Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b0a66ebc-132f-425f-af00-116407f972f2/e8fd9bf1-b153-3f4c-b50f-9862416825c3.roa
File:                     e8fd9bf1-b153-3f4c-b50f-9862416825c3.roa (raw, json)
Hash identifier:          Yh9BJeEkULwO3xzTtixj6Rq8F4dojJwrx93j8yNAiPI=
Subject key identifier:   18:98:17:16:80:3A:4C:29:93:6C:8A:49:28:D2:17:08:20:23:80:E6
Certificate issuer:       /CN=b0a66ebc-132f-425f-af00-116407f972f2
Certificate serial:       010D0C9F4328584CD6D21CC444AC0874C96A5CE0
Authority key identifier: BC:73:CF:4B:7F:38:67:3E:1F:91:BC:D5:AF:EB:06:56:87:C4:60:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b0a66ebc-132f-425f-af00-116407f972f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b0a66ebc-132f-425f-af00-116407f972f2/e8fd9bf1-b153-3f4c-b50f-9862416825c3.roa
Signing time:             Thu 12 Feb 2026 14:00:40 +0000
ROA not before:           Thu 12 Feb 2026 14:00:40 +0000
ROA not after:            Wed 13 May 2026 13:00:40 +0000
asID:                     174
IP address blocks:        23.144.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b0a66ebc-132f-425f-af00-116407f972f2/b0a66ebc-132f-425f-af00-116407f972f2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b0a66ebc-132f-425f-af00-116407f972f2/b0a66ebc-132f-425f-af00-116407f972f2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b0a66ebc-132f-425f-af00-116407f972f2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d6:d2:1c:c4:44:ac:08:74:c9:6a:5c:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0a66ebc-132f-425f-af00-116407f972f2
        Validity
            Not Before: Feb 12 14:00:40 2026 GMT
            Not After : May 13 13:00:40 2026 GMT
        Subject: CN=002cce68-cdc7-4d32-b669-d2e6623c90ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:d1:a9:da:ae:54:0e:a4:a7:f1:91:30:41:fe:
                    c5:63:e0:22:cf:47:66:2a:82:d5:6b:85:dd:9c:79:
                    be:f6:47:88:28:93:a2:37:ad:c2:2a:df:52:28:83:
                    a5:01:36:b9:f5:5e:88:90:8a:73:3f:19:ef:b7:3f:
                    6a:f2:ae:3f:88:74:a5:8e:9e:a5:53:81:93:40:30:
                    a4:0b:b4:ba:31:6a:a7:2c:bf:28:c1:0d:a3:ea:45:
                    2a:2c:a3:55:74:7e:34:ce:c4:07:f1:15:e0:85:e4:
                    89:3b:a9:2f:e9:f0:55:b1:1c:bc:c9:eb:db:81:9d:
                    6c:38:8e:d8:8c:cb:8c:1d:52:e9:13:a8:7a:30:f0:
                    d6:e4:e7:69:95:68:2a:1a:70:40:42:36:02:1c:40:
                    24:f9:4e:db:49:d3:9d:ca:2f:fe:cc:b0:21:1b:a8:
                    af:6f:08:15:fb:3c:33:e9:71:be:c5:94:50:9c:f3:
                    34:f5:27:e3:ab:d3:72:c5:bf:0b:d6:41:b4:75:d5:
                    13:a7:22:14:d6:1e:ee:0b:5b:1b:12:c3:8b:7d:07:
                    51:b3:c3:65:6f:3c:85:32:98:ed:20:7c:e9:68:20:
                    48:13:55:8e:e8:8b:ab:c0:a7:22:2d:fe:56:bc:39:
                    40:10:3d:0b:cb:3c:90:2b:1b:4c:04:8f:d6:94:d0:
                    df:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:98:17:16:80:3A:4C:29:93:6C:8A:49:28:D2:17:08:20:23:80:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b0a66ebc-132f-425f-af00-116407f972f2/e8fd9bf1-b153-3f4c-b50f-9862416825c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b0a66ebc-132f-425f-af00-116407f972f2/b0a66ebc-132f-425f-af00-116407f972f2.crl

            X509v3 Authority Key Identifier:
                keyid:BC:73:CF:4B:7F:38:67:3E:1F:91:BC:D5:AF:EB:06:56:87:C4:60:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b0a66ebc-132f-425f-af00-116407f972f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.144.28.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:c0:c9:1c:af:fa:27:6a:12:ed:b5:f0:a5:09:c0:52:96:96:
         69:bc:cc:36:d2:14:11:c5:57:ec:e7:0a:fa:3d:03:ca:79:18:
         4e:f7:e1:5a:07:d4:85:40:cf:0d:0e:d2:c1:a7:c1:8a:e9:c9:
         b2:5a:fd:b2:18:54:0e:fe:0b:0e:b0:49:b6:52:9f:d9:5b:88:
         c4:1e:77:d1:f1:22:8d:68:e4:0f:9d:5f:50:c8:5b:58:37:2e:
         bb:d6:c6:3c:a4:c6:95:df:30:6f:b5:8f:a5:32:11:40:9b:25:
         59:4a:20:11:e1:1c:26:17:c5:20:43:ce:96:c1:9a:36:47:8b:
         3f:5d:09:c5:19:54:94:a2:18:62:d2:cd:96:bc:11:ff:e7:88:
         bc:49:8b:95:08:d7:f6:8f:b6:29:af:55:b9:ea:ca:8a:92:b2:
         b3:e7:b2:10:39:b1:3a:c8:61:e8:d5:9e:d1:f0:74:8c:8a:39:
         88:47:73:20:a5:28:4d:a7:34:82:6f:91:00:0d:1f:ef:6b:1a:
         0f:03:7f:09:b6:9e:86:ff:97:7c:05:d6:d6:bf:c9:37:fe:70:
         db:7e:d3:b9:db:8a:6a:d0:4b:85:00:74:f0:7d:39:95:4f:78:
         b8:0d:45:18:5e:f9:1b:69:b7:da:91:a0:86:4e:03:8f:4e:51:
         1a:aa:76:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:48:45 2026 by rpki-client