Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/107c43f5-71e6-35bc-b458-7b46bb6e0543.roa
File:                     107c43f5-71e6-35bc-b458-7b46bb6e0543.roa (raw, json)
Hash identifier:          ytPqlGezTip2z4Y3jhj9zL8z3zetjeukdi7nbBMFIW0=
Subject key identifier:   18:75:CA:74:7A:AA:33:0C:94:B0:9F:54:35:0A:D3:05:8C:2B:88:4D
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584CD4078C4C3E9EBD3E831A14F0
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/107c43f5-71e6-35bc-b458-7b46bb6e0543.roa
Signing time:             Wed 11 Feb 2026 14:00:41 +0000
ROA not before:           Wed 11 Feb 2026 14:00:41 +0000
ROA not after:            Tue 12 May 2026 13:00:41 +0000
asID:                     54113
IP address blocks:        23.235.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d4:07:8c:4c:3e:9e:bd:3e:83:1a:14:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Feb 11 14:00:41 2026 GMT
            Not After : May 12 13:00:41 2026 GMT
        Subject: CN=c205b0de-134e-4d87-b42f-771c86d665c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d1:5d:dd:36:71:bc:7b:06:ff:15:a2:51:af:
                    7e:7b:45:4d:26:34:bc:b8:a0:b2:56:d0:17:51:14:
                    a5:c6:1e:9b:9f:d4:ac:ee:f8:58:86:5f:94:20:18:
                    b7:f8:d5:50:c7:8f:43:30:3d:cd:83:17:af:e9:50:
                    7e:ed:ba:bc:67:4f:0c:30:3d:b3:91:b3:32:06:09:
                    22:d0:fd:00:f7:10:fe:7a:4d:31:5a:a1:87:85:9e:
                    50:97:d0:31:a9:ed:ab:7d:a2:93:cd:cf:68:53:c1:
                    6a:66:68:a8:92:72:06:e0:85:df:f6:33:b8:37:51:
                    f6:be:b2:1f:bb:65:20:d9:ab:01:ad:8b:93:00:36:
                    36:eb:33:a3:44:01:cb:71:e9:eb:65:37:53:3e:78:
                    ab:57:e6:50:52:cf:86:55:9d:0c:10:6e:e4:84:dc:
                    ef:ab:ed:b6:a1:fc:29:69:1c:36:a6:14:ca:e6:94:
                    bc:d9:29:a1:6c:c1:4d:a5:eb:14:e6:e9:1e:95:56:
                    f9:03:f1:09:b4:32:06:c3:19:ac:00:2c:ab:5a:d6:
                    d4:3a:32:dd:33:f6:5e:f0:ba:c1:ca:61:e3:08:50:
                    2c:77:be:8f:c2:fe:e6:53:52:ce:0f:41:e9:d0:eb:
                    e5:70:ce:b2:ed:5e:bb:53:6e:94:bf:42:2c:50:f9:
                    6f:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:75:CA:74:7A:AA:33:0C:94:B0:9F:54:35:0A:D3:05:8C:2B:88:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/107c43f5-71e6-35bc-b458-7b46bb6e0543.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.235.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:6c:24:70:2c:be:4f:84:53:50:db:27:b3:28:77:2f:52:31:
         9b:75:ea:a9:6f:f2:1d:e0:25:c7:3d:75:f9:cf:fa:12:85:60:
         76:fe:6c:b5:c1:54:e6:68:93:39:48:1d:3b:29:90:69:63:29:
         61:b3:1b:35:22:37:4c:78:d3:49:f6:7a:8a:a0:3d:21:73:d4:
         45:42:64:2f:6f:5d:8f:85:bc:88:83:08:0d:4c:b0:4e:b8:d7:
         8f:63:66:0a:4f:21:e9:eb:ca:d2:08:35:8b:81:c0:b0:3c:27:
         89:d2:c6:50:da:ff:2e:c3:23:13:f4:9a:21:dc:b6:93:8d:48:
         9d:3d:77:68:15:f3:55:46:cb:24:8e:1f:7c:95:24:bc:9c:93:
         a7:76:e4:f3:6b:0e:9f:1d:59:60:a0:36:c4:01:84:82:ea:c0:
         da:7d:c8:c6:8a:aa:f3:d3:c9:64:b2:3b:8a:7e:51:84:55:96:
         c1:d0:e8:21:8d:b9:a8:bb:4e:24:f6:d0:69:2a:a5:09:ac:c2:
         6e:48:eb:64:e8:e9:55:7c:50:ee:78:e6:7c:88:dc:a0:b0:83:
         70:6b:e6:56:3a:a4:c8:89:31:aa:8f:f4:29:74:a8:96:c0:b0:
         9b:e5:bb:23:84:0e:85:2a:45:6f:9b:10:72:00:53:59:0a:24:
         f2:08:47:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:41:50 2026 by rpki-client