Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/ee282b1a-ceb5-3eef-95c5-520359544df0.roa
File:                     ee282b1a-ceb5-3eef-95c5-520359544df0.roa (raw, json)
Hash identifier:          bStllXHSAUbNEUy3izMpcweFO9PEoPGGfaJoj+MYbUc=
Subject key identifier:   C7:C5:C9:C5:FD:88:EA:DF:14:D7:1A:0B:82:C1:F9:D3:CC:9F:AB:68
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F4328584CDF3242B6520F2C26887B512C
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/ee282b1a-ceb5-3eef-95c5-520359544df0.roa
Signing time:             Sun 15 Feb 2026 14:00:41 +0000
ROA not before:           Sun 15 Feb 2026 14:00:41 +0000
ROA not after:            Sat 16 May 2026 13:00:41 +0000
asID:                     26421
IP address blocks:        74.202.200.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:df:32:42:b6:52:0f:2c:26:88:7b:51:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: Feb 15 14:00:41 2026 GMT
            Not After : May 16 13:00:41 2026 GMT
        Subject: CN=396b9b40-6be5-495d-b505-161c3fdb1f71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e0:b3:77:d6:5d:e2:ba:1c:87:35:3e:da:e3:
                    b5:bc:61:d9:5c:cd:6d:6f:60:5d:4f:a5:7f:fa:b8:
                    c7:c6:cb:98:a6:13:49:96:ba:05:61:bb:cc:69:06:
                    ea:24:f0:3e:ed:69:55:fa:72:46:5d:4e:b7:f8:5b:
                    b2:d6:60:e5:e4:86:47:95:67:97:bd:81:ac:b2:d1:
                    03:ea:c9:24:17:c6:3e:91:2d:dc:26:c6:58:52:ed:
                    53:da:4a:f1:a6:75:d5:75:cb:42:e0:35:ea:59:85:
                    45:b0:3b:4a:ae:dc:e4:71:9d:e9:39:c1:f8:91:ef:
                    a8:89:34:af:4a:80:fb:34:2c:e2:de:c0:98:7f:d6:
                    36:d5:7c:23:ae:b9:4f:8e:2f:d2:92:32:56:f9:cd:
                    fc:e8:c2:11:24:d7:45:72:70:17:2a:fa:27:b5:09:
                    3e:87:12:87:9e:2e:1d:d4:65:6c:1c:28:1e:6f:fa:
                    3f:75:b2:3a:46:f5:a2:d6:47:34:ef:07:dc:67:39:
                    7d:a3:b4:30:9a:61:65:0b:18:73:b9:76:f5:f6:7a:
                    50:2e:67:fc:0d:90:3e:1c:42:37:92:16:7c:51:6e:
                    10:cb:77:b9:2d:1d:94:1d:f4:63:92:f6:00:1e:2d:
                    40:a2:73:07:fc:ca:71:1c:6d:91:26:13:de:80:06:
                    74:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:C5:C9:C5:FD:88:EA:DF:14:D7:1A:0B:82:C1:F9:D3:CC:9F:AB:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/ee282b1a-ceb5-3eef-95c5-520359544df0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.202.200.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:d7:e6:5a:46:97:a4:6e:2e:d5:c6:02:ec:de:69:ca:0f:9a:
         3a:b9:ba:ad:37:5c:c6:84:5f:12:04:7e:80:85:1e:ca:24:32:
         6a:0a:31:03:dd:18:7c:09:87:59:0c:04:26:89:3a:33:40:b8:
         bf:05:d9:13:14:a5:70:ea:df:bc:de:2f:b5:66:fe:1b:10:50:
         38:86:a5:63:40:ff:bf:30:e3:45:52:c4:9f:c6:12:9d:03:5a:
         bc:ef:9f:ca:ae:19:2a:29:fe:ba:31:7d:b8:d7:b0:3b:32:c9:
         21:c8:86:5d:86:1c:9c:66:a9:d7:c4:31:66:cf:6e:41:a6:be:
         25:83:c7:0d:1d:7e:cc:4e:ec:b9:ea:66:d1:4f:f3:7b:b8:3b:
         28:2f:90:d0:89:58:96:32:9c:a6:a3:3f:1a:80:fb:79:ef:80:
         57:5c:04:f2:ca:b3:4f:b0:dd:e3:57:55:34:b0:ad:98:5f:02:
         1d:a6:2b:ac:08:e0:34:ef:b8:ba:ed:02:b8:dc:7a:20:95:11:
         65:98:79:22:1b:ab:08:04:d7:5c:a8:0b:7c:c0:80:99:af:a5:
         fd:f7:97:a3:13:10:df:92:48:c7:da:7b:b3:6e:ae:90:8a:3e:
         e0:4e:7e:5d:e2:b8:c4:57:68:7e:9d:f9:fe:ef:33:90:11:fb:
         19:03:56:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:47:35 2026 by rpki-client