Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fc0f804f-fbac-3d19-9010-024c4c724834.roa
File:                     fc0f804f-fbac-3d19-9010-024c4c724834.roa (raw, json)
Hash identifier:          1qqlMngPYibyhbWIAylKJpPwj0wkIDxZs2jmLXbsmYQ=
Subject key identifier:   E1:17:36:15:BD:E3:83:70:81:36:09:2E:47:27:7B:C9:02:21:AC:FE
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CFDE978B8179678BF0C6F9D80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fc0f804f-fbac-3d19-9010-024c4c724834.roa
Signing time:             Thu 26 Feb 2026 14:00:40 +0000
ROA not before:           Thu 26 Feb 2026 14:00:40 +0000
ROA not after:            Wed 27 May 2026 13:00:40 +0000
asID:                     7016
IP address blocks:        23.31.240.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fd:e9:78:b8:17:96:78:bf:0c:6f:9d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 26 14:00:40 2026 GMT
            Not After : May 27 13:00:40 2026 GMT
        Subject: CN=ea09eb1e-3552-49a6-9cc2-b93736795ec1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:67:12:06:2a:77:4c:e8:e6:80:f9:24:d8:ef:
                    ff:e4:70:ab:c1:64:42:ac:5b:e2:1f:be:2b:52:e5:
                    05:a4:d5:c9:05:8d:25:d8:4d:7a:8f:a9:a7:e1:a7:
                    d7:40:bf:a9:8f:7f:9c:20:c3:95:21:f0:6c:24:5b:
                    eb:21:b6:2a:43:d5:db:79:65:53:2f:29:4a:fe:3c:
                    d2:d8:fb:ad:32:51:81:76:59:17:31:ed:77:ea:28:
                    cf:41:9a:19:8c:00:43:68:cd:e3:f9:0b:04:88:50:
                    29:fa:5a:40:58:7b:2c:6a:d4:e1:b6:bf:c3:52:ab:
                    0d:34:46:db:31:17:a5:fe:fd:8d:aa:82:f3:23:0e:
                    a6:b4:d3:57:16:d1:f7:22:97:c6:10:48:19:b6:fb:
                    79:c6:95:3b:a6:70:2c:1b:86:bd:80:94:ec:3f:0c:
                    af:7d:6b:40:0f:4c:05:76:f9:a9:d4:54:76:40:20:
                    21:c8:d4:9c:6f:da:02:77:15:64:a0:2e:ae:b8:c7:
                    34:27:7a:f6:b2:3e:6b:4d:87:ff:11:a3:54:5a:97:
                    42:dc:9e:37:98:93:ea:27:5c:92:a1:e0:6f:30:fa:
                    29:16:37:ad:f0:9e:48:1c:cc:17:9c:e5:80:e6:70:
                    3d:a5:b8:f4:57:fe:80:30:70:15:86:d7:8a:d2:21:
                    6a:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:17:36:15:BD:E3:83:70:81:36:09:2E:47:27:7B:C9:02:21:AC:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fc0f804f-fbac-3d19-9010-024c4c724834.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.31.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:95:37:19:5f:2b:2c:db:59:c7:91:c6:85:ad:89:96:1d:85:
         8f:40:22:2e:2c:ba:76:42:a0:45:21:b7:17:4f:2a:39:53:ba:
         b1:96:b1:f5:bf:05:28:4b:da:ef:d3:aa:d4:64:d3:6c:4e:77:
         a4:79:27:2a:27:19:ee:66:cc:be:89:67:2c:d3:9e:f0:01:1d:
         9c:0e:ae:8b:fa:b2:c6:e9:68:ef:6b:bf:39:e3:93:f7:75:a9:
         21:9b:1a:56:af:47:08:56:48:e8:ac:ab:9c:a2:7a:7e:bc:3e:
         e5:66:74:43:c0:84:6f:f9:58:53:74:08:bc:4b:94:82:4f:a3:
         47:7a:8e:23:8c:7a:97:a1:4e:a7:9d:fe:61:0f:34:1f:d4:8e:
         20:a4:e7:c4:5b:c3:6f:44:4d:e9:02:0a:bb:47:cb:dc:5c:02:
         40:b7:4f:08:a0:16:a0:5b:83:b8:ef:48:c6:87:61:27:36:2d:
         29:6f:89:17:54:f2:1d:1d:a9:12:02:7a:22:a7:12:87:64:d1:
         20:a0:f9:31:d3:67:ad:05:72:48:14:b0:50:6d:b6:f5:86:9b:
         a8:96:97:d9:a1:c7:73:f1:de:65:23:34:41:9a:35:c5:38:db:
         55:a8:4a:73:71:4d:df:d6:f5:6b:f7:97:83:aa:11:06:70:c0:
         40:f6:0a:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:43:28 2026 by rpki-client