Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7b1fad74-f135-4279-93d5-fe9aa818fc6d/98674deb-9ae9-3698-b3b1-a3d22f06d2f5.roa
File:                     98674deb-9ae9-3698-b3b1-a3d22f06d2f5.roa (raw, json)
Hash identifier:          CPSM7mtlvihIWONhywTu4g0Rlt1Thehn17ciydWNK0A=
Subject key identifier:   35:5D:B3:43:96:A9:4D:D3:E9:15:CA:89:BC:9A:9C:54:05:1E:54:04
Certificate issuer:       /CN=7b1fad74-f135-4279-93d5-fe9aa818fc6d
Certificate serial:       010D0C9F4328584D5243532EE25474AEF2212CC0
Authority key identifier: CA:05:35:82:08:D5:0D:D1:73:F2:36:C9:A2:36:0D:68:F0:2D:CC:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7b1fad74-f135-4279-93d5-fe9aa818fc6d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7b1fad74-f135-4279-93d5-fe9aa818fc6d/98674deb-9ae9-3698-b3b1-a3d22f06d2f5.roa
Signing time:             Sat 28 Mar 2026 19:13:19 +0000
ROA not before:           Sat 28 Mar 2026 19:13:19 +0000
ROA not after:            Fri 26 Jun 2026 19:13:19 +0000
asID:                     394532
IP address blocks:        23.146.96.0/24 maxlen: 24
                          2602:fe4d::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7b1fad74-f135-4279-93d5-fe9aa818fc6d/7b1fad74-f135-4279-93d5-fe9aa818fc6d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7b1fad74-f135-4279-93d5-fe9aa818fc6d/7b1fad74-f135-4279-93d5-fe9aa818fc6d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7b1fad74-f135-4279-93d5-fe9aa818fc6d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:52:43:53:2e:e2:54:74:ae:f2:21:2c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b1fad74-f135-4279-93d5-fe9aa818fc6d
        Validity
            Not Before: Mar 28 19:13:19 2026 GMT
            Not After : Jun 26 19:13:19 2026 GMT
        Subject: CN=6bfd3b60-4bfb-4d27-8578-e62fea740d94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a8:59:15:0c:7a:04:96:8e:20:4c:5d:c9:d3:
                    33:97:5b:77:dd:b2:12:a5:08:8f:da:d2:5a:2a:40:
                    27:96:c3:ac:e4:07:3d:ec:23:fd:38:a9:c2:a3:36:
                    bc:8a:4c:84:86:7f:cb:9c:21:cd:1f:28:21:47:0b:
                    b4:3e:13:e6:35:7c:4a:1a:30:e0:0c:e2:c6:66:e6:
                    c6:9d:81:81:de:41:56:c3:2b:5d:04:19:1c:0e:c6:
                    b4:9f:49:5d:0d:30:2a:7c:05:0f:3a:a9:c5:47:82:
                    0a:5b:56:a0:6f:5f:30:cf:4c:88:bf:1c:05:cd:82:
                    f5:bb:2a:a3:04:59:c7:32:2b:78:70:a6:49:8a:63:
                    dc:0b:f1:6a:78:08:25:cc:da:ad:6b:7b:bb:80:4b:
                    90:1e:6f:a0:c7:c2:48:53:1d:c3:d1:cf:e8:e6:60:
                    25:84:5c:3a:2a:10:9a:03:16:d8:b8:73:66:53:c6:
                    91:f5:a6:8d:72:73:0c:64:42:8b:3e:90:b3:e3:79:
                    a8:32:6f:f0:ce:f2:84:8a:06:61:64:25:4e:d8:a7:
                    2c:bb:57:fd:49:b4:aa:4e:5f:6e:12:bf:2b:d3:0c:
                    f7:01:45:ca:b2:c4:04:e5:02:27:67:14:3e:e0:d2:
                    9b:5a:5d:43:16:ae:af:e3:14:8c:39:30:c8:8b:86:
                    5f:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:5D:B3:43:96:A9:4D:D3:E9:15:CA:89:BC:9A:9C:54:05:1E:54:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7b1fad74-f135-4279-93d5-fe9aa818fc6d/98674deb-9ae9-3698-b3b1-a3d22f06d2f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7b1fad74-f135-4279-93d5-fe9aa818fc6d/7b1fad74-f135-4279-93d5-fe9aa818fc6d.crl

            X509v3 Authority Key Identifier:
                keyid:CA:05:35:82:08:D5:0D:D1:73:F2:36:C9:A2:36:0D:68:F0:2D:CC:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7b1fad74-f135-4279-93d5-fe9aa818fc6d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.146.96.0/24
                IPv6:
                  2602:fe4d::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:4c:82:7e:45:02:b6:5d:3c:97:92:62:be:5b:d9:4a:ac:c4:
         c1:76:41:92:ee:34:5d:c2:6e:b1:fa:ec:29:b1:27:77:b7:e8:
         d8:6c:f7:d7:b6:26:17:da:22:4f:74:63:94:8e:d5:e7:2e:5d:
         06:c6:8b:1d:5d:36:39:16:af:c7:b2:27:65:b2:aa:41:72:c7:
         24:3f:ae:8f:dd:33:fe:16:c0:88:64:40:82:06:e9:22:9d:b2:
         4c:34:40:55:21:b0:c8:d8:fd:49:82:05:2e:df:b4:41:11:a9:
         9a:47:3e:9d:49:af:41:18:a8:a8:e4:16:4f:4c:7f:ad:00:3f:
         ed:7a:ca:d8:04:90:1e:9d:d4:4a:db:2f:fa:d5:23:1c:96:ae:
         08:b1:2e:db:16:cb:61:77:ff:81:95:e3:02:89:b8:97:fa:f5:
         b0:91:1c:23:24:3c:2e:24:e6:ff:c2:12:d8:ef:04:07:2b:f3:
         da:f5:88:b0:0d:d1:b2:e8:93:ce:fe:f4:9e:fe:73:d5:d2:db:
         38:9e:4d:de:18:74:94:53:a0:f8:90:fc:ea:54:b4:d5:a0:81:
         d3:64:fb:f4:f9:a9:a3:16:05:e6:5b:ff:2d:c4:a3:b4:e7:38:
         e5:6b:62:ec:9e:a5:05:82:28:1f:65:1b:23:88:58:53:bc:7a:
         1e:f8:74:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 15:33:28 2026 by rpki-client