Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a4f9c6b8-3944-422b-8c9c-2ce45c9d038d/726aee6e-c0a9-309a-95e8-f2d1a825ff27.roa
File:                     726aee6e-c0a9-309a-95e8-f2d1a825ff27.roa (raw, json)
Hash identifier:          r9budgZeLOlYzB+Aa1EjALLcVt772pT4bRr2SlDWPq4=
Subject key identifier:   0C:27:23:9A:5F:41:E6:30:37:FC:61:0D:A8:FD:42:B6:DE:74:E1:03
Certificate issuer:       /CN=a4f9c6b8-3944-422b-8c9c-2ce45c9d038d
Certificate serial:       010D0C9F4328584CB551C259137852052F6BA900
Authority key identifier: 09:46:8A:85:47:EE:D0:06:33:D6:40:02:E9:9A:69:1D:BA:11:51:2D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a4f9c6b8-3944-422b-8c9c-2ce45c9d038d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a4f9c6b8-3944-422b-8c9c-2ce45c9d038d/726aee6e-c0a9-309a-95e8-f2d1a825ff27.roa
Signing time:             Sat 31 Jan 2026 14:00:39 +0000
ROA not before:           Sat 31 Jan 2026 14:00:39 +0000
ROA not after:            Fri 01 May 2026 13:00:39 +0000
asID:                     32205
IP address blocks:        23.148.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a4f9c6b8-3944-422b-8c9c-2ce45c9d038d/a4f9c6b8-3944-422b-8c9c-2ce45c9d038d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a4f9c6b8-3944-422b-8c9c-2ce45c9d038d/a4f9c6b8-3944-422b-8c9c-2ce45c9d038d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a4f9c6b8-3944-422b-8c9c-2ce45c9d038d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b5:51:c2:59:13:78:52:05:2f:6b:a9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4f9c6b8-3944-422b-8c9c-2ce45c9d038d
        Validity
            Not Before: Jan 31 14:00:39 2026 GMT
            Not After : May  1 13:00:39 2026 GMT
        Subject: CN=a267484d-fa89-4a11-980d-5026f0f594c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:6b:4c:aa:04:b2:d5:a7:99:5b:8b:96:bd:35:
                    3f:5e:7a:f5:b4:b0:78:11:89:0b:36:f5:5f:ad:e8:
                    97:c2:77:a6:0f:be:f0:31:68:0e:06:f4:9d:7d:00:
                    a4:9b:ff:33:47:61:0b:dd:6c:07:3a:e4:8c:c3:eb:
                    95:26:6f:b6:86:bd:a8:75:48:13:45:54:82:25:2b:
                    b1:58:24:f7:f9:33:89:c6:bc:13:03:08:aa:4c:cd:
                    a1:48:6d:4d:c0:19:2c:9a:6a:55:4e:cb:ce:42:56:
                    80:d4:0b:ec:1a:ac:bc:cd:b1:26:7a:24:91:97:c2:
                    26:4f:89:3c:02:92:3c:ba:5b:53:8e:ee:62:40:13:
                    36:f4:d7:17:ce:20:34:0d:7c:0f:47:7a:3d:a3:4f:
                    10:ed:dc:6c:18:93:db:83:10:36:22:e4:89:0f:18:
                    0e:5f:b0:11:c0:5a:50:2b:e6:54:16:b0:45:0d:2c:
                    d2:9c:7d:af:59:ef:67:bd:42:19:bb:88:24:97:65:
                    0d:a3:57:aa:b7:5c:19:16:f9:7c:13:a6:10:87:3e:
                    71:52:97:92:f2:1f:bc:97:9d:ee:99:95:f8:16:6a:
                    76:d8:44:da:11:3f:07:84:ca:fe:4d:cd:96:5d:bb:
                    89:3c:6c:48:18:8a:0f:87:46:67:02:95:81:16:82:
                    99:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:27:23:9A:5F:41:E6:30:37:FC:61:0D:A8:FD:42:B6:DE:74:E1:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a4f9c6b8-3944-422b-8c9c-2ce45c9d038d/726aee6e-c0a9-309a-95e8-f2d1a825ff27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a4f9c6b8-3944-422b-8c9c-2ce45c9d038d/a4f9c6b8-3944-422b-8c9c-2ce45c9d038d.crl

            X509v3 Authority Key Identifier:
                keyid:09:46:8A:85:47:EE:D0:06:33:D6:40:02:E9:9A:69:1D:BA:11:51:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a4f9c6b8-3944-422b-8c9c-2ce45c9d038d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.148.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:99:e2:fa:48:5e:c5:c2:26:e5:a4:5c:cd:49:32:bb:f4:0c:
         51:34:3d:86:b3:93:a1:92:27:ba:66:ed:32:7e:22:26:3e:be:
         79:d6:62:e8:ea:b8:25:b1:72:81:15:a5:9a:cf:fc:8b:a5:e8:
         13:e7:cf:e6:07:f2:c7:c5:06:cc:58:d6:9c:fa:ad:36:61:94:
         ac:4d:e8:ce:e0:26:f7:e9:a1:85:6b:2f:d6:24:35:fd:54:3d:
         29:89:00:72:ba:c9:45:31:8e:3c:a9:52:e1:eb:ce:3d:53:03:
         a2:0f:b3:38:25:84:c6:92:ec:73:b0:2d:d8:e8:aa:8a:ab:a9:
         9d:5a:27:b1:42:8d:f0:1b:d1:be:14:58:ed:53:79:5c:0d:18:
         a3:a3:42:63:4c:31:2e:1b:8b:93:7e:5b:16:4b:8d:3f:04:bd:
         d3:9b:b6:05:98:73:55:e5:12:1b:bd:c8:6b:80:a0:e0:1d:78:
         86:4f:93:2b:92:d9:43:59:e9:ad:36:dc:c8:e3:bb:81:e1:69:
         a2:f1:af:90:f2:6e:31:5d:9f:98:38:70:95:11:48:41:56:c1:
         10:58:86:61:a8:62:78:76:d6:1f:de:36:df:79:b1:3b:30:f4:
         85:45:f4:b2:53:c2:dc:d9:00:20:58:74:40:fc:80:49:cf:32:
         55:27:eb:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 22:55:50 2026 by rpki-client