Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/1871a215-b67f-3b8d-b0f2-5304ba89b35b.roa
File:                     1871a215-b67f-3b8d-b0f2-5304ba89b35b.roa (raw, json)
Hash identifier:          SVG3NBmacQZBLVwKQcI4iq++3UAbJSlMuMC2orhX8kE=
Subject key identifier:   35:7A:26:9C:6F:23:0F:55:00:47:B4:D6:24:B2:28:6A:A1:EF:89:28
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584CA5F741A801485667C0BA5E40
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/1871a215-b67f-3b8d-b0f2-5304ba89b35b.roa
Signing time:             Mon 26 Jan 2026 02:00:32 +0000
ROA not before:           Mon 26 Jan 2026 02:00:32 +0000
ROA not after:            Sun 26 Apr 2026 01:00:32 +0000
asID:                     62904
IP address blocks:        23.231.52.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Feb 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:a5:f7:41:a8:01:48:56:67:c0:ba:5e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Jan 26 02:00:32 2026 GMT
            Not After : Apr 26 01:00:32 2026 GMT
        Subject: CN=a3f052d5-6fac-43fa-9581-eb685548e534
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:a5:b8:ea:0f:a8:3f:08:44:38:cb:3a:cb:f0:
                    bf:04:de:39:7b:2a:f1:ab:f8:70:18:e7:f4:c0:30:
                    ea:91:b6:ef:02:10:9b:bd:35:89:0f:6f:7d:52:e7:
                    9b:ae:77:55:4b:23:14:c7:e2:4b:69:66:45:f3:e2:
                    68:3a:92:2d:f5:07:95:4e:4b:0f:b4:2d:24:17:9b:
                    85:e0:f0:2f:4f:e1:fb:61:95:41:9a:b7:d8:c2:22:
                    e6:93:63:73:cf:28:79:0a:88:e2:88:f4:a8:a2:3a:
                    54:ba:c5:eb:68:30:07:a0:0c:89:18:b8:c7:3a:9a:
                    29:00:2f:49:da:96:96:26:f8:06:49:7b:28:ef:c5:
                    60:d3:1c:19:5b:03:1b:48:97:b6:75:40:06:6a:54:
                    90:e8:02:b1:0e:73:c0:9a:6a:8f:23:b8:55:56:15:
                    58:93:91:86:3c:b3:5f:61:47:77:16:31:01:d8:98:
                    b8:8c:90:18:6b:a1:b7:5b:31:fa:40:ee:84:1f:7f:
                    22:fa:ab:71:90:13:eb:64:c5:40:57:a3:5a:0e:cb:
                    ab:12:cf:42:81:70:62:7b:18:96:47:ac:56:12:90:
                    93:47:ad:da:50:26:77:9b:f5:8f:c1:1c:82:0c:ef:
                    45:e0:0e:aa:72:7e:7c:20:ff:6b:34:ed:b0:30:41:
                    50:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:7A:26:9C:6F:23:0F:55:00:47:B4:D6:24:B2:28:6A:A1:EF:89:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/1871a215-b67f-3b8d-b0f2-5304ba89b35b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.231.52.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:47:f0:45:ba:12:8a:63:03:f0:4c:be:a6:e3:e2:ef:20:c0:
         d4:1e:12:eb:49:f3:d5:0d:fa:de:9a:84:60:01:a7:e3:9a:cf:
         61:ba:6a:9c:0e:5d:91:07:3c:ca:48:4a:02:07:a4:20:68:a3:
         3b:c9:66:7f:88:0c:8e:22:77:0e:ef:b7:88:1e:08:f3:e9:ad:
         7d:0c:e3:94:0a:43:25:65:61:17:cf:ec:c5:09:80:40:1b:27:
         d0:ee:9e:7b:9c:57:69:77:d0:cb:8e:34:cf:2b:ef:82:a4:24:
         4c:70:35:f2:da:80:55:ac:9c:04:72:11:9d:8e:84:4b:24:0c:
         98:d8:8e:58:e8:f4:f1:3c:01:72:58:3c:cf:38:e8:87:2b:cb:
         73:12:1d:de:ff:91:a6:3f:ea:74:37:30:2e:5a:06:8c:57:9c:
         7d:27:bd:de:4c:45:17:7f:f5:9e:6b:32:25:e1:26:e8:49:dd:
         b4:24:d0:fc:19:5b:d3:41:e3:15:8b:a8:28:ec:ec:d8:22:3e:
         24:d9:b6:f3:27:05:54:51:29:6b:48:95:67:05:14:09:8d:3a:
         d4:7d:b3:b0:6c:03:22:04:ae:52:a3:e4:ab:79:85:cf:10:d5:
         5b:ec:73:0f:e3:54:f5:1a:75:d4:a1:91:1b:6e:4f:79:3c:0c:
         27:d0:5c:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:14:32 2026 by rpki-client