:9f:bc:fe:82:5f:f6:c8:a6:2a:
         15:18:04:1e:4f:b3:cb:9e:d0:b2:b5:da:bb:67:26:48:80:f0:
         ee:19:f3:09:11:02:25:8e:fa:aa:3d:9b:14:dd:9d:4d:89:1c:
         33:88:c7:f2:b3:0d:c8:7f:57:18:dc:a0:ee:bc:c0:d7:ab:ed:
         ed:f2:f5:59:3d:67:d1:d0:62:4c:61:a9:50:50:a1:b2:9c:fc:
         7a:e3:06:5f:d9:a8:78:62:29:26:6b:26:bb:1d:a4:05:ba:3d:
         c1:66:77:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:31:32 2026 by rpki-client