Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fb993146-757e-4177-9a61-207cb7b716c0/a77ae9fd-9f71-34b2-9a8a-6aaf017cf447.roa
File:                     a77ae9fd-9f71-34b2-9a8a-6aaf017cf447.roa (raw, json)
Hash identifier:          5RDPbKXQYZ0M+u7YEbImPjOAGEoNi58G6sJjy2O4M/U=
Subject key identifier:   D4:AA:2C:FD:F7:71:E3:8E:29:31:5F:D4:B4:B4:E8:FB:3B:AC:F7:7E
Certificate issuer:       /CN=fb993146-757e-4177-9a61-207cb7b716c0
Certificate serial:       010D0C9F4328584CDDCCF73B900781BC5B102F00
Authority key identifier: 3F:C3:E4:8E:45:9B:3B:1E:30:3A:C1:62:5F:9D:FA:55:8B:BD:F0:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fb993146-757e-4177-9a61-207cb7b716c0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fb993146-757e-4177-9a61-207cb7b716c0/a77ae9fd-9f71-34b2-9a8a-6aaf017cf447.roa
Signing time:             Sun 15 Feb 2026 02:00:32 +0000
ROA not before:           Sun 15 Feb 2026 02:00:32 +0000
ROA not after:            Sat 16 May 2026 01:00:32 +0000
asID:                     32598
IP address blocks:        23.150.136.0/24 maxlen: 24
                          2607:2fc0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fb993146-757e-4177-9a61-207cb7b716c0/fb993146-757e-4177-9a61-207cb7b716c0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fb993146-757e-4177-9a61-207cb7b716c0/fb993146-757e-4177-9a61-207cb7b716c0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fb993146-757e-4177-9a61-207cb7b716c0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:dd:cc:f7:3b:90:07:81:bc:5b:10:2f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb993146-757e-4177-9a61-207cb7b716c0
        Validity
            Not Before: Feb 15 02:00:32 2026 GMT
            Not After : May 16 01:00:32 2026 GMT
        Subject: CN=27ec4fc5-21d4-4817-9d33-9279f90fef50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:14:8f:73:b0:79:e9:87:68:7c:fc:90:84:cf:
                    fc:96:77:d5:99:60:4d:db:7e:fc:42:03:17:b3:aa:
                    9b:de:83:a5:8e:1b:32:53:8e:7f:77:9a:42:ff:0b:
                    b8:7f:32:20:fd:bc:d5:53:55:b4:66:b5:20:64:91:
                    d6:87:a4:be:bc:7c:50:7a:4c:6c:d0:cd:8a:a0:88:
                    2e:e7:da:9e:6d:b5:40:9c:57:e9:e5:a8:40:f5:bd:
                    c1:99:fa:27:2b:66:4d:d5:0f:f8:9b:68:12:79:75:
                    20:2f:aa:59:9d:96:10:e1:42:72:81:01:c0:9a:0c:
                    a3:04:80:d0:7b:e0:87:6d:dc:e2:04:3d:18:41:81:
                    cc:01:66:a5:0c:4b:22:92:99:3b:22:35:d9:f2:6c:
                    72:77:3d:e4:a4:9b:18:80:c5:f0:29:0b:ee:fa:88:
                    f0:cc:64:bf:15:62:eb:94:71:96:4b:de:13:6d:5d:
                    e6:bb:3f:34:3b:64:14:5b:30:da:e3:0d:87:f5:1b:
                    e6:44:d0:75:ae:ac:0b:a1:95:f2:10:64:46:16:02:
                    61:03:1c:5c:f9:33:9c:1b:e5:37:d9:0f:9c:70:d4:
                    3f:f1:bc:10:c6:63:81:5e:a7:40:9c:a0:43:a3:ac:
                    90:2b:cd:e3:b7:c2:1b:d4:fe:6e:00:7a:f6:09:05:
                    2e:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:AA:2C:FD:F7:71:E3:8E:29:31:5F:D4:B4:B4:E8:FB:3B:AC:F7:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fb993146-757e-4177-9a61-207cb7b716c0/a77ae9fd-9f71-34b2-9a8a-6aaf017cf447.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fb993146-757e-4177-9a61-207cb7b716c0/fb993146-757e-4177-9a61-207cb7b716c0.crl

            X509v3 Authority Key Identifier:
                keyid:3F:C3:E4:8E:45:9B:3B:1E:30:3A:C1:62:5F:9D:FA:55:8B:BD:F0:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fb993146-757e-4177-9a61-207cb7b716c0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.150.136.0/24
                IPv6:
                  2607:2fc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:e9:51:9f:e4:1d:2c:b1:89:10:b2:58:20:fa:48:03:fc:3e:
         19:23:85:26:5e:b6:d1:02:c1:36:19:55:cc:39:d7:c8:2e:5e:
         14:2e:00:7b:33:73:e2:1a:f9:bf:48:95:83:46:9c:82:ab:72:
         d6:ad:e5:58:50:46:41:c3:68:ad:e4:e2:af:40:2b:f4:6d:fe:
         84:9d:98:8f:08:8b:04:22:da:70:d4:cd:9a:66:86:60:81:5b:
         e6:bb:23:83:5b:32:8e:f2:94:d0:68:57:60:8a:d7:6a:4a:3b:
         ab:2b:9a:94:43:77:e6:5d:8c:49:4b:af:2d:46:eb:24:a1:0a:
         5c:ec:bc:df:4a:61:c0:9c:81:56:37:bc:93:d3:33:f2:d1:87:
         68:a4:db:a8:b3:71:4c:28:21:9c:88:b6:6a:ce:ec:7d:6a:1b:
         36:e8:d0:59:21:09:5f:23:c1:14:44:6d:ea:94:2c:9e:d9:61:
         06:a1:f1:47:57:fc:b9:76:32:62:9b:cb:49:b3:bb:25:19:93:
         dd:8c:df:96:56:f1:24:30:e1:78:81:6a:8f:48:7c:a9:44:8a:
         a5:0f:4c:52:85:9d:fc:10:d3:3b:29:14:37:8f:78:07:79:10:
         5c:a9:58:25:0b:2c:cd:92:e5:87:b3:b3:04:8b:d1:3f:c5:48:
         51:c8:1d:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:17:47 2026 by rpki-client