Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3fc35fc7-60a6-4d0e-a432-384335f12ecb/c18b2b01-4dd4-3ba1-b54b-b7869ab38513.roa
File:                     c18b2b01-4dd4-3ba1-b54b-b7869ab38513.roa (raw, json)
Hash identifier:          tv/bw6OT1coXnomdNYWn0OWCfHf4NF9FdoWedi6CPD8=
Subject key identifier:   B7:F1:81:7C:C4:20:6B:9E:A5:D3:A9:63:27:54:E3:C3:1E:78:D1:B9
Certificate issuer:       /CN=3fc35fc7-60a6-4d0e-a432-384335f12ecb
Certificate serial:       010D0C9F4328584CD56C8CEDEADE138753AE1F98
Authority key identifier: AC:A5:5E:A4:E0:25:37:B9:B1:F4:EB:74:50:DE:93:FC:E3:16:35:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3fc35fc7-60a6-4d0e-a432-384335f12ecb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3fc35fc7-60a6-4d0e-a432-384335f12ecb/c18b2b01-4dd4-3ba1-b54b-b7869ab38513.roa
Signing time:             Thu 12 Feb 2026 02:00:32 +0000
ROA not before:           Thu 12 Feb 2026 02:00:32 +0000
ROA not after:            Wed 13 May 2026 01:00:32 +0000
asID:                     400848
IP address blocks:        140.235.236.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3fc35fc7-60a6-4d0e-a432-384335f12ecb/3fc35fc7-60a6-4d0e-a432-384335f12ecb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3fc35fc7-60a6-4d0e-a432-384335f12ecb/3fc35fc7-60a6-4d0e-a432-384335f12ecb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3fc35fc7-60a6-4d0e-a432-384335f12ecb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d5:6c:8c:ed:ea:de:13:87:53:ae:1f:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fc35fc7-60a6-4d0e-a432-384335f12ecb
        Validity
            Not Before: Feb 12 02:00:32 2026 GMT
            Not After : May 13 01:00:32 2026 GMT
        Subject: CN=ff70a66d-e805-4d6d-b632-583b7ddb4768
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:c5:7c:c8:1a:fa:8e:c8:b0:21:c3:07:f0:9b:
                    5c:83:a6:48:28:73:23:a4:dc:52:d0:bd:c5:2e:ad:
                    58:83:4d:20:77:1c:e7:bd:01:6d:4c:65:94:d3:58:
                    8f:15:c2:02:76:b3:25:d2:01:d1:7c:c2:26:ca:a4:
                    41:c2:29:c5:78:de:24:34:b7:90:02:e5:5f:f2:10:
                    2a:95:73:d6:e6:03:3f:ab:4d:e3:df:0a:79:a5:22:
                    d0:e6:d1:5a:08:08:20:6f:7b:d2:77:07:e5:7e:28:
                    be:10:1c:74:6a:0a:03:48:f7:9e:73:83:39:c7:4d:
                    8c:73:4c:dc:ce:5b:ec:03:b9:0c:a2:be:78:eb:16:
                    bc:2f:b3:e6:41:87:7a:4b:0d:be:f1:aa:41:a7:f8:
                    80:c9:c5:27:6f:c3:15:a6:29:a2:06:86:27:43:a2:
                    1f:ad:7e:df:cb:32:5d:40:b7:2f:95:4f:e7:e6:4e:
                    95:15:26:5e:2a:0a:0d:86:7f:ae:aa:41:bf:71:4a:
                    2b:be:9e:53:1a:71:12:7b:62:e9:fd:34:8b:35:f6:
                    cc:53:6d:61:f6:8f:e5:ec:10:e8:18:26:41:35:1c:
                    60:b3:93:99:31:2e:ed:ce:a3:7e:0c:a6:56:87:31:
                    17:0a:2d:fb:ce:ab:72:a1:3b:d9:54:61:6f:84:81:
                    20:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:F1:81:7C:C4:20:6B:9E:A5:D3:A9:63:27:54:E3:C3:1E:78:D1:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3fc35fc7-60a6-4d0e-a432-384335f12ecb/c18b2b01-4dd4-3ba1-b54b-b7869ab38513.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3fc35fc7-60a6-4d0e-a432-384335f12ecb/3fc35fc7-60a6-4d0e-a432-384335f12ecb.crl

            X509v3 Authority Key Identifier:
                keyid:AC:A5:5E:A4:E0:25:37:B9:B1:F4:EB:74:50:DE:93:FC:E3:16:35:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3fc35fc7-60a6-4d0e-a432-384335f12ecb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.235.236.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:57:96:2d:25:14:43:9a:62:0d:63:e2:54:28:7d:fe:5d:58:
         af:25:d5:41:3d:12:f0:70:0e:60:12:f1:24:de:e6:02:56:1e:
         f0:b4:42:d2:2c:2f:00:dd:69:6e:04:d6:44:2a:af:86:e8:de:
         d3:de:e5:11:09:f6:f3:fa:ae:74:96:9a:cd:50:fa:e6:80:f4:
         df:70:3c:02:a9:2d:3b:a5:f9:c0:75:77:e9:34:a5:9a:7a:8c:
         51:b1:50:2d:31:28:c4:f9:63:8e:76:48:7a:66:91:fd:87:fd:
         03:be:b6:b8:02:a0:1a:e0:bb:a5:fb:70:79:88:15:79:1a:49:
         ac:d3:1f:5b:7f:19:7f:29:57:29:4d:71:78:88:4c:08:37:78:
         7a:6c:89:8f:47:eb:b0:58:c5:9a:09:7b:2c:29:46:48:ca:82:
         d9:43:17:4e:5b:10:d4:a9:7b:78:7b:52:78:fe:0f:4a:6b:a8:
         98:cc:d0:cb:cc:f6:b0:b3:2a:7e:fa:a6:05:0d:05:1e:6a:90:
         14:7a:c1:98:7c:cc:02:6c:dd:a1:77:5f:ed:4f:7d:24:8c:0d:
         fb:b8:f6:8f:99:d8:91:92:19:a4:90:44:50:4e:13:96:03:78:
         c2:b3:54:42:13:5d:d7:5a:a6:51:47:50:2e:01:fb:69:b6:4c:
         c0:b1:a3:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 22:53:34 2026 by rpki-client