Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4cfcba74-1157-44e6-a1e9-7f4d4d9218d9/3c47eee4-6fed-3277-b5b3-e08e64dcae2f.roa
File:                     3c47eee4-6fed-3277-b5b3-e08e64dcae2f.roa (raw, json)
Hash identifier:          bmVkxZsd4F5zfoadXzFgu5ELLBcPe/225Q8BplbNlUI=
Subject key identifier:   CD:41:E3:F2:3B:B5:03:3B:A3:31:EC:61:FD:D5:E2:DB:79:9B:A7:52
Certificate issuer:       /CN=4cfcba74-1157-44e6-a1e9-7f4d4d9218d9
Certificate serial:       010D0C9F4328584CB551D206367D7A69DE8B6B30
Authority key identifier: 8B:18:D5:1E:6B:A2:D7:59:38:10:5B:CE:FB:79:DE:97:F9:62:91:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4cfcba74-1157-44e6-a1e9-7f4d4d9218d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4cfcba74-1157-44e6-a1e9-7f4d4d9218d9/3c47eee4-6fed-3277-b5b3-e08e64dcae2f.roa
Signing time:             Sat 31 Jan 2026 14:00:39 +0000
ROA not before:           Sat 31 Jan 2026 14:00:39 +0000
ROA not after:            Fri 01 May 2026 13:00:39 +0000
asID:                     8849
IP address blocks:        162.247.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4cfcba74-1157-44e6-a1e9-7f4d4d9218d9/4cfcba74-1157-44e6-a1e9-7f4d4d9218d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4cfcba74-1157-44e6-a1e9-7f4d4d9218d9/4cfcba74-1157-44e6-a1e9-7f4d4d9218d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4cfcba74-1157-44e6-a1e9-7f4d4d9218d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Feb 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b5:51:d2:06:36:7d:7a:69:de:8b:6b:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4cfcba74-1157-44e6-a1e9-7f4d4d9218d9
        Validity
            Not Before: Jan 31 14:00:39 2026 GMT
            Not After : May  1 13:00:39 2026 GMT
        Subject: CN=69489c0e-f455-4c69-aad3-9e017925383f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:4b:2a:c1:8d:93:aa:d2:d3:fc:1f:8b:e9:11:
                    b3:db:a8:37:7e:87:a1:15:73:15:09:fb:47:74:30:
                    03:2b:fc:8b:51:c5:45:cb:bc:0d:8a:13:1e:23:5b:
                    c9:27:aa:b6:ff:69:2a:11:24:34:50:dc:ef:36:5c:
                    8d:49:5e:96:50:2f:d7:40:16:42:a3:48:f4:7a:76:
                    83:08:5d:e1:3c:ef:41:5c:86:7e:c8:77:bc:3f:f4:
                    73:26:6d:f9:1e:a8:04:7e:63:2f:a5:34:32:7b:3b:
                    0b:64:b5:44:67:78:8f:3b:27:72:16:1b:39:24:2f:
                    61:f7:75:a7:19:64:d7:dd:23:a2:90:d8:b8:52:f3:
                    ce:f4:af:13:9c:2b:78:fb:c6:28:61:92:2c:20:b6:
                    15:c2:c4:b4:a2:90:a6:75:f0:5c:5a:46:6d:d9:f0:
                    33:ce:0d:52:2f:56:38:5a:8b:6f:80:7d:61:6b:1c:
                    7b:e6:f6:1d:4b:74:90:c4:3c:95:05:ad:09:e6:37:
                    16:e9:1d:7a:b6:e3:98:7b:b6:0e:02:29:91:15:bc:
                    f4:6e:95:07:90:c6:db:be:7e:e2:0e:fc:6e:1f:ce:
                    00:81:a5:b4:29:5f:ee:1d:2a:d1:c2:26:b6:5c:74:
                    9c:17:98:48:11:11:54:70:26:05:34:20:45:75:af:
                    9c:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:41:E3:F2:3B:B5:03:3B:A3:31:EC:61:FD:D5:E2:DB:79:9B:A7:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4cfcba74-1157-44e6-a1e9-7f4d4d9218d9/3c47eee4-6fed-3277-b5b3-e08e64dcae2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4cfcba74-1157-44e6-a1e9-7f4d4d9218d9/4cfcba74-1157-44e6-a1e9-7f4d4d9218d9.crl

            X509v3 Authority Key Identifier:
                keyid:8B:18:D5:1E:6B:A2:D7:59:38:10:5B:CE:FB:79:DE:97:F9:62:91:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4cfcba74-1157-44e6-a1e9-7f4d4d9218d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.247.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:2a:61:46:90:a2:96:99:c9:e0:19:f2:26:8e:cd:ce:43:61:
         7e:e6:35:4f:98:25:6c:ae:91:a7:45:96:a1:45:56:8b:a6:3c:
         17:21:7e:61:08:03:f1:23:16:64:8e:e7:a1:d8:79:36:c9:98:
         db:55:89:d0:43:2e:2d:a7:74:0f:63:a6:ae:70:c7:b9:64:11:
         fb:c0:61:92:fb:70:e7:45:7f:7e:7b:86:1a:03:a4:e7:d8:14:
         41:0e:a2:c5:d0:ae:1d:86:06:04:85:70:e7:48:c9:78:93:9f:
         56:4d:58:c6:f7:31:eb:78:06:62:f8:a6:13:ff:2b:4d:01:0b:
         2d:9a:33:30:6e:6d:5e:b6:9f:95:f0:d8:09:23:c7:fc:5d:78:
         39:be:a3:02:a7:df:09:07:72:2d:1f:84:08:b7:ae:0d:11:26:
         dd:9c:ee:ac:98:07:30:a8:99:fe:19:be:00:7d:12:e7:12:41:
         55:3c:62:5f:38:ea:33:e0:5b:4d:85:95:56:8f:d8:2a:63:3a:
         7b:bc:25:4c:63:6b:40:f2:13:0d:59:87:f2:4c:9b:1d:39:7d:
         97:34:51:fa:70:15:a1:07:fa:8c:eb:c4:3c:d8:8d:d5:99:6a:
         79:14:fd:7e:d2:09:ce:3c:86:f6:52:16:53:18:74:72:4b:f0:
         93:6a:fe:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 01:35:27 2026 by rpki-client