Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/832a3037-6f58-31ad-97d9-1d5379dadd18.roa
File:                     832a3037-6f58-31ad-97d9-1d5379dadd18.roa (raw, json)
Hash identifier:          /5OmH9Ihpp9pk4CY//Xicbd/IVrHpylGys+hPZwTcDg=
Subject key identifier:   F0:DC:E9:92:53:A6:B2:64:9A:4E:1B:71:B3:D5:C4:63:FE:6F:18:78
Certificate issuer:       /CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06
Certificate serial:       010D0C9F4328584CED277BEF5D379E1DBB2E0C00
Authority key identifier: B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/832a3037-6f58-31ad-97d9-1d5379dadd18.roa
Signing time:             Fri 20 Feb 2026 14:00:41 +0000
ROA not before:           Fri 20 Feb 2026 14:00:41 +0000
ROA not after:            Thu 21 May 2026 13:00:41 +0000
asID:                     33442
IP address blocks:        149.23.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Feb 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ed:27:7b:ef:5d:37:9e:1d:bb:2e:0c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06
        Validity
            Not Before: Feb 20 14:00:41 2026 GMT
            Not After : May 21 13:00:41 2026 GMT
        Subject: CN=7cf1ac72-1334-4d44-ab6f-dc9874b3fc35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:ed:c1:f5:26:65:67:3e:68:d0:12:1d:d4:89:
                    2a:19:de:e6:f9:80:7f:bc:7c:a2:70:60:9f:1c:5f:
                    5e:46:1a:43:05:20:0d:b0:6f:d8:dd:02:0f:2c:69:
                    01:61:74:0a:87:6c:40:ff:62:12:53:0f:b6:0d:5a:
                    f3:d6:15:07:82:bf:4f:60:ca:f3:44:21:28:20:fa:
                    44:39:ab:eb:17:c2:d2:28:69:9c:18:ec:8f:f9:3e:
                    d8:f6:fe:8c:fd:70:b2:c4:eb:12:c4:ef:57:1a:38:
                    0c:83:45:54:e9:6b:24:e8:53:83:e0:ce:32:38:6b:
                    80:d4:17:22:da:b8:ba:02:96:bc:86:fd:22:af:3e:
                    27:f2:ed:4a:b1:53:d5:9b:30:38:b7:3d:cf:29:61:
                    8e:ae:e3:5d:e9:86:db:1a:66:b6:4e:d3:50:96:ba:
                    ef:32:1b:d1:18:7a:96:25:dc:21:ae:98:6c:48:8c:
                    91:91:61:e8:c7:71:d7:e7:1e:b6:39:72:4c:fe:55:
                    09:d7:ef:39:e3:dd:d1:2f:8b:46:e3:67:d6:17:c1:
                    6a:a2:7c:e7:f7:b3:50:a2:cd:b1:4b:7b:28:90:c4:
                    26:f4:f6:19:51:4d:af:41:00:5a:43:24:fb:0d:29:
                    a5:f3:a5:8e:de:9b:92:5e:78:36:d4:36:c6:ac:d7:
                    6c:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:DC:E9:92:53:A6:B2:64:9A:4E:1B:71:B3:D5:C4:63:FE:6F:18:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/832a3037-6f58-31ad-97d9-1d5379dadd18.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl

            X509v3 Authority Key Identifier:
                keyid:B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.23.38.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:d7:fc:33:8d:8e:2a:e4:76:ee:4a:dc:31:dd:91:27:5c:d7:
         7b:1a:68:e4:56:55:cb:1c:11:e2:f1:c1:f4:60:ec:b1:4c:c1:
         90:dc:0d:19:27:59:86:b6:94:43:77:83:e4:6b:60:59:bf:0b:
         6a:0e:b3:4a:69:b3:82:9e:1c:f5:e1:75:0b:0f:09:dd:81:25:
         bb:92:64:64:7c:27:f8:77:68:a5:43:dc:b2:a9:e8:e5:ea:31:
         98:84:de:43:df:45:7f:50:89:9a:98:48:63:39:0b:02:b7:fb:
         c9:30:f9:df:c5:e2:20:43:1d:0c:7b:bc:66:1e:6d:4d:9b:b9:
         3b:fa:d3:78:7e:a4:ef:48:fd:73:2c:8a:28:e6:f7:3a:78:40:
         a0:50:83:8e:6c:5f:ce:bc:cd:88:f2:6b:3d:fb:a5:77:d8:46:
         ca:ab:de:78:95:be:1c:85:ad:e4:36:93:7d:71:99:a1:c1:8a:
         48:b4:fd:6c:2d:18:ff:b6:19:47:e1:a5:77:27:03:4c:55:78:
         94:69:3c:cf:8a:69:59:93:e0:96:13:09:3a:4b:05:d8:34:87:
         8c:f6:b0:cb:e8:69:d1:0e:78:4a:1b:b1:82:38:35:79:23:a5:
         1a:7c:cd:7d:11:7d:f2:d2:31:b2:5e:ab:41:50:f1:7b:6a:b9:
         19:ba:a3:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 07:30:09 2026 by rpki-client