Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bde88de3-fb0a-323e-909b-ef203e02fdd3.roa
File:                     bde88de3-fb0a-323e-909b-ef203e02fdd3.roa (raw, json)
Hash identifier:          6PA7ci456Q2Vl1LoBrbI2MCeD7gvlFy3f3L1TfdlrB8=
Subject key identifier:   A5:A9:AA:7E:18:BA:8E:A5:F2:3F:17:32:12:95:9B:E2:92:E0:A8:49
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584CDC67EDAC640F47C9CCA88D40
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bde88de3-fb0a-323e-909b-ef203e02fdd3.roa
Signing time:             Sat 14 Feb 2026 14:00:41 +0000
ROA not before:           Sat 14 Feb 2026 14:00:41 +0000
ROA not after:            Fri 15 May 2026 13:00:41 +0000
asID:                     22773
IP address blocks:        24.251.194.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:dc:67:ed:ac:64:0f:47:c9:cc:a8:8d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Feb 14 14:00:41 2026 GMT
            Not After : May 15 13:00:41 2026 GMT
        Subject: CN=194e8ace-4365-47f2-a221-12263d5d8cb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:7f:c2:06:a2:e0:06:82:c2:7d:74:1d:3f:d9:
                    a1:e4:15:40:b4:eb:dd:16:6c:c2:7d:9a:2a:3a:e6:
                    aa:f6:66:be:cf:b8:3e:90:c9:e6:4f:f1:cb:89:4d:
                    95:70:83:4d:9e:97:2c:14:1e:24:c9:56:8f:16:54:
                    32:79:c0:7c:e6:7b:9d:d5:3b:c3:9e:19:98:b1:fb:
                    73:ba:68:e1:ae:09:bc:71:d2:e7:f1:97:f5:bb:6c:
                    92:ca:bc:c7:49:f8:42:f9:80:8e:e5:8e:56:81:89:
                    ba:de:46:ac:13:34:50:2e:b8:81:f5:0b:c4:ef:5c:
                    cc:c4:02:b0:27:14:bb:f4:9c:99:b4:de:76:a0:38:
                    56:bb:b0:42:81:40:5c:ac:b3:82:5e:da:bd:c8:6b:
                    71:cd:07:5a:51:7f:05:a2:22:08:b7:8b:d0:cf:1c:
                    54:6e:67:64:2d:7a:fa:47:7a:aa:5f:86:05:5e:62:
                    c7:50:42:29:3d:c8:a7:7a:ea:e0:58:19:4e:21:93:
                    bc:79:3b:73:03:d7:fa:7a:0e:86:52:8d:e6:64:2f:
                    e5:f9:48:6f:56:d5:cc:db:93:6c:1d:3b:69:ff:e5:
                    73:07:b6:19:95:d8:08:5b:3a:a5:cd:24:5a:92:06:
                    b2:4d:4a:9e:96:65:e6:5e:6e:59:68:f7:c2:7c:22:
                    35:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:A9:AA:7E:18:BA:8E:A5:F2:3F:17:32:12:95:9B:E2:92:E0:A8:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bde88de3-fb0a-323e-909b-ef203e02fdd3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.251.194.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:15:73:fd:1b:7b:da:e5:72:52:21:1f:a3:ba:4b:f9:f9:10:
         17:63:31:cb:2a:4c:8b:b7:c3:d9:06:49:28:05:a2:ca:a8:a6:
         d0:f3:13:81:69:b2:a7:cc:0c:91:18:7c:68:0c:0c:e9:f8:a6:
         b6:2a:da:f9:98:c7:15:4f:93:67:3d:ba:9f:42:d9:26:e8:19:
         00:a9:df:37:28:bc:b7:81:67:1e:69:c1:18:66:78:6a:4a:9b:
         4b:e7:e0:0d:b1:2b:e4:74:d0:18:0d:2b:c4:03:95:ee:74:85:
         ef:b8:b3:48:76:a8:b7:c0:2a:de:78:69:a8:53:b7:6a:99:d3:
         3c:b1:44:26:97:fe:45:f7:83:15:d9:a8:90:f6:da:f6:8e:e0:
         6d:6c:45:8b:8f:04:e2:30:46:a2:a0:0d:50:94:85:da:19:a8:
         ff:9b:3b:7b:e9:e4:df:04:7b:c6:59:3d:df:6a:8c:96:f3:df:
         e7:c3:5d:b0:62:99:cc:20:3b:63:1b:4f:54:0b:33:db:6f:00:
         4c:8e:35:2c:ef:8d:6f:a8:5a:99:e2:89:5a:49:ae:e1:e3:55:
         a7:28:b2:8e:45:b6:3b:4d:5f:99:0f:49:ef:9d:b4:ee:04:5c:
         a1:ba:1c:74:1a:c9:0b:5c:3d:c2:b6:93:76:a4:ce:ec:4e:28:
         03:75:c7:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:54:56 2026 by rpki-client