Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7/1e1be535-508c-330e-a6e2-85aa2a913569.roa
File:                     1e1be535-508c-330e-a6e2-85aa2a913569.roa (raw, json)
Hash identifier:          IEKRLorsgUVXy5+rH1T8KvpX1yQDhIgUMROvfanpNMc=
Subject key identifier:   30:87:3B:76:EC:CB:83:7F:8F:29:C6:6F:D9:5A:49:66:C0:38:33:FB
Certificate issuer:       /CN=2bc648c2-2f95-48f5-acb7-9e8a2f9123a7
Certificate serial:       010D0C9F4328584CEFF25ED75D636BD51FCBC100
Authority key identifier: 2B:89:09:2B:FF:EC:8F:78:27:D8:87:D9:14:DA:8E:24:E7:4C:1C:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7/1e1be535-508c-330e-a6e2-85aa2a913569.roa
Signing time:             Sat 21 Feb 2026 14:00:41 +0000
ROA not before:           Sat 21 Feb 2026 14:00:41 +0000
ROA not after:            Fri 22 May 2026 13:00:41 +0000
asID:                     8095
IP address blocks:        23.181.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ef:f2:5e:d7:5d:63:6b:d5:1f:cb:c1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc648c2-2f95-48f5-acb7-9e8a2f9123a7
        Validity
            Not Before: Feb 21 14:00:41 2026 GMT
            Not After : May 22 13:00:41 2026 GMT
        Subject: CN=939794b6-e73a-4150-a3d1-e430a7e44e1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:b4:24:07:3a:27:e8:e8:49:65:4f:6b:db:8e:
                    58:65:b3:4b:71:e6:89:fd:6a:a0:df:9a:88:1a:c2:
                    23:f5:69:c6:b6:10:f6:9e:08:5b:e9:f0:9f:64:49:
                    b9:bc:ce:91:17:4f:84:e8:2a:ec:10:b6:5b:1d:0a:
                    0a:28:3e:18:75:35:e7:73:cb:51:87:61:02:12:87:
                    c3:44:3e:d8:79:e1:b2:26:bb:1e:bf:d6:a4:e8:e9:
                    eb:89:90:68:cd:3e:7b:e3:bd:8a:e3:07:20:68:14:
                    77:35:4a:c8:0e:83:5d:be:5d:2c:05:8a:63:8f:13:
                    61:18:5b:be:18:77:b0:80:71:de:76:12:07:11:9a:
                    bb:d6:8f:1a:d1:48:86:3b:2b:5b:52:af:1d:8a:34:
                    fb:e1:0d:25:b5:0e:cc:a5:a0:46:93:1c:b7:12:bc:
                    6f:3a:c1:51:b5:7f:f2:19:ca:61:d1:e1:ac:f6:42:
                    f5:c3:0d:bf:65:a4:8c:28:14:50:f0:fd:fa:6f:d1:
                    b8:f9:59:77:75:24:28:d9:04:ac:e8:6f:ee:2d:55:
                    00:11:96:92:0b:7c:2f:70:11:79:a4:28:cc:c5:0a:
                    05:8b:7f:56:5f:70:0f:43:ba:b3:ae:bf:9f:0b:09:
                    91:d6:59:9d:10:83:94:0f:5b:f9:e9:0f:48:32:f8:
                    84:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:87:3B:76:EC:CB:83:7F:8F:29:C6:6F:D9:5A:49:66:C0:38:33:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7/1e1be535-508c-330e-a6e2-85aa2a913569.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.crl

            X509v3 Authority Key Identifier:
                keyid:2B:89:09:2B:FF:EC:8F:78:27:D8:87:D9:14:DA:8E:24:E7:4C:1C:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.181.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:a2:a3:86:b8:42:eb:dc:09:6a:5f:a1:af:aa:25:46:f3:41:
         a9:dc:bf:b0:2b:40:1f:91:8b:33:fa:58:5c:6c:61:7a:70:c4:
         60:41:fa:8e:2c:ac:dc:0e:d4:c8:c7:df:a3:b8:08:2a:b2:8c:
         07:0d:16:29:9d:68:59:bf:8c:6d:4b:a2:38:99:a5:c9:ed:69:
         3a:37:17:d1:3c:af:22:dc:4a:04:18:a0:07:9c:92:df:78:f9:
         96:00:6d:f5:1d:5c:21:3c:b3:e2:30:d5:32:2e:63:19:60:c4:
         1c:a4:64:e2:e6:7b:85:00:f8:3e:4e:5d:1e:1b:b7:86:0a:e4:
         45:02:8f:f0:7e:cf:06:70:3c:49:b9:08:e9:a3:1a:af:42:7b:
         43:9e:8e:b5:9a:2e:d3:7e:d2:f4:e0:d9:2e:3d:66:0d:a9:69:
         21:15:15:d8:17:2f:36:24:a2:1e:88:a3:bb:74:19:71:3e:52:
         51:b3:96:da:a2:34:6a:0c:3b:b0:3d:ec:25:f2:66:9c:a9:6a:
         52:dc:eb:4f:07:2c:9e:fd:64:e5:65:c2:0a:85:03:5c:ed:40:
         3f:5c:fc:a3:d7:1f:b8:d2:94:fd:39:4b:93:65:90:89:2c:9b:
         4e:e8:9e:97:05:4b:8e:aa:96:2d:7c:fa:ee:13:cf:11:ef:11:
         7b:a1:57:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:52:34 2026 by rpki-client