Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9caf968a-6f8b-4c92-bae5-c8fd1c73d95d/80afc93c-8379-33e4-8c58-900d16b82c22.roa
File:                     80afc93c-8379-33e4-8c58-900d16b82c22.roa (raw, json)
Hash identifier:          0HPs8PkQbOU/36JlJk0EPGAaRkzQ9dB1cmYBxouhkvE=
Subject key identifier:   B7:63:8B:63:B9:A9:B2:13:6B:49:89:02:54:5F:81:CC:F0:4D:22:4F
Certificate issuer:       /CN=9caf968a-6f8b-4c92-bae5-c8fd1c73d95d
Certificate serial:       010D0C9F4328584CDF32479DDA120F02D4CFB6C0
Authority key identifier: 4A:1D:2B:20:9A:D1:DD:77:B1:6B:53:6D:4A:3C:86:79:5D:1E:A4:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9caf968a-6f8b-4c92-bae5-c8fd1c73d95d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9caf968a-6f8b-4c92-bae5-c8fd1c73d95d/80afc93c-8379-33e4-8c58-900d16b82c22.roa
Signing time:             Sun 15 Feb 2026 14:00:41 +0000
ROA not before:           Sun 15 Feb 2026 14:00:41 +0000
ROA not after:            Sat 16 May 2026 13:00:41 +0000
asID:                     26421
IP address blocks:        23.29.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9caf968a-6f8b-4c92-bae5-c8fd1c73d95d/9caf968a-6f8b-4c92-bae5-c8fd1c73d95d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9caf968a-6f8b-4c92-bae5-c8fd1c73d95d/9caf968a-6f8b-4c92-bae5-c8fd1c73d95d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9caf968a-6f8b-4c92-bae5-c8fd1c73d95d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:df:32:47:9d:da:12:0f:02:d4:cf:b6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9caf968a-6f8b-4c92-bae5-c8fd1c73d95d
        Validity
            Not Before: Feb 15 14:00:41 2026 GMT
            Not After : May 16 13:00:41 2026 GMT
        Subject: CN=a524ee08-38df-41cf-a3e1-eaf7a11e7661
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:8a:ea:9a:0c:41:57:44:25:fd:09:33:9d:ed:
                    6a:69:ea:78:e5:cd:e3:c1:44:f8:33:b2:67:02:ae:
                    f5:c6:1d:d8:99:c4:86:3b:0f:3f:36:7f:92:53:c6:
                    54:7d:9f:08:11:c3:8d:64:8e:f6:5b:3f:37:f3:9a:
                    69:d9:0f:5f:39:59:aa:de:5f:00:a1:40:a9:51:78:
                    47:3a:a2:08:8e:c5:94:a8:76:7e:63:a9:30:c2:9c:
                    ee:7a:41:f1:52:56:5b:82:49:2c:27:80:a0:46:dc:
                    fc:fe:1e:21:8c:50:05:7e:b3:cd:4a:91:65:fe:f7:
                    87:76:d3:be:4f:86:d3:66:81:c8:43:22:1c:1d:b4:
                    bd:30:35:8b:77:a1:5e:9a:a6:69:7a:6d:da:51:24:
                    25:29:ae:95:3c:72:e6:21:25:ab:ba:35:6d:6c:3d:
                    e0:5d:3b:16:d0:93:2d:02:3c:92:b6:0a:c0:25:27:
                    a2:a2:58:60:6c:52:c1:30:5a:d2:f9:5c:fa:f7:3a:
                    94:6b:8f:c6:0a:76:c3:45:d2:e5:68:13:13:64:ba:
                    12:0e:da:c7:a8:fa:bd:bf:3c:e3:61:80:62:4c:21:
                    1d:02:5e:9d:25:13:78:ba:a9:a0:e6:28:dd:4d:82:
                    91:60:d4:10:5a:b6:02:26:96:8f:31:8a:7d:d2:e4:
                    1a:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:63:8B:63:B9:A9:B2:13:6B:49:89:02:54:5F:81:CC:F0:4D:22:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9caf968a-6f8b-4c92-bae5-c8fd1c73d95d/80afc93c-8379-33e4-8c58-900d16b82c22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9caf968a-6f8b-4c92-bae5-c8fd1c73d95d/9caf968a-6f8b-4c92-bae5-c8fd1c73d95d.crl

            X509v3 Authority Key Identifier:
                keyid:4A:1D:2B:20:9A:D1:DD:77:B1:6B:53:6D:4A:3C:86:79:5D:1E:A4:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9caf968a-6f8b-4c92-bae5-c8fd1c73d95d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.29.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:84:8d:b7:7c:1a:87:c7:d1:45:ed:a0:05:1f:a3:e2:8c:ba:
         7c:36:a3:dd:3e:2c:a6:65:d9:dc:5a:7d:79:f2:a4:20:8b:24:
         d6:54:f0:dc:97:45:e6:6c:33:eb:8b:e7:4a:58:a4:cf:64:53:
         e7:18:c4:c6:cf:05:4e:9a:3a:26:61:b8:20:03:a1:64:9d:fe:
         94:3d:01:46:44:70:47:75:87:08:41:71:15:14:ff:8c:23:c5:
         63:ea:b7:15:f8:56:9b:19:40:9a:81:ca:11:ef:c5:2f:ab:ef:
         e4:b5:f2:2f:7a:7c:f8:47:5f:ec:71:41:ea:d7:a1:e1:4b:ae:
         54:c8:f8:b2:a4:d9:4b:44:53:89:0c:0f:78:67:23:fe:03:df:
         0f:a1:f4:5e:12:90:d6:0c:68:67:cc:e5:58:6c:40:1b:1c:5d:
         e6:ba:27:8a:7e:cc:02:ee:30:70:32:a7:55:3e:48:f9:5c:73:
         da:98:fe:3a:e7:c0:cf:8d:23:77:81:bc:4e:0c:ab:44:14:7f:
         7b:14:cf:41:8c:bb:e2:c9:81:c8:d5:a1:ef:f5:9f:45:88:c7:
         7b:fe:f5:cc:36:1b:7a:94:41:8c:5a:a0:62:10:5f:03:f7:d7:
         e2:11:af:9f:3a:f4:9b:17:4a:d0:c7:6f:77:df:b6:45:10:a3:
         9f:a7:90:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:25:46 2026 by rpki-client