Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0d11eac1-cc02-42fc-822d-f4bbf31842d8/b2cbd41d-2dd3-3325-a83c-62c0941a2003.roa
File:                     b2cbd41d-2dd3-3325-a83c-62c0941a2003.roa (raw, json)
Hash identifier:          VooRelmfLeathJIApG68cZ44tgCd/GlptSArXCaNM0Y=
Subject key identifier:   53:0E:30:2E:7A:C7:97:55:8F:88:09:75:52:63:E1:AF:93:22:71:6C
Certificate issuer:       /CN=0d11eac1-cc02-42fc-822d-f4bbf31842d8
Certificate serial:       010D0C9F4328584CCDD4437AD2E9D90FDBE9CC00
Authority key identifier: BF:BE:8E:46:D3:0B:71:DF:06:A6:88:4E:23:16:8A:0E:7B:83:9C:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0d11eac1-cc02-42fc-822d-f4bbf31842d8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0d11eac1-cc02-42fc-822d-f4bbf31842d8/b2cbd41d-2dd3-3325-a83c-62c0941a2003.roa
Signing time:             Mon 09 Feb 2026 08:43:02 +0000
ROA not before:           Mon 09 Feb 2026 08:43:02 +0000
ROA not after:            Sun 10 May 2026 07:43:02 +0000
asID:                     400619
IP address blocks:        23.153.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0d11eac1-cc02-42fc-822d-f4bbf31842d8/0d11eac1-cc02-42fc-822d-f4bbf31842d8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0d11eac1-cc02-42fc-822d-f4bbf31842d8/0d11eac1-cc02-42fc-822d-f4bbf31842d8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0d11eac1-cc02-42fc-822d-f4bbf31842d8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:cd:d4:43:7a:d2:e9:d9:0f:db:e9:cc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d11eac1-cc02-42fc-822d-f4bbf31842d8
        Validity
            Not Before: Feb  9 08:43:02 2026 GMT
            Not After : May 10 07:43:02 2026 GMT
        Subject: CN=eb4607d0-abe2-41e6-904e-dd0518106d60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:d6:bc:1f:53:61:22:ea:5f:2e:03:64:54:9c:
                    41:b3:a9:a5:8a:83:fa:f1:6d:4f:8e:b0:9d:f2:0e:
                    f8:82:10:3b:4f:3d:ea:63:8a:91:1d:ca:b5:6f:9c:
                    29:98:fb:3c:04:0a:ff:7d:4a:be:8d:c4:16:37:ea:
                    bb:73:89:5d:42:85:11:ed:4d:41:a5:61:fe:38:44:
                    82:d8:3f:78:e2:80:0d:e7:c2:1c:2e:9f:17:88:dd:
                    cc:3e:1e:e5:d8:31:1d:1f:12:2c:57:1d:d7:ca:0a:
                    da:6b:8c:94:85:d5:be:41:e2:7d:c9:e9:b3:66:cf:
                    99:f5:ce:4e:0e:0c:4e:48:92:7e:c1:80:e1:f3:8a:
                    d5:1b:02:60:ba:db:5f:1d:6a:e3:f7:2b:fc:d3:d7:
                    52:bd:b2:ce:22:87:cb:5b:5d:90:f5:b2:b8:fc:d9:
                    77:62:02:a2:bd:91:8c:8e:d2:95:36:85:37:86:f2:
                    b3:57:83:bd:ec:a9:8a:91:a0:a5:e5:d8:b6:7b:ad:
                    37:4b:0f:99:fb:74:04:1e:69:ed:f6:99:db:59:82:
                    db:fe:7f:a6:54:ee:c2:6a:db:87:eb:5b:6f:09:68:
                    9a:4b:e8:5b:73:a6:8c:b8:85:ce:36:80:d4:35:ec:
                    77:40:6a:ae:1d:5d:ed:42:6f:ec:23:83:64:3b:e0:
                    74:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:0E:30:2E:7A:C7:97:55:8F:88:09:75:52:63:E1:AF:93:22:71:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0d11eac1-cc02-42fc-822d-f4bbf31842d8/b2cbd41d-2dd3-3325-a83c-62c0941a2003.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0d11eac1-cc02-42fc-822d-f4bbf31842d8/0d11eac1-cc02-42fc-822d-f4bbf31842d8.crl

            X509v3 Authority Key Identifier:
                keyid:BF:BE:8E:46:D3:0B:71:DF:06:A6:88:4E:23:16:8A:0E:7B:83:9C:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0d11eac1-cc02-42fc-822d-f4bbf31842d8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.153.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:e5:a5:a5:91:05:d8:0c:36:45:cc:b6:6e:7c:f6:67:86:95:
         fc:2e:05:c5:9a:83:8f:f4:68:17:e7:dd:8e:c4:08:22:f0:1e:
         58:68:39:7c:8b:02:80:29:01:a0:f8:c9:af:90:94:cf:75:09:
         66:fd:a8:e4:b1:62:f3:d6:d3:ff:ff:44:58:c8:fc:fb:98:4b:
         bc:ba:ee:15:24:fd:1f:48:23:30:3d:77:36:06:2a:bc:89:de:
         e7:68:18:62:81:38:e8:e8:0d:65:eb:46:86:8b:10:2f:0b:25:
         44:12:ab:6f:36:8b:e2:38:95:98:f1:f8:b3:69:0c:60:d6:38:
         a9:3d:3b:0e:2b:73:78:c1:a5:df:da:2a:bc:0a:2f:65:43:74:
         52:6c:91:76:69:fe:e5:96:a0:1f:c2:20:52:6d:6f:e8:8b:ea:
         5c:f7:09:41:a2:b8:20:d9:d9:d7:4d:30:57:f4:8e:24:f8:31:
         e8:11:9e:4c:64:44:fe:2f:19:da:8f:2f:c5:d6:ff:67:db:eb:
         4a:6a:dc:f0:35:4f:c0:5c:c5:c2:c3:e6:1d:8a:85:41:09:7e:
         fa:de:a0:58:2f:1d:58:42:23:b9:0f:27:c0:ed:c9:bf:73:b7:
         be:85:45:d6:af:a8:52:ec:7e:3c:09:51:1d:e6:89:4f:50:32:
         e4:b8:45:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:49:45 2026 by rpki-client