Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/419a7ea9-d997-3bd5-9fe3-d3243524b85f.roa
File:                     419a7ea9-d997-3bd5-9fe3-d3243524b85f.roa (raw, json)
Hash identifier:          L+kpkkEiBZIv/moyOb8aYkSFLO6RP1qDZxqxG334znc=
Subject key identifier:   C7:FF:B0:8F:2E:E1:2D:25:BA:B1:A6:81:DB:4A:D7:B4:C2:AE:B5:7A
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F4328584CDF32431992C57113E39A5880
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/419a7ea9-d997-3bd5-9fe3-d3243524b85f.roa
Signing time:             Sun 15 Feb 2026 14:00:41 +0000
ROA not before:           Sun 15 Feb 2026 14:00:41 +0000
ROA not after:            Sat 16 May 2026 13:00:41 +0000
asID:                     26421
IP address blocks:        209.234.206.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:df:32:43:19:92:c5:71:13:e3:9a:58:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: Feb 15 14:00:41 2026 GMT
            Not After : May 16 13:00:41 2026 GMT
        Subject: CN=2164cdfc-6585-4778-8962-63b391fa7cc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:63:09:67:2a:08:d6:a5:2d:e2:a6:ec:18:ca:
                    1b:38:57:97:e4:06:f0:13:86:f2:78:20:f7:a9:b3:
                    db:30:b5:82:47:ea:d0:6b:09:f4:fa:5b:d7:d8:13:
                    b3:2f:50:5e:a7:53:dd:f3:e8:d5:8b:1f:a0:18:67:
                    aa:73:6f:95:bb:0c:d1:d8:6f:00:b5:3f:4c:3d:73:
                    42:7c:31:84:ad:25:c1:57:8d:9f:be:b1:02:cd:52:
                    27:7e:e6:48:a6:7d:4e:48:06:aa:85:b0:76:02:a4:
                    b6:62:4c:99:72:71:d6:21:31:90:e9:de:50:47:49:
                    c5:66:92:f2:3d:d9:30:27:25:0c:b2:b9:1e:17:9e:
                    53:09:1b:a2:e8:98:fc:ea:cd:ee:30:fa:f7:cb:44:
                    0c:14:f6:27:f2:5a:eb:da:8d:28:55:29:a3:b1:38:
                    6d:84:86:71:63:dc:11:95:f7:55:f2:61:4b:59:3a:
                    f9:b5:b8:3c:d1:af:25:52:f2:e1:0d:29:16:d0:f1:
                    2a:ef:7a:82:52:31:d1:60:5d:1f:52:c3:95:16:02:
                    ad:bd:e4:aa:2e:dc:97:17:b4:6d:03:71:4b:90:98:
                    56:d0:19:3b:d7:a6:6a:fc:80:7a:3c:35:31:35:91:
                    05:c6:3d:b8:7e:b1:ef:67:5a:af:ce:18:bf:55:ce:
                    d7:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:FF:B0:8F:2E:E1:2D:25:BA:B1:A6:81:DB:4A:D7:B4:C2:AE:B5:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/419a7ea9-d997-3bd5-9fe3-d3243524b85f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.234.206.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:80:c7:b8:4d:b2:65:0e:9f:c0:ff:b4:c8:bf:75:de:7b:db:
         34:95:43:b9:e0:98:7b:21:12:9a:b4:46:6d:d6:6a:b1:90:30:
         7b:a9:a2:85:9f:e5:27:e1:8d:07:07:ce:8f:fa:ef:ac:56:e6:
         59:55:01:13:5b:cc:80:8c:46:f5:a7:12:a2:c1:f0:3e:bd:ff:
         2e:88:5b:c4:16:8e:62:d7:af:06:cf:a0:82:a8:ad:7c:49:b9:
         60:b0:de:52:6f:97:b2:a3:c0:6b:d2:94:47:bd:e1:04:45:55:
         ab:d8:a6:c4:76:cd:7d:d4:05:b5:8f:06:e2:df:fc:58:01:5b:
         f8:17:5f:2b:88:fd:5f:4a:fb:95:41:97:8f:76:b4:34:6c:60:
         d3:d3:a3:71:5d:77:da:58:cc:16:31:f9:ff:ca:77:c2:d2:be:
         e9:35:7e:33:10:e2:86:de:6c:ad:3c:98:d9:8e:e5:89:57:63:
         42:0e:45:0c:ce:d8:47:9e:97:a5:8b:d6:b0:d7:d2:fd:6c:78:
         f0:d5:7b:fd:10:81:8e:41:fe:ae:cc:87:5a:1a:11:07:13:39:
         10:1f:a6:08:73:d8:3b:ab:b2:77:bc:e1:c3:ec:26:f1:17:ca:
         d9:14:f8:bf:75:38:db:8e:c5:7c:ae:0a:1f:4b:22:67:40:ea:
         1e:86:f7:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:45:04 2026 by rpki-client