Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3d3016dd-bb93-47bb-b986-002f3d7984c5/42311329-687f-3581-9dd8-4ecc3e9bc883.roa
File:                     42311329-687f-3581-9dd8-4ecc3e9bc883.roa (raw, json)
Hash identifier:          sEAdwtpMCm8jmEGOpD+Y8C7LQK88d5us3K6LBg6LkSE=
Subject key identifier:   F1:75:4A:4B:65:63:E3:9F:EC:17:BB:BE:3D:48:46:31:5F:83:B4:4D
Certificate issuer:       /CN=3d3016dd-bb93-47bb-b986-002f3d7984c5
Certificate serial:       010D0C9F4328584CE0978F025A5FF62EE1F968D0
Authority key identifier: DE:0B:DB:E1:3C:B2:D9:EC:20:71:4B:AE:12:5D:C0:2A:E4:5A:A1:2E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3d3016dd-bb93-47bb-b986-002f3d7984c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3d3016dd-bb93-47bb-b986-002f3d7984c5/42311329-687f-3581-9dd8-4ecc3e9bc883.roa
Signing time:             Mon 16 Feb 2026 02:00:32 +0000
ROA not before:           Mon 16 Feb 2026 02:00:32 +0000
ROA not after:            Sun 17 May 2026 01:00:32 +0000
asID:                     21699
IP address blocks:        23.188.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3d3016dd-bb93-47bb-b986-002f3d7984c5/3d3016dd-bb93-47bb-b986-002f3d7984c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3d3016dd-bb93-47bb-b986-002f3d7984c5/3d3016dd-bb93-47bb-b986-002f3d7984c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3d3016dd-bb93-47bb-b986-002f3d7984c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 01 Mar 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e0:97:8f:02:5a:5f:f6:2e:e1:f9:68:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d3016dd-bb93-47bb-b986-002f3d7984c5
        Validity
            Not Before: Feb 16 02:00:32 2026 GMT
            Not After : May 17 01:00:32 2026 GMT
        Subject: CN=f6482703-0ba9-4730-8867-e90fce0e39ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b1:90:5c:bc:00:7a:ae:6e:2e:50:4c:5c:28:
                    2b:de:03:d9:9b:3c:0f:c0:b5:55:2a:78:c3:57:49:
                    88:93:60:94:19:5e:b0:17:98:9b:e3:54:4f:81:3b:
                    ae:a0:5f:87:2b:9d:3b:4e:30:4e:41:f9:cf:1e:cd:
                    50:39:7f:0a:65:ce:1a:40:11:db:e9:e4:aa:4a:1e:
                    e6:48:ef:da:2d:87:79:7a:7c:d0:dd:07:24:3c:bb:
                    53:b6:49:d5:2c:e6:47:a9:52:bb:84:22:cd:ef:6d:
                    d4:bc:df:3a:02:04:9b:a7:bd:69:a7:27:ac:fc:2f:
                    89:6b:64:25:28:e9:4b:f3:d9:b2:a6:e8:25:35:2c:
                    c1:90:91:77:20:5e:01:f3:44:3d:cc:6e:33:da:15:
                    ad:85:80:b5:af:df:6a:1e:d4:96:e2:f2:d8:f7:b8:
                    27:19:f8:0a:f6:fb:d6:ba:40:23:32:9b:61:c4:25:
                    68:d8:7c:ba:00:60:3d:5b:b5:6b:6b:0e:a6:de:3a:
                    58:31:fa:e4:6b:30:04:ef:e0:20:55:7b:9b:35:44:
                    07:8a:52:b7:12:f2:bf:6f:eb:64:58:cf:05:e7:da:
                    d5:84:29:ce:a0:87:2a:41:ab:1b:99:f6:33:54:2e:
                    33:cf:4f:13:b6:3d:5b:07:13:9f:2a:aa:49:b5:c4:
                    ed:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:75:4A:4B:65:63:E3:9F:EC:17:BB:BE:3D:48:46:31:5F:83:B4:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3d3016dd-bb93-47bb-b986-002f3d7984c5/42311329-687f-3581-9dd8-4ecc3e9bc883.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3d3016dd-bb93-47bb-b986-002f3d7984c5/3d3016dd-bb93-47bb-b986-002f3d7984c5.crl

            X509v3 Authority Key Identifier:
                keyid:DE:0B:DB:E1:3C:B2:D9:EC:20:71:4B:AE:12:5D:C0:2A:E4:5A:A1:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3d3016dd-bb93-47bb-b986-002f3d7984c5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.188.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:b2:59:01:60:7a:94:d7:51:f3:16:5a:fd:d8:57:be:11:76:
         28:cc:c5:d4:ef:3b:e7:b4:ae:c7:5c:fd:5f:40:2c:69:df:22:
         01:0d:5d:bf:7e:da:59:d1:30:77:ca:3c:30:2d:6c:e7:99:fc:
         1e:d3:bc:4c:54:d7:bf:70:02:9c:93:fe:38:1c:b6:be:1c:7b:
         fb:62:74:4d:8b:24:ba:60:eb:93:03:3c:c1:58:3c:13:bc:77:
         fa:42:4c:1d:f0:5c:da:13:56:44:95:15:f7:0b:32:d2:43:5a:
         01:49:68:10:09:8c:72:3c:c5:34:8c:17:65:a3:ef:8e:66:c8:
         a2:9c:a3:e5:43:60:3a:35:e4:09:df:b6:8f:43:4b:0e:97:31:
         eb:f2:60:b1:78:de:00:1a:7d:79:b0:1a:4f:17:40:92:48:87:
         a7:8e:80:7a:65:5e:d0:8f:58:4a:5c:72:9d:55:14:9c:91:23:
         1d:1a:6f:9e:fa:1a:b0:51:af:50:14:f1:9a:88:7d:4d:e8:1d:
         9d:7b:a4:e8:8a:b0:9e:60:29:45:9e:c9:0b:be:35:16:8c:48:
         b6:7e:3d:ed:47:72:0b:a6:77:86:a7:6f:6b:81:58:44:b0:18:
         8a:e9:f0:9e:7b:1d:97:a1:02:62:37:db:4a:77:a7:2f:e3:cb:
         6a:4f:53:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 28 02:30:10 2026 by rpki-client