Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/048b8fef-f334-35c6-982c-3f5c3d01c3aa.roa
File:                     048b8fef-f334-35c6-982c-3f5c3d01c3aa.roa (raw, json)
Hash identifier:          +bqlPj4dCiqLvwMGViVqky8TzyTTDoWz7UH5vRA3Dws=
Subject key identifier:   26:B4:C1:14:A4:E5:3A:65:1A:AA:84:E5:E4:7A:FE:6E:E4:3E:EF:1F
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584D9A201408B9253539559EB880
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/048b8fef-f334-35c6-982c-3f5c3d01c3aa.roa
Signing time:             Thu 23 Apr 2026 13:00:32 +0000
ROA not before:           Thu 23 Apr 2026 13:00:32 +0000
ROA not after:            Wed 22 Jul 2026 13:00:32 +0000
asID:                     62904
IP address blocks:        173.232.84.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9a:20:14:08:b9:25:35:39:55:9e:b8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Apr 23 13:00:32 2026 GMT
            Not After : Jul 22 13:00:32 2026 GMT
        Subject: CN=2f5c7eb0-7717-401c-abf3-3209fabbc621
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:eb:9b:d7:57:79:de:d5:7f:d3:e1:53:38:da:
                    84:cc:dc:11:a3:62:d3:64:4e:f9:df:29:b9:23:5f:
                    cc:f3:5a:a9:4a:ad:30:eb:09:23:41:38:5a:c8:a9:
                    03:52:06:24:9e:34:79:af:37:c8:9a:cd:61:7a:f7:
                    48:72:65:45:29:4b:f8:9f:0f:e9:b3:eb:2a:37:57:
                    ed:af:fb:31:bb:2e:95:73:00:97:28:3f:b7:76:7b:
                    e4:f0:48:08:9b:95:39:3a:ed:c4:1f:c9:e2:d4:79:
                    9b:83:4a:5d:84:a8:e3:ea:82:d7:40:cd:ee:1c:a0:
                    51:01:f6:b2:d0:e9:58:c6:34:94:bb:b9:da:b8:67:
                    77:ee:d2:14:4e:4e:0f:cb:4c:a3:f8:7b:93:e0:f3:
                    a1:62:d5:92:3c:78:0b:91:e1:5d:ad:9f:f8:7c:53:
                    38:b1:1a:0d:b5:89:df:55:54:06:e3:3e:26:82:c9:
                    a7:c9:52:d7:3b:41:71:8d:d9:46:9d:af:59:16:0a:
                    e7:aa:19:e5:8a:87:26:83:bf:ac:24:f7:19:1e:62:
                    0e:d2:97:84:f0:c5:f7:64:d6:b3:46:09:e8:c7:9b:
                    55:90:f0:0b:95:15:58:e3:33:d3:e3:91:40:fa:08:
                    74:db:25:b7:4d:d0:e3:91:58:c3:24:34:9e:a3:ad:
                    1f:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:B4:C1:14:A4:E5:3A:65:1A:AA:84:E5:E4:7A:FE:6E:E4:3E:EF:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/048b8fef-f334-35c6-982c-3f5c3d01c3aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.232.84.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:c3:bf:a3:8d:b7:44:8f:55:86:6a:79:bd:fa:f1:4b:6c:bf:
         c8:a2:64:14:3e:49:cb:4f:ad:8c:77:53:57:89:01:7b:80:38:
         c0:17:42:35:d4:6c:71:20:4f:99:51:cc:11:21:be:df:42:a2:
         6d:64:c7:d2:b3:8e:d1:93:92:a4:b8:53:dd:86:29:c6:fb:ce:
         de:75:be:53:c3:72:29:df:77:f8:9b:36:8b:30:c4:e5:b1:d4:
         bf:b0:f6:36:fe:56:ac:21:08:e8:81:e2:42:51:38:61:d6:e7:
         49:42:74:8a:2b:39:e6:e4:e0:33:0a:c3:b9:e7:1a:e8:0c:e7:
         d5:f8:a0:d3:17:f7:a3:cd:8e:5a:66:be:dc:64:c3:6b:79:ed:
         89:bf:db:fa:c0:28:c7:bf:dc:e5:ac:45:9a:af:1a:f2:f7:fc:
         7f:90:c0:04:d1:43:60:46:31:57:3f:cc:6c:5b:01:84:c8:a7:
         16:6c:13:69:ee:37:24:31:77:ae:73:e5:c7:b6:34:aa:38:f0:
         c9:fa:ee:23:91:da:54:79:9e:bc:4c:2d:2a:13:4f:b8:47:aa:
         4d:9f:5b:7d:d2:02:6c:00:f2:c6:17:3f:4e:c4:65:ba:fc:a3:
         ce:d3:f2:1c:26:71:cb:f8:05:a7:ad:00:19:40:c5:bb:e0:6f:
         36:da:00:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:36:37 2026 by rpki-client