Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c1fd7fee-281b-4e7d-abfe-b2e4198147ae/c9cee82f-060c-30f0-a578-41903ebefd3d.roa
File:                     c9cee82f-060c-30f0-a578-41903ebefd3d.roa (raw, json)
Hash identifier:          W/tClr8xNMBpJHCs+7ikR3Aw3vSlbqbDDwUgWdiy8TY=
Subject key identifier:   EE:B1:9F:7E:CB:32:50:01:7A:48:47:52:5B:E9:D6:FE:A2:EA:67:64
Certificate issuer:       /CN=c1fd7fee-281b-4e7d-abfe-b2e4198147ae
Certificate serial:       010D0C9F4328584C876A789320C95C755FE4FA00
Authority key identifier: 84:D5:C3:E4:71:A2:F0:A6:30:05:D2:0D:F4:45:63:CD:DD:57:1F:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c1fd7fee-281b-4e7d-abfe-b2e4198147ae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c1fd7fee-281b-4e7d-abfe-b2e4198147ae/c9cee82f-060c-30f0-a578-41903ebefd3d.roa
Signing time:             Thu 15 Jan 2026 03:23:17 +0000
ROA not before:           Thu 15 Jan 2026 03:23:17 +0000
ROA not after:            Wed 15 Apr 2026 02:23:17 +0000
asID:                     54319
IP address blocks:        23.134.188.0/24 maxlen: 24
                          198.12.10.0/23 maxlen: 24
                          2602:f6e3::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c1fd7fee-281b-4e7d-abfe-b2e4198147ae/c1fd7fee-281b-4e7d-abfe-b2e4198147ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c1fd7fee-281b-4e7d-abfe-b2e4198147ae/c1fd7fee-281b-4e7d-abfe-b2e4198147ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c1fd7fee-281b-4e7d-abfe-b2e4198147ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:87:6a:78:93:20:c9:5c:75:5f:e4:fa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1fd7fee-281b-4e7d-abfe-b2e4198147ae
        Validity
            Not Before: Jan 15 03:23:17 2026 GMT
            Not After : Apr 15 02:23:17 2026 GMT
        Subject: CN=01203d86-6ea6-4c94-a4fb-fe645c962c7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:22:32:dd:42:7e:a7:27:3f:30:62:9e:79:c7:
                    24:1e:7d:1f:fa:ef:4a:d0:0b:58:52:79:6a:a2:9d:
                    08:e3:6e:3a:33:ed:af:d0:4e:2a:e2:f4:c4:31:aa:
                    3d:87:b1:1e:ed:1a:37:85:c6:09:f5:96:2e:f7:7c:
                    99:32:79:f4:d4:9d:02:06:09:3c:5e:a4:a6:e2:52:
                    b6:bc:ef:f5:7b:68:35:c2:2a:5c:ab:7f:5a:7b:61:
                    75:7a:13:13:0a:05:8e:47:2d:4a:80:1f:d1:d3:3a:
                    6a:e9:ed:d2:07:52:a4:41:81:49:3f:72:02:a8:88:
                    06:4e:a5:16:b6:d6:74:a9:39:5d:ab:6e:a5:64:a0:
                    d2:a8:0f:6c:5c:be:51:cb:94:d7:a8:cb:7b:b3:8a:
                    fd:39:80:b3:c2:93:3a:03:49:f8:ef:4f:c3:d1:de:
                    08:17:4f:11:18:e9:7f:8e:90:d7:51:ae:29:7a:8a:
                    e0:cb:6d:71:ce:3a:8f:db:8a:b6:37:1d:ed:66:3d:
                    04:8a:54:5c:44:29:cb:48:cd:b9:c9:33:b9:75:6e:
                    fe:f2:c5:85:9d:ae:d8:56:0f:44:39:e6:58:81:cb:
                    0c:64:96:13:e6:0f:5f:76:13:72:e9:fd:29:91:96:
                    d6:44:70:c8:46:96:20:9e:0b:cf:d8:d7:c6:9d:8f:
                    83:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:B1:9F:7E:CB:32:50:01:7A:48:47:52:5B:E9:D6:FE:A2:EA:67:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c1fd7fee-281b-4e7d-abfe-b2e4198147ae/c9cee82f-060c-30f0-a578-41903ebefd3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c1fd7fee-281b-4e7d-abfe-b2e4198147ae/c1fd7fee-281b-4e7d-abfe-b2e4198147ae.crl

            X509v3 Authority Key Identifier:
                keyid:84:D5:C3:E4:71:A2:F0:A6:30:05:D2:0D:F4:45:63:CD:DD:57:1F:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c1fd7fee-281b-4e7d-abfe-b2e4198147ae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.134.188.0/24
                  198.12.10.0/23
                IPv6:
                  2602:f6e3::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:0b:24:80:92:5a:9a:f8:a0:e5:c7:da:4a:02:a4:b7:14:8c:
         84:2f:0b:ff:ce:71:d9:22:67:a3:4c:b6:44:4b:9d:f2:6c:c3:
         97:89:eb:0d:9f:9b:74:e3:8a:9e:e8:30:ec:3f:70:08:3e:cd:
         96:02:07:59:9c:33:84:75:6e:d7:ed:de:e1:05:4c:43:53:e5:
         ed:e6:12:93:b6:25:c7:41:53:5f:d2:71:a6:b3:09:90:f5:21:
         62:39:d9:e4:f4:d3:d3:e2:8e:82:e4:3c:1b:68:48:02:88:0f:
         7a:0c:90:b9:73:3c:2f:b1:21:af:a0:31:e2:15:0a:aa:40:18:
         7c:dc:b2:68:10:9c:bc:47:ec:19:64:02:9c:44:38:8f:23:e8:
         cf:18:db:63:db:9a:78:e8:10:64:e9:f9:4b:6f:8a:cb:db:dc:
         fc:b1:0e:e9:75:31:4d:f0:8b:b0:ae:37:0c:16:a5:0b:8d:73:
         d6:c6:65:38:7b:b3:f2:19:24:b6:f5:3a:3b:f9:2d:84:b7:3a:
         46:58:06:07:32:08:32:9a:f1:35:3c:70:e6:26:06:b7:80:47:
         2c:94:f7:38:a6:8a:e6:c4:dc:c1:d3:f1:49:6e:e5:45:0a:7c:
         eb:8b:7e:52:96:d0:30:24:68:64:ab:55:3e:3c:96:6f:21:c1:
         e5:a1:17:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:16:54 2026 by rpki-client