Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/2d1aa5c6-d9a0-36fa-8adf-a9c331089f19.roa
File:                     2d1aa5c6-d9a0-36fa-8adf-a9c331089f19.roa (raw, json)
Hash identifier:          1vfwbyuD95QCUZqFT5Ml9FQigN78Pt568Mt7uoyAL2k=
Subject key identifier:   B8:33:D6:92:EA:90:F5:83:D0:54:17:12:BF:9A:8F:3D:A6:96:16:37
Certificate issuer:       /CN=c3a944cd-51a8-4d10-ae57-724de26a1d62
Certificate serial:       010D0C9F4328584D316F666773A5A390750C6F80
Authority key identifier: A8:60:9F:B9:17:C5:EA:2E:CC:FE:2F:5B:43:53:D1:C2:5F:AD:7D:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/2d1aa5c6-d9a0-36fa-8adf-a9c331089f19.roa
Signing time:             Tue 17 Mar 2026 01:00:32 +0000
ROA not before:           Tue 17 Mar 2026 01:00:32 +0000
ROA not after:            Mon 15 Jun 2026 01:00:32 +0000
asID:                     25655
IP address blocks:        173.241.148.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/c3a944cd-51a8-4d10-ae57-724de26a1d62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/c3a944cd-51a8-4d10-ae57-724de26a1d62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:31:6f:66:67:73:a5:a3:90:75:0c:6f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3a944cd-51a8-4d10-ae57-724de26a1d62
        Validity
            Not Before: Mar 17 01:00:32 2026 GMT
            Not After : Jun 15 01:00:32 2026 GMT
        Subject: CN=96b387e3-05ee-479c-8f74-c39dc56f73a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:8e:1c:1a:26:5b:12:fa:5f:fa:3d:ea:24:e5:
                    da:b8:23:cf:b3:84:66:53:0b:54:61:03:0c:24:fc:
                    40:b5:60:bf:01:dd:b0:49:6b:e2:dc:8b:2a:f2:d5:
                    f8:24:96:dc:82:45:0f:d1:8c:22:65:f9:65:a2:a1:
                    84:db:4d:61:81:fd:c6:42:54:5d:14:89:70:86:d4:
                    de:c1:46:e8:17:94:ef:95:b7:eb:5e:70:47:d5:2d:
                    9b:80:29:27:a8:84:b4:c2:25:06:22:fe:46:3d:91:
                    44:13:6d:73:d9:fa:9e:80:9f:36:e0:a5:02:40:8d:
                    68:fb:15:56:83:e8:3a:18:fb:fb:7d:2c:c3:fa:47:
                    66:43:d9:0f:0c:e4:d0:09:29:48:fc:12:ce:99:ae:
                    0d:55:2c:78:b9:7c:cb:dc:05:03:10:ec:cd:b7:bb:
                    d0:e6:f1:9f:7d:e8:94:c9:21:71:73:84:c6:83:9b:
                    61:fc:f2:b6:19:da:75:72:cc:a3:21:77:73:45:95:
                    99:4f:ac:43:c0:15:28:bc:50:01:7a:46:dd:05:7a:
                    83:f5:20:56:98:69:ff:6e:12:64:17:de:0a:4b:1a:
                    1d:af:b9:59:e4:1d:68:e3:10:49:f5:a0:f5:6a:0b:
                    12:95:30:35:b5:ec:3b:3f:79:88:99:e7:23:61:39:
                    c8:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:33:D6:92:EA:90:F5:83:D0:54:17:12:BF:9A:8F:3D:A6:96:16:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/2d1aa5c6-d9a0-36fa-8adf-a9c331089f19.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/c3a944cd-51a8-4d10-ae57-724de26a1d62.crl

            X509v3 Authority Key Identifier:
                keyid:A8:60:9F:B9:17:C5:EA:2E:CC:FE:2F:5B:43:53:D1:C2:5F:AD:7D:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.241.148.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:80:04:e8:df:e0:74:8d:de:0f:ac:0d:50:de:ea:0d:0a:a6:
         32:9b:55:2e:cb:40:88:24:ac:e5:80:6f:63:a5:55:3b:6d:09:
         73:a5:9e:ef:93:09:6e:39:43:63:1c:40:16:7f:0d:35:88:c3:
         80:47:8f:7a:c2:0e:ee:5b:82:74:c0:47:2e:a7:65:20:77:22:
         91:51:7c:87:c6:6e:8e:c3:1e:80:49:f3:91:e5:44:bd:21:1f:
         46:f6:fd:02:38:67:88:cf:5a:16:1a:7a:fd:de:c1:27:07:92:
         6c:b9:ee:67:42:d2:c4:32:e8:f4:cb:4b:b1:b3:dc:21:ea:af:
         16:6a:3c:c6:c1:37:12:3e:ba:e3:de:77:64:6e:49:5d:3a:98:
         32:0d:48:2d:e6:88:de:1c:ce:be:25:74:b2:07:82:ee:15:21:
         c1:59:64:04:0d:2d:28:4d:f8:c0:8a:d6:f4:2b:c9:b2:bf:74:
         08:4b:25:5f:50:8c:25:e3:ca:15:f5:c7:e7:88:5a:59:15:87:
         39:d1:37:70:67:2d:fa:5f:bb:a8:7c:b6:8c:15:8f:2b:51:1d:
         43:e8:32:b5:df:ea:66:53:81:5c:55:98:c1:72:8a:5b:00:72:
         b5:b9:e9:8f:49:81:63:73:f1:6d:5e:88:46:13:81:2d:87:46:
         79:0c:14:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:08:17 2026 by rpki-client