Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/273599ef-5b0b-4798-9f47-811d4c120cb0/0d2c6726-b6ae-37aa-9a89-3223f7e3646e.roa
File:                     0d2c6726-b6ae-37aa-9a89-3223f7e3646e.roa (raw, json)
Hash identifier:          AbmtJOgaExfgvlhKwGSs33M9WKsRKmMpZ4ePnS6eQ+0=
Subject key identifier:   F8:77:11:3E:C2:45:C4:D3:D7:C6:F2:2B:1B:A3:22:D8:67:F9:B6:13
Certificate issuer:       /CN=273599ef-5b0b-4798-9f47-811d4c120cb0
Certificate serial:       010D0C9F4328584D04E246169406AE0E7A843940
Authority key identifier: AC:D7:D5:A8:D2:F0:62:75:D0:35:A8:92:AC:41:92:DF:13:34:61:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/273599ef-5b0b-4798-9f47-811d4c120cb0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/273599ef-5b0b-4798-9f47-811d4c120cb0/0d2c6726-b6ae-37aa-9a89-3223f7e3646e.roa
Signing time:             Sun 01 Mar 2026 02:00:31 +0000
ROA not before:           Sun 01 Mar 2026 02:00:31 +0000
ROA not after:            Sat 30 May 2026 01:00:31 +0000
asID:                     399861
IP address blocks:        23.130.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/273599ef-5b0b-4798-9f47-811d4c120cb0/273599ef-5b0b-4798-9f47-811d4c120cb0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/273599ef-5b0b-4798-9f47-811d4c120cb0/273599ef-5b0b-4798-9f47-811d4c120cb0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/273599ef-5b0b-4798-9f47-811d4c120cb0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:04:e2:46:16:94:06:ae:0e:7a:84:39:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=273599ef-5b0b-4798-9f47-811d4c120cb0
        Validity
            Not Before: Mar  1 02:00:31 2026 GMT
            Not After : May 30 01:00:31 2026 GMT
        Subject: CN=31a73899-c8ea-4b30-b5a8-5fd77e8c88dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:8d:a3:46:02:74:4e:75:1a:b9:a8:e0:f5:23:
                    57:0d:7a:d3:ab:2d:4d:9a:9d:c2:97:2d:a8:9b:75:
                    b4:98:37:cf:f6:3a:57:a1:70:35:a2:4a:98:a2:24:
                    95:25:86:21:3d:e2:1e:58:80:ee:2f:bb:32:6b:9d:
                    45:e6:dc:29:78:f7:3f:95:69:d9:6b:1f:4e:87:2c:
                    85:91:97:3d:47:f7:1e:dd:d9:f7:3d:31:89:3a:f9:
                    2a:f7:b3:2f:3d:5a:21:b8:fb:07:af:45:51:27:71:
                    12:72:03:c0:01:0f:ac:b1:ff:57:6b:88:1e:63:34:
                    9d:d0:e6:dc:b6:16:55:32:dc:2f:00:dc:7b:cf:8a:
                    c0:0d:d8:26:d9:22:93:e8:64:f6:fd:7c:32:8e:65:
                    47:a8:58:26:5c:42:b8:10:27:10:17:db:0f:ae:e5:
                    da:56:65:08:df:91:94:e7:c1:9d:a4:00:09:b3:5c:
                    b1:34:2f:54:f7:59:7c:85:e4:1c:0d:a4:6b:ae:d7:
                    f3:9d:9a:db:de:e9:6a:10:55:8f:2e:21:fb:2b:f3:
                    62:63:00:ce:7f:be:92:0d:5f:8c:92:3a:f2:07:b5:
                    5e:1a:ec:cf:e6:8b:55:a6:ed:f4:91:3d:25:e3:5b:
                    6e:d2:31:da:59:16:ed:78:b5:13:30:4b:bb:95:b4:
                    79:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:77:11:3E:C2:45:C4:D3:D7:C6:F2:2B:1B:A3:22:D8:67:F9:B6:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/273599ef-5b0b-4798-9f47-811d4c120cb0/0d2c6726-b6ae-37aa-9a89-3223f7e3646e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/273599ef-5b0b-4798-9f47-811d4c120cb0/273599ef-5b0b-4798-9f47-811d4c120cb0.crl

            X509v3 Authority Key Identifier:
                keyid:AC:D7:D5:A8:D2:F0:62:75:D0:35:A8:92:AC:41:92:DF:13:34:61:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/273599ef-5b0b-4798-9f47-811d4c120cb0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.130.228.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:c5:7c:50:97:50:fa:3c:dc:63:3a:68:6c:14:62:35:eb:2e:
         e8:27:5f:8b:4e:a6:3a:17:8f:5c:92:c3:a4:17:37:bc:37:72:
         78:4c:4b:c8:68:18:48:42:41:26:ee:91:b5:07:2f:80:a0:09:
         5c:ae:92:c5:f2:fb:ac:a3:3a:b1:3e:c0:dc:fd:07:1b:7a:1d:
         95:c3:60:55:91:12:56:b9:87:53:cf:31:69:e8:a0:35:da:09:
         c3:00:f1:89:86:b4:ac:13:a1:94:8a:c1:65:fa:71:cb:b0:87:
         38:02:68:31:01:ac:34:e5:54:22:cc:11:56:18:b1:a9:a1:b7:
         0e:65:51:38:1e:1e:3a:9f:e0:06:76:90:ec:99:b5:22:bd:8b:
         5b:40:4d:9c:dd:ec:f5:dc:f5:a7:4a:91:04:03:68:a9:fe:67:
         65:64:5f:2a:e9:ea:a1:41:42:d4:13:a1:9a:fe:49:37:4d:3c:
         69:20:7e:62:21:77:c3:2a:72:53:5d:bf:53:ac:29:bc:b4:8c:
         23:5f:cb:90:3c:2f:b5:16:3a:d7:0e:23:21:f0:8b:60:2b:45:
         8e:fa:7c:7e:93:0b:3e:11:f2:31:c0:ee:e8:80:d5:21:d6:d7:
         18:0b:23:5d:01:0f:a8:4b:30:bb:41:ba:f0:32:fe:cd:dc:12:
         5a:27:eb:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:35:30 2026 by rpki-client