Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/e604780b-4bf4-362f-9661-294a2090b35c.roa
File:                     e604780b-4bf4-362f-9661-294a2090b35c.roa (raw, json)
Hash identifier:          0lj4AlSh8yIuf2WdNlaGy5ggJN/9kxIZ5nnHxe7m1n4=
Subject key identifier:   E7:B5:A0:4B:D5:9C:D1:29:70:E6:3F:B2:FD:B3:2A:15:2C:85:03:09
Certificate issuer:       /CN=33c78d60-34eb-4fed-8e25-925b95a30c8e
Certificate serial:       010D0C9F4328584CDC678D61FC97150FB9777F80
Authority key identifier: 5F:65:25:B0:69:97:21:82:E6:E2:D3:91:46:77:BA:5C:33:D3:E0:41
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/e604780b-4bf4-362f-9661-294a2090b35c.roa
Signing time:             Sat 14 Feb 2026 14:00:41 +0000
ROA not before:           Sat 14 Feb 2026 14:00:41 +0000
ROA not after:            Fri 15 May 2026 13:00:41 +0000
asID:                     33039
IP address blocks:        23.173.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:dc:67:8d:61:fc:97:15:0f:b9:77:7f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33c78d60-34eb-4fed-8e25-925b95a30c8e
        Validity
            Not Before: Feb 14 14:00:41 2026 GMT
            Not After : May 15 13:00:41 2026 GMT
        Subject: CN=f6a714b4-ac60-4477-be11-c797865bc199
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:5a:a9:28:0e:9c:2a:59:79:a7:fa:cf:a4:f2:
                    88:3a:94:fe:41:92:2c:75:04:6c:50:ab:51:af:0b:
                    bd:04:a2:6e:e2:11:b9:df:a1:20:f4:d5:9b:80:2e:
                    0d:44:12:c2:5f:74:e8:8a:ac:ee:3c:de:6b:c0:4a:
                    ec:8a:0c:1a:9f:6b:a2:09:a5:e7:24:49:cf:00:07:
                    99:37:1b:d5:a7:d7:c2:fb:c1:fd:b2:35:71:0c:fe:
                    ec:2b:5a:d4:9d:73:55:0a:9c:1f:55:b1:07:04:a8:
                    11:c1:62:05:66:03:5c:4c:2b:fa:3d:0f:17:39:67:
                    ca:4f:eb:b8:90:7d:fe:a0:e5:7e:96:c6:6f:bf:e6:
                    3e:c9:59:41:e9:6e:1c:fb:87:e9:59:4d:ec:fa:4f:
                    b4:19:45:90:21:57:37:8f:06:00:a7:66:40:fa:f8:
                    17:60:18:24:83:11:77:90:50:37:82:13:62:c2:a3:
                    fd:4f:2b:ce:f3:5a:0e:17:62:58:d4:35:01:d7:86:
                    1b:2e:d2:b5:38:28:29:49:05:21:54:b2:e9:86:bd:
                    1a:8f:7c:64:39:44:f7:7f:cf:b7:a0:87:1c:37:10:
                    b5:9f:18:e8:fe:1a:13:42:5d:e2:00:11:43:9e:53:
                    71:8f:ec:fc:30:bd:ac:12:b0:2f:ce:2c:cd:49:e6:
                    e6:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:B5:A0:4B:D5:9C:D1:29:70:E6:3F:B2:FD:B3:2A:15:2C:85:03:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/e604780b-4bf4-362f-9661-294a2090b35c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.crl

            X509v3 Authority Key Identifier:
                keyid:5F:65:25:B0:69:97:21:82:E6:E2:D3:91:46:77:BA:5C:33:D3:E0:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.173.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:4f:bb:33:2b:29:79:b4:c8:39:92:6b:a2:01:30:e3:d0:a8:
         39:3f:db:b8:09:26:5b:2e:81:1a:7c:02:20:c8:dd:be:83:83:
         9e:33:5a:46:5e:5d:08:85:b1:8b:7e:df:8d:80:e4:b6:40:5e:
         82:78:24:9b:d9:07:ec:09:8a:ed:ea:b3:89:f1:d5:a8:e6:4c:
         34:49:ba:d7:a0:80:86:ca:23:31:b0:7e:02:3f:b1:0b:09:ce:
         a1:61:56:23:d2:16:57:ce:16:42:40:21:ca:c2:c1:70:2f:ee:
         07:cf:c1:ea:e6:a6:28:b4:2a:c3:b6:e5:f1:db:bd:ed:d8:b7:
         0e:b8:43:5b:08:8a:83:a7:6b:2a:f4:cc:9f:67:9a:dc:dd:30:
         56:14:cf:a2:d6:f7:f2:9c:17:b3:6b:45:95:14:c2:27:20:91:
         d1:d5:66:a2:63:f1:ba:1c:38:e0:55:b4:e7:25:db:b0:22:c6:
         35:6f:96:e0:82:da:e0:39:b3:20:42:42:59:82:a1:a3:35:83:
         21:53:c8:9f:44:d6:b0:1a:cd:db:09:73:71:52:25:51:ab:15:
         f5:0f:d0:b9:1d:45:12:8a:b2:90:9a:6b:dc:dd:31:da:9c:cf:
         66:04:64:15:eb:50:28:8f:ff:df:d2:27:35:16:ac:4f:50:62:
         09:06:8f:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:00:32 2026 by rpki-client