Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b/9aa0718c-c3ac-3f65-adec-7e30be513fad.roa
File:                     9aa0718c-c3ac-3f65-adec-7e30be513fad.roa (raw, json)
Hash identifier:          Lhu6JvQY0lBoN9Rss6lVMp1WkHzlkXSsgQrTxGd4ioY=
Subject key identifier:   38:45:A6:BB:AC:71:85:E5:6C:88:4B:0C:F0:0D:FC:88:4C:A4:83:C2
Certificate issuer:       /CN=22d4b872-8325-44d1-958d-897bd254f68b
Certificate serial:       010D0C9F4328584CB36DD39B8E17F8AEE4385380
Authority key identifier: A1:EB:27:37:68:9F:C8:9B:9E:E2:30:E3:C8:05:C7:E2:EE:8D:8E:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b/9aa0718c-c3ac-3f65-adec-7e30be513fad.roa
Signing time:             Fri 30 Jan 2026 21:45:37 +0000
ROA not before:           Fri 30 Jan 2026 21:45:37 +0000
ROA not after:            Thu 30 Apr 2026 20:45:37 +0000
asID:                     11404
IP address blocks:        107.180.146.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b/22d4b872-8325-44d1-958d-897bd254f68b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b/22d4b872-8325-44d1-958d-897bd254f68b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b3:6d:d3:9b:8e:17:f8:ae:e4:38:53:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22d4b872-8325-44d1-958d-897bd254f68b
        Validity
            Not Before: Jan 30 21:45:37 2026 GMT
            Not After : Apr 30 20:45:37 2026 GMT
        Subject: CN=5ac72fd2-bcad-4d2c-8374-d01d6505000c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:51:11:c8:d0:8d:01:41:cc:b7:4f:39:56:15:
                    01:ab:bd:e8:17:21:ed:f7:e2:68:47:0b:cd:f5:86:
                    60:79:b3:1a:3e:2d:dd:99:92:4c:f8:13:e6:b1:53:
                    1e:c3:fc:6c:3c:ff:6a:3d:f5:92:0f:61:a9:df:15:
                    dd:2b:a8:26:bc:d1:8f:18:c0:af:1e:a1:b2:8e:e7:
                    a8:65:9d:93:f9:fc:aa:18:46:3f:d2:94:2e:2b:83:
                    1c:86:5d:8e:66:57:3c:6f:77:6d:0f:35:4b:45:98:
                    88:23:79:f8:d3:32:82:d8:4a:f5:b9:59:a9:dc:79:
                    ef:f8:b7:46:1e:86:e8:a4:83:56:1f:61:29:ab:1a:
                    f8:78:e9:c8:a5:00:80:05:66:80:cd:af:17:76:2b:
                    35:ca:d0:f2:a0:fc:2c:d6:c9:55:9e:d4:a2:42:98:
                    36:3d:f5:65:26:ab:48:c5:a0:f1:27:8c:5f:18:93:
                    c9:17:42:02:e2:6f:ae:47:9c:1d:ef:a9:07:73:51:
                    0f:f4:f6:ce:9d:29:28:82:2d:31:fc:ac:e6:8c:d3:
                    74:01:88:ec:de:d9:75:6f:e8:28:3c:89:fb:0c:72:
                    e1:c0:36:fb:30:11:93:eb:1c:8d:9b:b7:2f:52:a2:
                    17:3a:4e:51:4d:45:72:60:be:a9:97:b4:3a:1d:52:
                    ac:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:45:A6:BB:AC:71:85:E5:6C:88:4B:0C:F0:0D:FC:88:4C:A4:83:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b/9aa0718c-c3ac-3f65-adec-7e30be513fad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b/22d4b872-8325-44d1-958d-897bd254f68b.crl

            X509v3 Authority Key Identifier:
                keyid:A1:EB:27:37:68:9F:C8:9B:9E:E2:30:E3:C8:05:C7:E2:EE:8D:8E:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.180.146.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:92:4e:13:b8:39:ef:59:2b:11:f7:d1:f5:cd:af:06:8a:53:
         3a:a1:13:c6:6f:94:86:34:64:a7:b9:ec:49:8a:0e:d6:c5:67:
         b1:33:35:94:a1:63:53:60:8d:6e:f1:11:d4:7f:81:9e:bb:45:
         bd:d4:38:ed:f3:c7:2c:81:a1:c2:00:3a:10:bb:55:61:0b:9b:
         0a:a0:4a:ca:4d:56:7e:a9:a7:4d:56:2c:46:52:9d:e5:82:ce:
         71:73:d7:f2:8b:1e:ff:43:c7:fc:1d:a3:1f:d0:eb:8d:09:ed:
         70:e3:fa:38:c0:fe:8f:3b:83:47:f1:af:95:14:04:0a:9f:04:
         3a:84:b6:e0:12:84:b6:a8:ba:5c:9a:83:50:33:bb:d6:4f:af:
         a8:26:62:2f:d9:3a:50:c3:19:65:03:2f:b5:e0:12:7d:03:a7:
         b9:66:6d:53:69:87:36:82:9a:d0:1d:70:be:bc:70:fa:c3:57:
         c5:84:a3:66:75:85:d2:6d:2d:e4:0d:67:a0:5f:fe:61:af:ae:
         58:b8:d5:49:50:f6:95:1a:11:21:8b:e9:6d:71:3d:eb:97:51:
         a2:2f:34:62:79:01:81:fe:69:05:0b:ef:47:6d:cd:b7:47:ea:
         8b:bb:bf:02:e4:75:2c:52:d8:b1:0b:30:dc:c4:26:17:8d:5d:
         c3:70:ed:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 23:47:50 2026 by rpki-client