Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/e09013f6-fc00-3106-a16f-35172761decd.roa
File:                     e09013f6-fc00-3106-a16f-35172761decd.roa (raw, json)
Hash identifier:          3iwqCO09+Hq+ZijuJE/AgvsybQ+ccbFC2hfQRnyBb4o=
Subject key identifier:   15:83:A9:64:75:3B:82:05:EE:55:F5:77:E2:FE:C1:14:F7:2F:07:2E
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584D016E7F75F4C0B2EB9EB375A0
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/e09013f6-fc00-3106-a16f-35172761decd.roa
Signing time:             Fri 27 Feb 2026 20:20:01 +0000
ROA not before:           Fri 27 Feb 2026 20:20:01 +0000
ROA not after:            Thu 28 May 2026 19:20:01 +0000
asID:                     4766
IP address blocks:        173.44.196.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:01:6e:7f:75:f4:c0:b2:eb:9e:b3:75:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Feb 27 20:20:01 2026 GMT
            Not After : May 28 19:20:01 2026 GMT
        Subject: CN=23a2109f-9fcb-4ab0-8fe5-6ba1d55adc25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e7:fd:c8:a9:a2:12:ed:ea:f1:58:81:f6:d6:
                    ce:7e:9e:9f:e0:c4:d5:62:d9:09:90:7a:78:f5:50:
                    55:8d:ee:41:25:98:68:8b:13:63:b3:75:c7:61:a3:
                    83:5d:1b:2b:78:64:4c:44:50:82:57:2c:6c:eb:7e:
                    08:da:83:33:57:63:29:3c:f4:63:f8:09:7d:69:1f:
                    da:52:de:3d:74:06:b0:0e:0a:b2:a7:33:98:4c:84:
                    d8:d6:ac:53:d7:70:10:a0:0f:06:57:36:0f:c5:02:
                    e1:55:ea:7a:71:c8:0e:fd:41:4e:9a:db:71:0e:7e:
                    ca:64:40:cb:14:47:9b:63:c4:6f:04:4d:7a:39:12:
                    e5:ce:5c:ef:a9:0a:a7:72:db:cc:f0:33:75:5a:2b:
                    71:56:56:3f:82:dc:6e:74:51:4f:43:9b:36:a6:b4:
                    d0:a1:00:c2:16:7d:97:06:d4:7f:59:4a:34:49:dd:
                    22:b1:45:37:c2:5a:01:c6:01:23:4e:99:49:57:93:
                    bd:56:b9:88:d6:96:d3:34:0d:d7:27:a5:aa:be:57:
                    d0:a3:22:36:4d:32:ba:82:be:d3:e6:6c:36:3e:51:
                    6d:27:a1:2c:a5:5b:3a:8f:dc:4d:f5:0f:c3:ec:44:
                    cf:29:19:5b:ec:43:97:03:f3:d4:8d:42:3f:7f:37:
                    06:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:83:A9:64:75:3B:82:05:EE:55:F5:77:E2:FE:C1:14:F7:2F:07:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/e09013f6-fc00-3106-a16f-35172761decd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.44.196.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:e2:b1:e3:15:8f:a9:0c:24:f7:26:53:07:34:5e:59:4a:30:
         42:74:47:e6:88:be:c1:0b:1e:e9:67:d5:c8:f5:5a:ae:07:28:
         c7:05:f5:f3:96:86:fe:4c:fc:ee:90:42:0e:2b:06:27:7c:3b:
         13:76:90:71:fe:05:a6:5f:75:9e:e4:5e:08:2a:15:51:05:2d:
         49:1f:8a:b7:6c:f0:07:a7:5f:b0:c1:2a:5d:01:a0:66:31:97:
         eb:09:fc:27:1d:45:c0:2d:d9:d3:e7:a4:65:a7:17:2b:13:97:
         2c:26:53:dc:05:35:24:f8:b7:e1:ab:0d:68:43:73:e7:0b:ad:
         9b:25:83:22:c4:02:ca:5b:3c:f5:33:fe:2e:0e:4f:4f:3b:84:
         f4:6e:cb:a1:4b:21:60:5d:83:74:f2:a9:cb:5c:2c:42:c8:66:
         68:c7:8f:69:a0:4a:c8:bd:dc:71:66:72:1f:d9:5b:7d:17:ee:
         ec:03:b8:29:b5:33:2d:35:4f:1d:3f:18:0e:00:6c:24:75:d6:
         a1:85:27:4b:7b:ee:9a:78:0f:d0:b1:22:9c:ee:7c:96:08:5d:
         91:0f:f8:00:71:8a:4e:84:e9:eb:a5:24:3d:9f:e8:d4:93:9b:
         ff:05:e7:59:4d:06:df:5b:ad:93:1f:07:15:6f:13:69:73:9d:
         20:b8:bb:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:22:28 2026 by rpki-client