Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/0d407db7-59d2-30ac-958d-48c3388d3b19.roa
File:                     0d407db7-59d2-30ac-958d-48c3388d3b19.roa (raw, json)
Hash identifier:          /kptbATpBKY3Fg2APoUdv83hh6lObee5GpGbiEygmLQ=
Subject key identifier:   8A:23:16:A0:93:E2:59:63:D2:CD:FC:8E:E4:63:4E:E7:BB:68:DB:49
Certificate issuer:       /CN=24c31307-e10d-4537-aa7a-6bbf3692c5d6
Certificate serial:       010D0C9F4328584CCFD73149397DD6B6E3DA1340
Authority key identifier: 53:48:D6:8D:23:DE:C9:1F:62:B7:F0:97:56:05:53:9B:42:52:3B:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/0d407db7-59d2-30ac-958d-48c3388d3b19.roa
Signing time:             Tue 10 Feb 2026 02:00:31 +0000
ROA not before:           Tue 10 Feb 2026 02:00:31 +0000
ROA not after:            Mon 11 May 2026 01:00:31 +0000
asID:                     204321
IP address blocks:        170.149.252.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/24c31307-e10d-4537-aa7a-6bbf3692c5d6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/24c31307-e10d-4537-aa7a-6bbf3692c5d6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:cf:d7:31:49:39:7d:d6:b6:e3:da:13:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24c31307-e10d-4537-aa7a-6bbf3692c5d6
        Validity
            Not Before: Feb 10 02:00:31 2026 GMT
            Not After : May 11 01:00:31 2026 GMT
        Subject: CN=1270862c-3fcc-4618-b7c1-9bcf02bf3bf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:7e:ca:4c:60:59:68:2e:a9:3f:9a:f3:67:14:
                    cb:d9:19:6e:63:3b:b3:50:14:ba:22:3e:56:11:8b:
                    2d:6b:ad:80:c5:d7:b9:85:2f:da:4d:64:1a:11:66:
                    91:60:d7:f6:ec:43:63:5e:78:2a:9d:e7:60:ea:0a:
                    23:8d:1b:40:4a:27:5a:c1:c4:7e:44:40:57:bf:fe:
                    31:da:39:c9:1b:ca:dc:64:3e:21:5a:a6:0f:4a:e1:
                    7a:c0:5b:98:4e:6d:42:a7:d6:ce:02:ec:51:7c:79:
                    a7:80:89:fb:69:d7:d6:ef:e2:09:22:f2:a8:00:3f:
                    da:4b:14:90:0e:21:6e:eb:c8:62:33:c1:74:1f:1d:
                    2f:4c:bb:b0:42:51:c2:68:5c:37:c3:2d:58:3c:0c:
                    55:c4:3a:7f:a3:22:1c:58:31:68:fc:5a:53:37:f2:
                    d6:18:d9:ec:02:9d:ed:98:2d:cd:8e:2c:c1:ee:d7:
                    37:e8:75:f9:37:a9:54:57:bb:08:d6:0f:19:2b:fd:
                    b2:0a:7f:68:ed:21:e5:3e:5b:44:87:d6:54:d5:ce:
                    c3:cc:b4:7c:93:7d:08:24:c6:4c:9a:80:c4:65:43:
                    d3:86:5c:2c:db:8b:5d:dc:d2:5d:92:1c:03:ed:fd:
                    2a:56:ce:b6:3b:fa:13:14:b7:d1:2b:c7:bb:fa:a7:
                    d3:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:23:16:A0:93:E2:59:63:D2:CD:FC:8E:E4:63:4E:E7:BB:68:DB:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/0d407db7-59d2-30ac-958d-48c3388d3b19.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/24c31307-e10d-4537-aa7a-6bbf3692c5d6.crl

            X509v3 Authority Key Identifier:
                keyid:53:48:D6:8D:23:DE:C9:1F:62:B7:F0:97:56:05:53:9B:42:52:3B:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.149.252.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:52:82:f9:ea:c6:09:21:82:49:84:92:c6:77:ce:d0:43:31:
         92:88:2c:15:64:e3:c5:bc:99:a8:f4:77:7d:94:0a:61:d3:61:
         7f:2c:c1:0d:5d:63:8d:68:b3:c4:06:30:8e:69:75:4a:68:58:
         ba:a2:1c:86:6a:c5:ee:2f:3b:ba:59:c3:50:3e:fb:ce:3b:4d:
         4c:b0:ab:fc:d7:68:ae:1a:5a:ae:98:09:a8:de:6a:c5:0d:af:
         2e:b8:ce:2a:21:70:f3:1a:58:4c:ae:27:d0:b9:bd:28:98:0a:
         1d:c2:ac:c8:b3:96:a6:b7:6c:ad:a0:d7:95:34:25:7d:5e:05:
         bb:22:4c:bb:25:ba:85:78:c0:2e:de:42:34:86:f6:f5:08:c5:
         7a:bb:7c:a1:7f:60:2c:1d:cb:7f:66:f5:72:d8:6b:00:2a:56:
         5c:93:d2:dc:9b:f9:0e:0e:35:36:19:e2:2c:cf:b6:d2:4a:0a:
         c5:59:2b:fc:85:23:df:08:f4:53:6f:cf:5a:24:46:0c:fc:9d:
         3c:8a:8e:eb:cb:8d:fa:f5:41:82:96:9a:11:03:e1:4e:20:de:
         56:b4:5c:49:9c:28:32:2c:99:8a:63:47:ae:0c:83:28:fc:28:
         aa:08:ac:2f:27:bc:bb:ac:ba:3b:5c:5a:a9:cd:90:79:2e:f3:
         87:b8:04:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 22:53:29 2026 by rpki-client