Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69ee1cf0-f347-41cf-a2cf-620aecc0e463/3740e4d7-105f-3020-a8c8-79d4b2007d82.roa
File:                     3740e4d7-105f-3020-a8c8-79d4b2007d82.roa (raw, json)
Hash identifier:          lM4GasPZvvGEUdsNcCgeGOy429j5az48JlOO6v+/SGM=
Subject key identifier:   63:F4:E3:16:0D:5E:8D:7E:D9:7C:1C:9A:DE:F4:DD:29:E6:06:18:13
Certificate issuer:       /CN=69ee1cf0-f347-41cf-a2cf-620aecc0e463
Certificate serial:       010D0C9F4328584CD6D2214C6693B10A3CE3E100
Authority key identifier: FE:4B:DF:24:1E:58:31:A9:2E:B7:8D:74:0B:61:EF:8A:DF:B4:A3:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69ee1cf0-f347-41cf-a2cf-620aecc0e463.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69ee1cf0-f347-41cf-a2cf-620aecc0e463/3740e4d7-105f-3020-a8c8-79d4b2007d82.roa
Signing time:             Thu 12 Feb 2026 14:00:40 +0000
ROA not before:           Thu 12 Feb 2026 14:00:40 +0000
ROA not after:            Wed 13 May 2026 13:00:40 +0000
asID:                     401568
IP address blocks:        23.131.180.0/24 maxlen: 24
                          2602:f753::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69ee1cf0-f347-41cf-a2cf-620aecc0e463/69ee1cf0-f347-41cf-a2cf-620aecc0e463.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69ee1cf0-f347-41cf-a2cf-620aecc0e463/69ee1cf0-f347-41cf-a2cf-620aecc0e463.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69ee1cf0-f347-41cf-a2cf-620aecc0e463.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d6:d2:21:4c:66:93:b1:0a:3c:e3:e1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69ee1cf0-f347-41cf-a2cf-620aecc0e463
        Validity
            Not Before: Feb 12 14:00:40 2026 GMT
            Not After : May 13 13:00:40 2026 GMT
        Subject: CN=d472a42e-f4cc-4043-a1c6-d7f5e0c84720
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:20:72:da:6a:c4:7f:17:57:dd:90:07:b1:99:
                    cf:74:3f:00:63:7a:ab:b2:7d:9a:de:1f:aa:f5:e0:
                    3e:11:b1:50:3c:ae:eb:e1:4c:54:ed:70:32:02:5d:
                    11:cc:92:ce:17:16:de:3f:97:1b:e6:ce:8e:f7:ed:
                    7e:73:ff:cd:b6:ae:0d:f1:b2:17:2e:3c:62:a8:c7:
                    a7:f8:e7:71:ca:21:39:d8:98:57:97:75:4f:0a:46:
                    22:17:1a:d3:5f:2f:4e:ad:73:86:c2:18:47:be:88:
                    1d:7e:66:ff:67:6e:72:c2:ca:62:31:03:ed:a7:1d:
                    7b:f9:d7:c0:1c:c0:38:d5:72:50:83:ca:30:6d:25:
                    34:68:6a:e6:3a:c5:05:d3:c4:07:b9:6d:d6:db:80:
                    36:54:ba:14:34:7d:83:e5:37:ad:ba:fc:70:d0:a4:
                    73:55:19:01:07:0b:2b:06:a5:b5:75:28:36:a5:ca:
                    97:6f:aa:50:5b:ae:be:3b:e9:1e:26:d5:b1:3b:92:
                    3b:d8:fd:53:31:9d:e2:6a:57:18:97:b6:13:a4:0c:
                    c6:cc:e3:d2:f9:67:7f:27:69:0f:78:92:44:54:24:
                    34:7a:6d:b7:13:ae:22:b0:47:16:98:3f:76:3b:a2:
                    fa:3f:b0:98:55:69:07:c9:ac:6e:6a:d6:64:e3:53:
                    99:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:F4:E3:16:0D:5E:8D:7E:D9:7C:1C:9A:DE:F4:DD:29:E6:06:18:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69ee1cf0-f347-41cf-a2cf-620aecc0e463/3740e4d7-105f-3020-a8c8-79d4b2007d82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69ee1cf0-f347-41cf-a2cf-620aecc0e463/69ee1cf0-f347-41cf-a2cf-620aecc0e463.crl

            X509v3 Authority Key Identifier:
                keyid:FE:4B:DF:24:1E:58:31:A9:2E:B7:8D:74:0B:61:EF:8A:DF:B4:A3:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69ee1cf0-f347-41cf-a2cf-620aecc0e463.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.131.180.0/24
                IPv6:
                  2602:f753::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:f8:5f:8c:44:2a:3a:66:ac:99:8e:08:95:0c:24:d3:56:73:
         71:f3:a9:cb:fb:6b:ff:85:c9:e8:37:d2:9b:43:4b:08:f0:5b:
         5a:fc:29:df:db:e3:38:cc:37:97:57:36:04:99:c9:88:fe:53:
         a1:7c:d8:5a:b5:10:be:7a:6e:eb:8d:41:82:3c:87:01:f9:23:
         cc:56:3e:f5:88:ae:59:e5:2b:bb:df:eb:7d:e0:a9:7e:a5:06:
         33:31:e4:1f:46:d8:8b:de:21:d4:99:c9:78:6e:c6:3b:5e:80:
         f2:c0:0e:b7:2a:51:b3:99:08:d1:10:f3:58:79:58:66:0a:bf:
         a4:29:eb:13:c8:2f:0a:d5:7f:c3:a7:40:68:a0:e6:0b:47:4f:
         ae:4b:b2:38:92:40:24:ff:9c:f4:dd:c6:da:6b:4c:f7:c3:c8:
         89:e4:cd:39:29:e7:9c:7e:b1:b5:5a:61:42:bd:f6:14:34:63:
         ef:60:19:03:e3:5e:94:2f:ef:2a:5b:26:15:48:96:f0:d2:89:
         96:da:f2:20:ec:83:9c:f6:05:ad:d9:4d:7b:50:ab:35:31:1c:
         d7:77:b0:4a:c3:b1:bf:c5:92:24:5e:57:f8:e7:d2:4d:87:01:
         15:f9:be:9c:c2:d1:fe:b7:9d:32:21:45:bf:e2:b8:de:ca:17:
         e6:02:cd:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:38:40 2026 by rpki-client