Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/5ff2122e-57a3-35ed-8d3a-4e61730a3190.roa
File:                     5ff2122e-57a3-35ed-8d3a-4e61730a3190.roa (raw, json)
Hash identifier:          V2Ze/vT+2I3egTG7lSQAZCjwczIA/cNGV5Hou4/g2ro=
Subject key identifier:   BC:CC:E7:AE:B8:57:AD:31:73:53:C3:AF:BA:0C:AE:17:2D:5D:B0:2C
Certificate issuer:       /CN=24c31307-e10d-4537-aa7a-6bbf3692c5d6
Certificate serial:       010D0C9F4328584CCFD730BBBC1461021D354800
Authority key identifier: 53:48:D6:8D:23:DE:C9:1F:62:B7:F0:97:56:05:53:9B:42:52:3B:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/5ff2122e-57a3-35ed-8d3a-4e61730a3190.roa
Signing time:             Tue 10 Feb 2026 02:00:31 +0000
ROA not before:           Tue 10 Feb 2026 02:00:31 +0000
ROA not after:            Mon 11 May 2026 01:00:31 +0000
asID:                     40833
IP address blocks:        170.149.238.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/24c31307-e10d-4537-aa7a-6bbf3692c5d6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/24c31307-e10d-4537-aa7a-6bbf3692c5d6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:cf:d7:30:bb:bc:14:61:02:1d:35:48:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24c31307-e10d-4537-aa7a-6bbf3692c5d6
        Validity
            Not Before: Feb 10 02:00:31 2026 GMT
            Not After : May 11 01:00:31 2026 GMT
        Subject: CN=c3ce519d-4751-4b68-9a99-bd814a1bd795
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:86:c9:a5:d7:aa:94:19:37:63:90:32:b0:45:
                    53:c5:92:36:bb:0f:f1:e4:09:1b:1f:6b:1f:90:b3:
                    52:26:0f:ce:60:fc:b5:be:84:17:d6:cb:cc:be:2e:
                    51:e5:77:a4:26:70:1b:9a:a9:02:ea:94:1d:ab:7b:
                    be:34:86:b7:13:1f:9a:33:1c:e9:d8:52:07:74:98:
                    06:17:0e:07:4c:11:fe:78:17:cf:d4:2a:2e:9b:33:
                    af:a7:34:e2:b5:1c:19:95:81:4c:29:c3:57:ae:99:
                    e8:4a:60:53:d1:fe:14:19:52:d1:66:f2:0c:2a:08:
                    ad:d8:f1:c6:6f:59:ed:2e:82:2a:7b:59:55:57:ff:
                    a5:8c:47:5c:a7:ef:43:a3:78:7f:f6:2a:8a:f9:44:
                    52:17:40:f6:be:05:f2:7b:ef:6e:38:a7:22:bb:69:
                    1f:5c:84:7b:ac:74:01:56:fe:1a:08:66:b9:6d:10:
                    82:26:b2:d9:b1:d3:9f:5c:aa:02:3f:9d:2f:e8:ea:
                    a6:a0:7a:a8:88:f1:7f:8c:b1:05:0a:7e:74:01:1e:
                    c3:6c:b5:68:19:bf:c2:36:bd:c3:e7:6c:4e:3c:b1:
                    52:fd:4b:cb:1f:f0:72:a4:47:67:d7:7c:eb:7f:f8:
                    61:85:63:cb:31:fb:a5:57:dc:c3:94:8b:95:b4:2c:
                    92:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:CC:E7:AE:B8:57:AD:31:73:53:C3:AF:BA:0C:AE:17:2D:5D:B0:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/5ff2122e-57a3-35ed-8d3a-4e61730a3190.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/24c31307-e10d-4537-aa7a-6bbf3692c5d6.crl

            X509v3 Authority Key Identifier:
                keyid:53:48:D6:8D:23:DE:C9:1F:62:B7:F0:97:56:05:53:9B:42:52:3B:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.149.238.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:c7:be:1d:a9:c9:ff:ea:d3:79:2b:a3:20:03:30:9b:c4:34:
         2a:fb:94:9e:aa:1e:11:41:59:e1:35:9b:6e:22:c4:04:2a:c7:
         b1:2d:fe:4f:ce:0f:65:6e:14:51:cf:50:df:02:0a:68:ef:da:
         ea:9a:66:3b:97:bb:9c:76:fb:21:bf:ba:c6:fa:4d:1a:b7:b1:
         91:34:45:8f:9c:0f:69:07:33:40:91:01:33:cf:a5:19:ea:bb:
         39:b9:25:f1:91:c2:53:08:da:6d:ef:17:f1:75:d6:6e:63:1f:
         69:c1:a5:b6:a6:f3:6f:92:6d:cc:9b:10:77:9b:3b:b0:2f:97:
         86:43:cd:85:5e:a5:96:24:5e:a0:a0:34:a7:f6:52:25:58:f0:
         12:ee:d1:a8:53:23:20:c0:8c:d8:8a:30:92:1d:b5:a5:4c:10:
         f6:ef:b3:44:3b:90:31:7a:f8:0d:11:e2:b8:91:7f:95:56:5d:
         3c:88:c0:0d:86:78:aa:8d:7e:bc:26:0f:b6:96:ab:ac:67:d2:
         f4:df:48:65:91:b4:ff:65:5e:8a:c4:22:e3:c4:29:37:d7:7f:
         df:d3:6f:47:0c:a2:1b:85:36:b0:f2:0e:c3:8d:f6:f4:dd:80:
         ed:a8:a1:c5:49:6d:ba:b3:1a:ef:11:4d:b2:06:55:fc:76:7c:
         3a:b8:99:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 22:50:55 2026 by rpki-client