Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/701d4f9d-3ad1-3d4d-afea-37da4a754fe5.roa
File:                     701d4f9d-3ad1-3d4d-afea-37da4a754fe5.roa (raw, json)
Hash identifier:          aArZrSh6H2InDPmf8I7FgNU7ald538x3gTisq0rkSb8=
Subject key identifier:   5B:2E:4B:96:08:FA:40:40:A7:22:E8:9A:15:7D:EE:54:DE:5C:19:2E
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F4328584C76817E43EA576EF5C5289570
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/701d4f9d-3ad1-3d4d-afea-37da4a754fe5.roa
Signing time:             Fri 09 Jan 2026 02:00:31 +0000
ROA not before:           Fri 09 Jan 2026 02:00:31 +0000
ROA not after:            Thu 09 Apr 2026 01:00:31 +0000
asID:                     60781
IP address blocks:        23.19.197.0/24 maxlen: 24
                          2607:f5b5:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Feb 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:76:81:7e:43:ea:57:6e:f5:c5:28:95:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Jan  9 02:00:31 2026 GMT
            Not After : Apr  9 01:00:31 2026 GMT
        Subject: CN=9a418fb1-4195-40bf-964d-b0d6759745c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:e9:a4:f2:e3:5d:d1:44:7c:74:8f:4f:5a:c5:
                    e5:b9:fd:1e:6d:b7:6b:81:fc:0f:e2:ff:56:b0:01:
                    0b:40:39:44:d8:b2:11:70:f2:44:8e:c7:43:a2:bd:
                    04:7f:6e:d8:86:b1:c9:81:f2:23:3e:89:97:67:8b:
                    70:48:5f:4f:54:7a:3b:2f:16:e9:b7:54:64:8a:6c:
                    ea:0f:f6:80:11:13:ac:80:e9:4a:1c:63:72:8f:cd:
                    f4:a4:89:10:e5:39:bf:1e:52:16:9e:c0:8d:53:83:
                    9f:1c:67:e0:3c:94:bd:2b:01:57:99:17:d6:4f:cf:
                    f8:89:fc:6c:32:e8:f5:39:82:d1:21:95:d7:79:ed:
                    d3:d3:04:fc:0b:64:c4:75:43:4b:0b:aa:c5:b5:36:
                    05:76:74:13:fb:1a:84:9f:f1:86:0a:d4:aa:7e:c5:
                    86:82:48:05:96:9f:c6:7b:fb:e9:ad:ce:47:91:42:
                    e6:48:38:58:38:f7:78:c0:1e:81:14:c0:fe:9a:93:
                    e7:32:e6:85:f1:8d:3c:93:8b:5a:91:32:8a:34:df:
                    d2:dc:77:b1:4f:0b:c2:2f:2e:aa:91:65:f0:a0:0a:
                    b2:33:f7:a8:19:9f:7f:1f:0e:8e:6e:e2:20:71:e3:
                    c7:b9:a3:56:26:84:cb:2e:2b:b2:9f:a6:74:23:96:
                    0a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:2E:4B:96:08:FA:40:40:A7:22:E8:9A:15:7D:EE:54:DE:5C:19:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/701d4f9d-3ad1-3d4d-afea-37da4a754fe5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.19.197.0/24
                IPv6:
                  2607:f5b5:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:c3:be:8e:90:ad:3b:7f:91:58:bb:c6:cc:80:f9:9e:32:be:
         4f:6d:e7:43:3a:92:66:ba:d7:f6:9a:0e:63:2f:9b:b7:7c:a9:
         e1:1e:6c:fe:1a:e2:35:c6:dc:23:6e:c4:64:a4:0b:cb:d0:a0:
         6c:93:19:7f:d0:2a:51:21:78:96:ed:f3:b1:fe:6b:88:c3:2b:
         5c:98:a3:fe:be:a2:db:a6:61:d9:26:17:6c:26:b2:5b:d0:9b:
         19:eb:e8:9a:8d:ca:29:10:2b:45:fe:12:4c:3a:38:75:2c:dd:
         63:61:c6:49:45:b6:d9:60:93:fb:af:03:6e:78:e0:d0:f7:c0:
         19:39:1f:08:ea:9e:d2:b5:78:12:ec:6c:07:c3:11:72:d2:c2:
         02:67:2a:b5:b9:92:4e:28:c5:f0:06:f1:00:78:a6:27:ab:67:
         2f:81:64:df:a0:22:c4:78:70:1f:e3:6a:9e:64:ce:9b:87:27:
         7b:90:32:ef:a3:c7:bc:45:67:71:db:a2:3e:e5:8d:2d:b9:7f:
         e6:1e:41:ba:72:2b:04:23:c7:21:62:53:85:a3:1d:52:cc:7d:
         05:b8:80:52:dc:83:ba:ad:b3:60:58:6b:d0:53:cf:da:c9:2b:
         a3:2e:0e:49:82:3c:4e:29:01:4c:f2:8e:86:fc:a2:f7:cb:4a:
         04:84:4d:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 15:01:31 2026 by rpki-client