Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f521759-b880-4a7d-be8b-3ce70e4aba83/7d789fe7-d176-37a2-ba55-fe1a9a434262.roa
File:                     7d789fe7-d176-37a2-ba55-fe1a9a434262.roa (raw, json)
Hash identifier:          z+LoaeKlqFSTrDfM+XvexlPHgLJ72tH8sDSdz5ZSdPA=
Subject key identifier:   48:11:AF:C0:1A:96:0D:0F:9F:27:58:B7:5D:95:E8:3E:E8:2D:1E:03
Certificate issuer:       /CN=0f521759-b880-4a7d-be8b-3ce70e4aba83
Certificate serial:       010D0C9F4328584CA32C6CCE724B75F96B94CEC0
Authority key identifier: 07:C2:8B:51:71:01:77:8F:B1:D5:C0:66:6F:21:6A:D7:24:B0:E5:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f521759-b880-4a7d-be8b-3ce70e4aba83.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f521759-b880-4a7d-be8b-3ce70e4aba83/7d789fe7-d176-37a2-ba55-fe1a9a434262.roa
Signing time:             Sun 25 Jan 2026 02:00:31 +0000
ROA not before:           Sun 25 Jan 2026 02:00:31 +0000
ROA not after:            Sat 25 Apr 2026 01:00:31 +0000
asID:                     398065
IP address blocks:        23.145.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f521759-b880-4a7d-be8b-3ce70e4aba83/0f521759-b880-4a7d-be8b-3ce70e4aba83.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f521759-b880-4a7d-be8b-3ce70e4aba83/0f521759-b880-4a7d-be8b-3ce70e4aba83.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f521759-b880-4a7d-be8b-3ce70e4aba83.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:a3:2c:6c:ce:72:4b:75:f9:6b:94:ce:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f521759-b880-4a7d-be8b-3ce70e4aba83
        Validity
            Not Before: Jan 25 02:00:31 2026 GMT
            Not After : Apr 25 01:00:31 2026 GMT
        Subject: CN=263825da-2789-4dc5-952a-b2f8bc1e609c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:b8:c1:ab:0e:b1:3f:95:db:fc:fa:ba:ae:8f:
                    18:c0:11:0b:5f:54:47:01:04:5c:80:a6:d2:7a:0a:
                    60:12:59:f9:fd:6c:7f:a8:9a:dd:16:32:7f:a7:5a:
                    6d:0e:11:29:e4:68:9a:86:d2:6d:ea:32:8f:ee:ed:
                    b2:65:5a:5e:ce:e8:ef:f2:64:a3:c6:05:9e:20:4d:
                    99:1d:25:31:48:97:e8:a8:c4:d5:a3:02:bf:ee:4a:
                    38:8e:c0:eb:f0:79:94:66:68:85:84:cb:08:75:f3:
                    76:f9:6d:a9:2a:b3:97:85:d3:44:d5:19:e0:fd:42:
                    07:fc:59:75:aa:04:ba:22:f4:ca:6c:2b:b5:0a:49:
                    cc:f3:dc:e8:48:dc:4b:81:6f:6a:5d:8d:a6:c9:7d:
                    87:05:14:a3:a9:c9:a9:83:ab:22:5e:59:28:91:c3:
                    77:54:00:d3:b9:42:b3:d6:af:1c:2c:06:11:83:ca:
                    ad:ac:6c:01:07:9b:d6:39:8c:cd:e0:90:0f:7e:13:
                    9b:12:a8:25:18:cc:d1:96:9a:5a:b5:a7:9e:d9:ac:
                    2e:c3:7f:d0:65:fa:e7:ec:f7:e9:78:66:57:80:d5:
                    93:91:73:f4:14:c7:7d:a1:12:6f:e8:32:45:38:b7:
                    53:c3:fb:cc:34:53:d8:b8:ae:58:85:72:66:09:d6:
                    b4:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:11:AF:C0:1A:96:0D:0F:9F:27:58:B7:5D:95:E8:3E:E8:2D:1E:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f521759-b880-4a7d-be8b-3ce70e4aba83/7d789fe7-d176-37a2-ba55-fe1a9a434262.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f521759-b880-4a7d-be8b-3ce70e4aba83/0f521759-b880-4a7d-be8b-3ce70e4aba83.crl

            X509v3 Authority Key Identifier:
                keyid:07:C2:8B:51:71:01:77:8F:B1:D5:C0:66:6F:21:6A:D7:24:B0:E5:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f521759-b880-4a7d-be8b-3ce70e4aba83.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.145.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:50:4f:ff:04:ee:6a:64:5a:e1:c8:4f:d1:7b:94:06:42:25:
         3f:a9:fa:eb:6e:b9:68:3f:73:89:10:e6:07:0a:02:cf:e2:d9:
         b2:54:f1:b6:d2:de:cb:94:5b:01:70:2e:45:46:27:51:bd:b7:
         0a:ee:56:71:4b:c5:5e:09:51:8e:54:6c:e1:58:1b:26:59:9e:
         23:2b:bc:1f:fa:9c:15:b6:26:c7:a0:4f:d1:8c:c5:89:8e:2b:
         05:76:a2:ea:3b:a5:9b:c3:45:8b:33:b1:f6:d2:c8:4e:fd:9d:
         d9:84:29:fb:5a:80:cb:0f:87:8a:7d:e7:48:b6:a4:a2:b5:cc:
         3c:4d:a3:15:4d:0e:a3:51:81:6b:80:83:6e:22:3f:66:8e:0c:
         b5:a6:27:82:32:99:4b:36:23:83:57:fc:13:bb:a1:5a:43:bc:
         35:a1:b0:e3:f0:0c:e2:2d:f0:7b:36:de:80:7f:8a:52:3a:ae:
         f1:da:b1:87:d5:14:28:76:27:96:10:20:2b:18:90:10:b4:ef:
         aa:53:b3:39:35:9f:5b:88:07:34:f7:6b:2b:e5:2f:bd:d1:16:
         bb:66:44:89:21:ac:4c:31:ca:34:c7:ac:9b:94:f8:6a:b7:3a:
         9d:3e:ef:2e:ae:db:1b:2a:5e:1c:e2:f7:bf:0f:3d:06:34:48:
         8f:ba:cb:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:46:33 2026 by rpki-client