Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/8173a82e-409b-318c-b3f2-9691e512a24c.roa
File:                     8173a82e-409b-318c-b3f2-9691e512a24c.roa (raw, json)
Hash identifier:          HTIkI77S+crdkf9IQDtyLx8mjqak81WKmIdt8I4atEE=
Subject key identifier:   C1:E5:D4:FA:E2:1A:CF:35:37:58:99:4E:16:E0:BF:6A:05:B8:2D:05
Certificate issuer:       /CN=b2959336-6afe-411c-b979-dac0a693f8c4
Certificate serial:       010D0C9F4328584CDF3276F8DD5F196EE84B4C00
Authority key identifier: 1C:52:30:32:FE:EB:5B:92:6D:5A:2E:35:E5:7C:80:3B:15:E0:32:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/8173a82e-409b-318c-b3f2-9691e512a24c.roa
Signing time:             Sun 15 Feb 2026 14:00:41 +0000
ROA not before:           Sun 15 Feb 2026 14:00:41 +0000
ROA not after:            Sat 16 May 2026 13:00:41 +0000
asID:                     11870
IP address blocks:        167.23.68.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:df:32:76:f8:dd:5f:19:6e:e8:4b:4c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2959336-6afe-411c-b979-dac0a693f8c4
        Validity
            Not Before: Feb 15 14:00:41 2026 GMT
            Not After : May 16 13:00:41 2026 GMT
        Subject: CN=e97bbea0-25f1-487d-927a-ca677ab26e3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:75:35:27:2e:f1:f8:b1:6e:ae:eb:d0:b7:bc:
                    96:53:d4:06:2c:84:bd:e7:fb:83:d5:af:48:0b:96:
                    0f:6e:4e:51:5f:8b:55:b9:8e:56:41:a3:38:ba:c5:
                    e2:09:24:48:36:34:96:46:96:80:f0:92:94:ca:65:
                    b6:28:5a:64:fd:3e:18:31:89:80:e4:51:28:73:20:
                    73:9b:90:71:41:47:aa:e7:75:93:15:04:e0:c9:d8:
                    cd:3d:34:5a:3a:34:de:5f:c4:5a:1b:51:43:76:94:
                    66:3d:a8:a2:96:83:28:c1:52:57:1b:55:92:bc:1c:
                    c4:0e:96:a2:ab:5e:85:e3:46:60:68:9f:b3:56:7f:
                    2c:9f:4a:28:1c:76:4d:2a:42:38:29:34:f7:9b:fb:
                    c5:42:de:18:9d:06:df:2d:4c:cb:37:bc:8b:8e:2d:
                    32:62:19:29:bc:eb:de:22:6d:99:ff:02:59:aa:7f:
                    d3:2e:e0:0f:95:96:ff:aa:21:4e:cb:d5:d3:c1:82:
                    62:ec:bb:1c:79:f1:43:36:f2:3b:a8:9d:a2:06:47:
                    2b:60:31:cf:14:b2:6d:2a:88:d8:23:d4:ad:ff:42:
                    2b:f0:5d:e8:d5:5b:58:0b:ad:c7:74:2c:bb:f7:0a:
                    69:e3:dc:19:25:30:1a:93:3a:00:92:c6:e0:d1:50:
                    88:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:E5:D4:FA:E2:1A:CF:35:37:58:99:4E:16:E0:BF:6A:05:B8:2D:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/8173a82e-409b-318c-b3f2-9691e512a24c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.crl

            X509v3 Authority Key Identifier:
                keyid:1C:52:30:32:FE:EB:5B:92:6D:5A:2E:35:E5:7C:80:3B:15:E0:32:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.23.68.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:52:69:11:eb:a7:6b:95:a1:10:9a:c2:d5:f5:06:5e:24:6e:
         6e:f3:f4:1f:ac:99:71:38:78:d3:7d:05:3f:50:e8:12:04:b2:
         87:e2:a5:49:54:b5:b1:e5:92:ad:65:24:97:bb:10:12:b8:be:
         3e:a8:3c:86:35:0b:38:2f:6c:c4:28:7f:ce:ff:e3:c2:86:8c:
         4e:bb:c4:7a:27:c1:c3:71:a8:63:8d:23:a9:34:90:3b:da:86:
         6b:54:7b:7f:a3:27:93:0d:0d:86:e7:dc:62:69:9d:ca:d7:9f:
         6f:ef:52:cf:9b:23:ec:5d:aa:81:0f:e1:e1:99:63:e2:fe:ac:
         47:29:cd:7a:32:70:0f:c3:62:b3:37:a2:53:a4:2a:ed:e0:01:
         35:23:68:99:97:a1:0c:c4:45:3c:7d:26:f7:b3:89:fa:57:e9:
         e2:99:fe:60:ec:47:84:36:6c:bf:6a:33:0b:1c:bc:cd:20:b4:
         6f:e9:b9:90:47:a7:3b:bf:83:9c:c0:6f:37:17:5b:45:72:4b:
         77:ab:3e:0e:04:bc:82:cc:0c:fd:a1:57:3f:00:55:15:5b:c2:
         0c:b1:c0:32:83:b5:a0:e5:41:e0:07:92:9e:dc:da:11:35:e4:
         3e:3f:14:2b:93:3b:7e:91:e3:ed:45:58:33:a8:74:e3:cf:df:
         9e:32:70:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:53:45 2026 by rpki-client