Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26/db7be19b-e29a-3fed-8de7-c83ce5094676.roa
File:                     db7be19b-e29a-3fed-8de7-c83ce5094676.roa (raw, json)
Hash identifier:          X7tZ58vaQVG1Lt3KMSBpWCrmLdzrzPTr+/kzwh5z9/s=
Subject key identifier:   AB:6F:7F:01:25:DA:FE:4D:9A:45:03:75:64:AA:05:DB:22:5F:40:AB
Certificate issuer:       /CN=9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26
Certificate serial:       010D0C9F4328584D037D034F51F93A1FE7AB5980
Authority key identifier: 74:72:3E:BF:C2:5D:67:28:C0:C1:10:60:A7:68:80:8F:9E:BA:5C:50
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26/db7be19b-e29a-3fed-8de7-c83ce5094676.roa
Signing time:             Sat 28 Feb 2026 14:00:40 +0000
ROA not before:           Sat 28 Feb 2026 14:00:40 +0000
ROA not after:            Fri 29 May 2026 13:00:40 +0000
asID:                     54098
IP address blocks:        23.92.32.0/24 maxlen: 24
                          23.92.33.0/24 maxlen: 24
                          23.92.34.0/24 maxlen: 24
                          23.92.35.0/24 maxlen: 24
                          23.92.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26/9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26/9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:03:7d:03:4f:51:f9:3a:1f:e7:ab:59:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26
        Validity
            Not Before: Feb 28 14:00:40 2026 GMT
            Not After : May 29 13:00:40 2026 GMT
        Subject: CN=327a3718-de97-4d11-8563-13d78a6bbad0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:32:20:b7:98:84:fb:64:9d:16:cc:69:c2:87:
                    af:99:60:97:2e:5b:7e:c9:c1:de:71:cf:41:46:c2:
                    24:83:55:7a:9b:69:33:ee:a2:69:48:2d:9d:79:8c:
                    d4:5d:a3:73:2e:2c:cd:4e:82:84:df:f1:33:63:71:
                    1b:1d:f0:81:f4:85:b0:70:24:bd:16:cf:d0:8b:52:
                    f6:59:f8:b6:d1:5c:af:57:f8:c3:84:9b:d8:70:d7:
                    68:76:93:19:77:48:ce:7c:37:d3:e9:9c:7d:7b:ad:
                    90:6d:e5:5b:81:ea:94:88:e9:ad:30:eb:a1:8b:ba:
                    77:50:aa:73:fb:14:f1:1c:62:34:d0:49:df:e4:07:
                    18:c2:fa:ff:af:38:a6:e6:42:4b:ef:84:c3:18:15:
                    fa:76:d3:7c:f5:2b:b0:32:97:01:fe:7a:cb:f3:72:
                    1f:db:6b:a9:2a:45:dd:f1:4f:f9:28:38:a4:b5:ce:
                    cd:9c:d6:79:43:b6:6d:c0:47:1a:b6:0b:a2:7c:c3:
                    17:55:5f:c6:a4:47:bc:b6:11:1f:49:12:f9:34:5a:
                    f9:08:da:94:e5:01:e4:a7:e4:16:a4:2e:ce:ad:4c:
                    ea:fc:58:24:aa:b2:64:29:16:df:82:84:54:1a:cd:
                    14:95:f5:6c:3f:c9:01:46:57:f7:24:a8:84:ce:3a:
                    35:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:6F:7F:01:25:DA:FE:4D:9A:45:03:75:64:AA:05:DB:22:5F:40:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26/db7be19b-e29a-3fed-8de7-c83ce5094676.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26/9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26.crl

            X509v3 Authority Key Identifier:
                keyid:74:72:3E:BF:C2:5D:67:28:C0:C1:10:60:A7:68:80:8F:9E:BA:5C:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.92.32.0-23.92.36.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:11:87:a3:81:69:0b:51:ee:17:d0:44:a2:85:81:40:fa:fd:
         a4:b3:75:2a:a6:39:dc:26:d0:24:3e:97:db:7c:e1:2c:e0:33:
         b9:ab:e1:be:d4:80:45:59:00:75:2b:e0:4c:d1:f2:b3:20:b6:
         da:da:28:c0:71:4a:02:ef:df:16:59:f0:9d:01:f3:6c:19:78:
         b5:1e:50:c4:2e:8a:6d:dd:f0:a3:10:4a:3d:a7:70:d8:e3:a0:
         b3:ae:40:90:9f:9a:7f:7f:c6:7d:6d:13:3e:20:78:26:cb:d1:
         a9:ab:c3:e5:d1:cf:47:fb:cc:cd:29:66:76:6a:90:27:2e:f4:
         da:e7:f7:a0:09:91:ea:83:ea:0c:74:4e:8c:19:cd:90:8d:81:
         3c:b5:2b:6a:62:24:0d:21:82:db:d0:b4:c2:11:b5:d8:0b:c4:
         0b:00:1a:29:f5:ad:14:a1:1c:79:03:0e:f2:03:89:63:18:29:
         3f:56:a2:f6:f0:25:55:9b:54:a1:cb:12:fc:59:9b:e9:5a:94:
         76:a8:93:ac:70:0f:85:21:ed:e3:19:27:34:5c:1a:4d:1f:0d:
         88:cd:37:9d:0c:aa:5c:22:ea:75:79:a6:79:b5:bb:f5:e8:0a:
         d5:32:7f:45:61:71:90:bd:cc:52:58:de:7f:2c:35:02:5b:ff:
         c1:b7:3c:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:38:56 2026 by rpki-client