Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69ac72ca-306e-4b10-91fd-f4fd56e5124b/3b3526a8-4570-3977-a83c-fd552e5012a1.roa
File:                     3b3526a8-4570-3977-a83c-fd552e5012a1.roa (raw, json)
Hash identifier:          ieJ0RQH3tPkc8nym7xTGgDfkcZ3FTzyWlFdS4CdCXZ8=
Subject key identifier:   9C:EA:BB:F6:4E:7A:4D:B6:FF:A7:E9:CD:C0:B1:40:CB:34:15:52:A4
Certificate issuer:       /CN=69ac72ca-306e-4b10-91fd-f4fd56e5124b
Certificate serial:       010D0C9F4328584D00B25FF442472363E98A0CC0
Authority key identifier: 6A:F0:DC:66:62:81:84:F7:F2:63:C8:A5:CD:73:6B:EA:5B:3C:CA:BF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69ac72ca-306e-4b10-91fd-f4fd56e5124b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69ac72ca-306e-4b10-91fd-f4fd56e5124b/3b3526a8-4570-3977-a83c-fd552e5012a1.roa
Signing time:             Fri 27 Feb 2026 14:00:40 +0000
ROA not before:           Fri 27 Feb 2026 14:00:40 +0000
ROA not after:            Thu 28 May 2026 13:00:40 +0000
asID:                     401632
IP address blocks:        23.132.188.0/24 maxlen: 24
                          2602:f72a::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69ac72ca-306e-4b10-91fd-f4fd56e5124b/69ac72ca-306e-4b10-91fd-f4fd56e5124b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69ac72ca-306e-4b10-91fd-f4fd56e5124b/69ac72ca-306e-4b10-91fd-f4fd56e5124b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69ac72ca-306e-4b10-91fd-f4fd56e5124b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:00:b2:5f:f4:42:47:23:63:e9:8a:0c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69ac72ca-306e-4b10-91fd-f4fd56e5124b
        Validity
            Not Before: Feb 27 14:00:40 2026 GMT
            Not After : May 28 13:00:40 2026 GMT
        Subject: CN=b5712a1e-0e6a-424a-a636-01d67f720f2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:73:92:f4:f3:07:a6:e5:75:b4:22:b9:13:b0:
                    40:71:51:ae:20:6b:7b:bc:6d:f7:83:ef:5d:00:ed:
                    f3:5d:e9:9e:1e:e4:d3:8f:63:cd:df:12:a1:ed:54:
                    a8:30:fe:69:4f:56:89:ee:e5:31:14:b8:2e:c9:51:
                    53:3f:05:c4:a6:8a:54:dc:30:db:11:ce:23:ef:58:
                    35:b8:96:ef:a7:f4:bd:f2:5c:1c:3f:97:34:e7:f7:
                    1a:ff:19:bc:60:7b:84:e2:0b:85:67:83:e3:ec:fb:
                    91:ec:8d:a7:e0:ce:a7:f1:da:46:23:8c:ea:e6:c1:
                    48:21:16:76:1a:c3:c8:2b:9c:59:15:bf:2f:84:e8:
                    5d:40:67:46:52:24:b4:05:3c:7d:12:81:26:b7:76:
                    76:10:87:2e:b3:b9:05:9b:6a:33:d0:be:72:12:e6:
                    c2:9d:0e:c5:3f:b6:fa:72:6c:7c:51:ad:c1:68:cf:
                    20:81:56:5d:26:f3:91:50:7f:52:cf:32:b1:73:54:
                    31:49:6c:da:f5:1e:22:98:5d:01:11:5f:3c:e4:11:
                    d5:85:bc:4d:bb:b1:da:06:fa:82:23:e1:08:c1:98:
                    87:96:77:9d:3f:cc:17:be:47:7e:b6:e2:8a:fe:11:
                    0e:24:d5:60:4e:48:95:51:98:31:d7:8c:48:fd:1c:
                    29:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:EA:BB:F6:4E:7A:4D:B6:FF:A7:E9:CD:C0:B1:40:CB:34:15:52:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69ac72ca-306e-4b10-91fd-f4fd56e5124b/3b3526a8-4570-3977-a83c-fd552e5012a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69ac72ca-306e-4b10-91fd-f4fd56e5124b/69ac72ca-306e-4b10-91fd-f4fd56e5124b.crl

            X509v3 Authority Key Identifier:
                keyid:6A:F0:DC:66:62:81:84:F7:F2:63:C8:A5:CD:73:6B:EA:5B:3C:CA:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69ac72ca-306e-4b10-91fd-f4fd56e5124b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.132.188.0/24
                IPv6:
                  2602:f72a::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:89:29:69:89:8c:53:95:cc:92:fd:e1:75:47:f3:b5:05:82:
         3b:9a:47:f1:2c:19:7c:54:3e:0f:d8:17:84:7d:71:df:85:c1:
         c3:83:2a:aa:7a:da:1f:37:be:f1:55:7b:b1:4b:27:be:36:7d:
         ca:7c:05:15:c3:db:78:c1:c6:7c:aa:57:11:d8:da:de:c5:1b:
         51:cf:e0:10:4e:b9:d0:74:c6:c8:e6:9c:c0:09:f6:b7:6d:5c:
         13:5c:01:93:2e:42:57:4d:b2:cc:37:2b:1e:68:e2:74:df:5f:
         e6:d5:c1:a1:c9:49:38:b8:61:fd:b0:83:d6:c2:a6:6a:f7:29:
         ee:e2:9d:51:35:c1:5c:37:75:7b:53:16:e2:89:5f:04:d4:33:
         06:81:ca:75:6a:ff:e8:23:95:ba:79:e6:c4:ed:ba:71:e7:d8:
         f9:87:21:0a:d3:3f:ad:09:74:96:80:ee:c6:53:d2:b1:dc:5f:
         a8:90:cf:87:49:5b:02:db:5b:dd:90:21:49:fa:3b:69:5e:c9:
         b3:61:0d:0c:ba:e4:8c:68:80:07:8d:67:f1:ae:2a:11:39:f2:
         cc:3c:7e:ed:4e:4f:0a:4b:da:d6:af:64:09:fd:3a:0e:b7:40:
         01:9c:da:77:fb:47:f4:42:fb:b8:94:50:f1:9b:a5:d8:0b:04:
         8d:a1:3e:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:08:41 2026 by rpki-client