Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a50c3435-bf40-4cdc-9372-4ccf1ec7a091/3249973d-8cde-3a8e-91d4-2b173571dc02.roa
File:                     3249973d-8cde-3a8e-91d4-2b173571dc02.roa (raw, json)
Hash identifier:          icXrELHUsDbQtInUfOgBa+nOA4lhm3RwSLWiBwd77UE=
Subject key identifier:   7B:0A:E5:B1:1B:E3:AE:CC:1E:39:28:25:E9:CB:DE:F7:8D:2C:AA:8E
Certificate issuer:       /CN=a50c3435-bf40-4cdc-9372-4ccf1ec7a091
Certificate serial:       010D0C9F4328584CA5F74041AB969B04C8C9B280
Authority key identifier: 91:4E:AC:24:AF:88:A2:A9:E1:D7:B2:16:1C:34:62:01:99:F5:6A:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a50c3435-bf40-4cdc-9372-4ccf1ec7a091.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a50c3435-bf40-4cdc-9372-4ccf1ec7a091/3249973d-8cde-3a8e-91d4-2b173571dc02.roa
Signing time:             Mon 26 Jan 2026 02:00:32 +0000
ROA not before:           Mon 26 Jan 2026 02:00:32 +0000
ROA not after:            Sun 26 Apr 2026 01:00:32 +0000
asID:                     7029
IP address blocks:        23.139.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a50c3435-bf40-4cdc-9372-4ccf1ec7a091/a50c3435-bf40-4cdc-9372-4ccf1ec7a091.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a50c3435-bf40-4cdc-9372-4ccf1ec7a091/a50c3435-bf40-4cdc-9372-4ccf1ec7a091.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a50c3435-bf40-4cdc-9372-4ccf1ec7a091.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:a5:f7:40:41:ab:96:9b:04:c8:c9:b2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a50c3435-bf40-4cdc-9372-4ccf1ec7a091
        Validity
            Not Before: Jan 26 02:00:32 2026 GMT
            Not After : Apr 26 01:00:32 2026 GMT
        Subject: CN=45162914-858a-4b5f-917a-2b350dafc590
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:5c:1f:9e:eb:5c:4c:f8:bc:b9:6b:9a:93:ee:
                    46:de:d1:52:5d:63:24:96:90:f6:5b:42:b1:75:23:
                    40:f1:6a:31:b5:f8:5a:a7:db:06:52:c4:89:31:96:
                    af:e3:80:5c:15:2b:c8:50:4b:0c:f6:3b:88:d2:86:
                    35:6b:c4:ab:05:98:0c:bf:6c:e1:d6:bb:4e:fe:64:
                    49:7d:5f:c9:04:ad:62:58:78:e1:87:e3:aa:8e:ca:
                    00:00:30:b3:56:b0:4d:a3:09:ea:a7:c7:67:92:2a:
                    69:fa:5b:30:f3:12:2f:91:90:9a:0c:a2:50:5c:2e:
                    3c:69:c8:84:4c:c7:93:fd:b5:01:ad:d7:4b:47:ab:
                    d6:36:91:e0:77:81:d4:d1:e2:3b:5e:d4:6c:59:18:
                    54:f0:ad:46:de:90:45:b3:dc:42:48:84:d1:fa:bf:
                    bc:1f:19:ce:c0:b5:d0:34:0e:de:a7:81:42:a9:59:
                    cb:4b:76:f4:c6:85:6b:72:53:ee:f9:11:49:52:f6:
                    cd:e1:2e:e2:a5:a3:f2:d0:b4:9b:79:89:18:cd:5e:
                    da:4a:5b:5e:e6:9e:30:76:d0:f9:38:97:cb:38:dd:
                    5f:57:d5:46:92:cc:0c:d8:e3:e8:31:e8:58:af:18:
                    eb:bd:16:2b:88:74:b5:4f:cc:d0:f6:ba:86:ea:0c:
                    aa:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:0A:E5:B1:1B:E3:AE:CC:1E:39:28:25:E9:CB:DE:F7:8D:2C:AA:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a50c3435-bf40-4cdc-9372-4ccf1ec7a091/3249973d-8cde-3a8e-91d4-2b173571dc02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a50c3435-bf40-4cdc-9372-4ccf1ec7a091/a50c3435-bf40-4cdc-9372-4ccf1ec7a091.crl

            X509v3 Authority Key Identifier:
                keyid:91:4E:AC:24:AF:88:A2:A9:E1:D7:B2:16:1C:34:62:01:99:F5:6A:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a50c3435-bf40-4cdc-9372-4ccf1ec7a091.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.139.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:f0:ea:f2:9b:11:e4:ee:e8:4d:ed:fd:5a:2c:e7:4c:f9:3c:
         ab:73:30:37:9c:8c:1c:06:23:b7:86:a2:5e:19:eb:1b:60:5e:
         04:32:9a:a8:b1:76:53:fe:45:2a:94:37:31:0f:64:d2:c9:e8:
         7c:6a:a8:96:12:77:05:78:98:00:ae:f3:61:aa:77:1c:65:1f:
         af:18:99:79:9a:f0:96:86:1b:52:b9:73:7c:a9:c4:0c:0d:5b:
         88:ab:bb:15:3b:e7:ab:5c:63:88:b1:55:d3:4f:21:a6:a6:66:
         1b:3a:74:1c:10:f6:06:18:c6:18:10:81:9a:4c:97:6d:8e:85:
         a5:cb:26:7b:aa:6e:91:77:bc:73:9d:dd:52:76:21:f7:8d:77:
         c6:92:c8:c7:6f:aa:30:ad:1d:23:d1:25:f5:9b:87:30:0f:7f:
         eb:6f:54:9f:45:70:a5:fd:34:71:74:a4:94:80:7c:c7:ab:dd:
         a2:c3:4a:7c:f1:e0:77:c1:60:32:62:e2:f4:57:f9:db:a4:fa:
         62:bc:c3:c9:e4:f2:05:0d:bf:11:c3:78:96:4b:77:c1:f0:81:
         78:82:31:b5:88:1f:13:aa:0b:d4:30:90:44:27:13:59:3f:de:
         f8:38:d7:ab:2e:3c:2b:93:21:62:62:95:f7:7a:70:82:17:11:
         50:ff:99:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:34:42 2026 by rpki-client