Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d489668a-f993-4f95-90e5-c584eabef64b/de447ebf-c29e-3677-9b51-cccde69f8823.roa
File:                     de447ebf-c29e-3677-9b51-cccde69f8823.roa (raw, json)
Hash identifier:          /OhQ+3WI+3NFa5a4/SoM84E6DDx0FD90Kh9vchMnAk0=
Subject key identifier:   6D:8C:E1:F6:D6:4B:1E:95:C5:CC:29:2B:88:79:E2:A2:37:8A:DB:BF
Certificate issuer:       /CN=d489668a-f993-4f95-90e5-c584eabef64b
Certificate serial:       010D0C9F4328584CDCF43ADF82E6E08B47BBCBC0
Authority key identifier: 34:AA:F7:71:65:BB:52:CA:05:49:3E:66:71:5F:18:62:87:72:A0:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d489668a-f993-4f95-90e5-c584eabef64b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d489668a-f993-4f95-90e5-c584eabef64b/de447ebf-c29e-3677-9b51-cccde69f8823.roa
Signing time:             Sat 14 Feb 2026 06:52:08 +0000
ROA not before:           Sat 14 Feb 2026 06:52:08 +0000
ROA not after:            Fri 15 May 2026 05:52:08 +0000
asID:                     402026
IP address blocks:        23.146.60.0/24 maxlen: 24
                          2602:f549::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d489668a-f993-4f95-90e5-c584eabef64b/d489668a-f993-4f95-90e5-c584eabef64b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d489668a-f993-4f95-90e5-c584eabef64b/d489668a-f993-4f95-90e5-c584eabef64b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d489668a-f993-4f95-90e5-c584eabef64b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:dc:f4:3a:df:82:e6:e0:8b:47:bb:cb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d489668a-f993-4f95-90e5-c584eabef64b
        Validity
            Not Before: Feb 14 06:52:08 2026 GMT
            Not After : May 15 05:52:08 2026 GMT
        Subject: CN=0c0a9250-38c8-452c-aa54-82e49e98bc20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:34:4f:7e:d4:f4:a8:70:3f:07:61:7c:6f:2e:
                    bf:3e:8e:7f:79:a5:3f:9c:9d:02:ad:b2:02:08:1c:
                    3d:b3:a0:6c:e3:fa:6b:63:51:4f:47:52:25:ad:6e:
                    19:aa:0f:50:e4:28:ed:67:08:31:07:4b:fd:bf:02:
                    e3:86:78:e5:ad:f9:36:4d:51:22:cb:84:8a:6f:5f:
                    3f:63:63:09:f2:39:12:ff:44:35:53:5e:e5:5b:f4:
                    c6:b9:46:9b:7c:d3:30:49:4c:54:d6:a7:4e:8a:4b:
                    aa:79:00:20:98:04:63:e5:b8:e5:f1:b0:c7:00:74:
                    46:2b:d2:79:e0:6a:93:9e:44:43:24:f8:e5:ed:41:
                    c4:e4:6c:59:95:03:34:12:7e:94:a9:42:a8:7a:0b:
                    37:0f:be:51:e5:a2:4c:a7:50:ed:bc:eb:ef:a1:d6:
                    b3:01:35:bc:43:69:ea:5e:7d:51:ce:3f:91:ea:b4:
                    2d:30:3e:ed:06:3c:ad:70:8f:b2:af:00:c1:90:16:
                    e5:bf:01:57:3b:60:df:fa:ac:31:00:67:67:c0:00:
                    37:6f:4f:09:7f:7f:08:f2:03:36:31:23:1b:35:f7:
                    98:1d:c1:4a:bb:5f:66:f8:50:11:fd:33:42:fa:a6:
                    c2:9e:77:80:b5:a1:58:3a:3f:5e:d7:ca:0f:3e:b0:
                    57:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:8C:E1:F6:D6:4B:1E:95:C5:CC:29:2B:88:79:E2:A2:37:8A:DB:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d489668a-f993-4f95-90e5-c584eabef64b/de447ebf-c29e-3677-9b51-cccde69f8823.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d489668a-f993-4f95-90e5-c584eabef64b/d489668a-f993-4f95-90e5-c584eabef64b.crl

            X509v3 Authority Key Identifier:
                keyid:34:AA:F7:71:65:BB:52:CA:05:49:3E:66:71:5F:18:62:87:72:A0:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d489668a-f993-4f95-90e5-c584eabef64b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.146.60.0/24
                IPv6:
                  2602:f549::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:fe:0e:dc:4d:d8:53:09:22:3f:93:db:69:12:c8:97:8c:e3:
         67:69:f3:14:8e:3b:f2:00:d3:b0:49:d7:2e:7e:ee:99:98:8e:
         7a:fc:89:c0:29:96:91:53:f6:85:10:67:7e:f5:c2:54:89:f4:
         f7:79:8b:d5:04:8a:8f:7d:13:5a:d7:74:62:bd:60:82:68:47:
         a1:15:8b:ec:37:9f:9d:6f:57:04:70:31:cc:36:63:2b:d4:fb:
         c1:ff:f1:66:d0:fe:1a:ec:11:0a:fc:b0:ce:24:ac:88:6c:b7:
         66:fb:10:5c:09:0a:42:ef:5c:31:fe:4b:e9:67:39:d5:fc:fe:
         3f:88:7d:29:3a:3d:ea:38:1f:46:09:22:49:a3:3f:78:03:c2:
         9c:af:d5:44:28:33:11:a2:a6:3a:85:83:ed:42:f0:4b:4b:a1:
         36:fd:99:a1:e0:79:31:8a:0f:91:d0:55:7e:72:4b:57:98:51:
         d0:59:aa:e9:6d:bf:5f:53:21:b7:9b:be:5d:3f:e6:15:c8:6e:
         54:0f:4e:21:95:66:cb:38:c8:16:d9:6f:5b:d8:5d:bf:95:42:
         69:56:68:e2:7d:91:cd:93:e7:a0:f3:14:cd:20:1d:32:b2:05:
         74:ec:e8:c7:d0:26:1a:de:7d:c0:e6:59:32:ad:4a:43:63:bc:
         4a:4e:15:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:44:54 2026 by rpki-client