Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2c9dc640-2f2e-4d96-b672-187e81d3d4ff/075439ad-b463-39da-bd19-5d02bddea01e.roa
File:                     075439ad-b463-39da-bd19-5d02bddea01e.roa (raw, json)
Hash identifier:          R0nheclzR6u3c89QxAd6X6TFkBfSwOGxwpub06ezECs=
Subject key identifier:   99:2C:8F:E8:FF:E5:99:5A:BA:53:23:A1:8D:B7:C7:1B:6D:2D:5E:0A
Certificate issuer:       /CN=2c9dc640-2f2e-4d96-b672-187e81d3d4ff
Certificate serial:       010D0C9F4328584CCD0C99ABA0534FB496783980
Authority key identifier: 8F:31:9A:8C:B7:13:DC:7B:1B:DB:6D:6A:B3:69:24:8E:B0:0C:09:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2c9dc640-2f2e-4d96-b672-187e81d3d4ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2c9dc640-2f2e-4d96-b672-187e81d3d4ff/075439ad-b463-39da-bd19-5d02bddea01e.roa
Signing time:             Mon 09 Feb 2026 02:00:31 +0000
ROA not before:           Mon 09 Feb 2026 02:00:31 +0000
ROA not after:            Sun 10 May 2026 01:00:31 +0000
asID:                     212524
IP address blocks:        23.155.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2c9dc640-2f2e-4d96-b672-187e81d3d4ff/2c9dc640-2f2e-4d96-b672-187e81d3d4ff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2c9dc640-2f2e-4d96-b672-187e81d3d4ff/2c9dc640-2f2e-4d96-b672-187e81d3d4ff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2c9dc640-2f2e-4d96-b672-187e81d3d4ff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:cd:0c:99:ab:a0:53:4f:b4:96:78:39:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c9dc640-2f2e-4d96-b672-187e81d3d4ff
        Validity
            Not Before: Feb  9 02:00:31 2026 GMT
            Not After : May 10 01:00:31 2026 GMT
        Subject: CN=ccda2828-1f0e-4991-8fde-594bdd8016c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:5b:84:68:2c:d9:ff:5d:fc:9a:24:82:71:58:
                    0b:95:a1:53:48:7e:df:19:7b:8a:e5:cc:a2:b5:88:
                    ce:ee:f2:e2:d2:a5:40:f0:5e:55:2f:ad:2f:40:6c:
                    bb:b3:24:1f:33:c3:2e:26:7c:7d:5a:c2:52:4e:88:
                    80:f1:0c:0f:5b:88:c9:ca:89:bc:a7:b2:1c:a9:e6:
                    1d:15:b7:f4:cd:a7:05:72:08:67:d8:77:21:9c:b7:
                    f7:78:b0:5f:67:09:12:d4:25:fd:8d:e8:e5:a3:ce:
                    5b:1e:67:bf:f8:e6:7b:89:87:4f:4b:bc:b8:33:e6:
                    22:e1:fd:a9:72:6c:ec:74:96:00:11:10:79:31:15:
                    a0:db:fd:44:f7:b2:1f:6c:58:cf:24:5e:99:f8:e8:
                    b2:9a:1f:1e:cf:bd:56:48:7a:7b:5c:9a:dd:e8:0a:
                    45:2c:70:c8:fc:f8:7e:c9:27:ef:f4:fb:e9:16:73:
                    26:b2:1b:c2:a7:ed:13:48:99:ca:c1:81:0a:94:7b:
                    0c:16:01:a6:1b:05:d0:cd:0f:84:25:a0:34:2c:05:
                    94:ca:5f:e3:c5:44:91:d6:12:ed:18:ba:38:c9:e8:
                    db:16:64:fc:52:4e:3b:0a:7d:08:b9:26:09:48:33:
                    b6:eb:14:5b:26:c5:a8:a1:72:14:99:b5:42:a7:87:
                    14:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:2C:8F:E8:FF:E5:99:5A:BA:53:23:A1:8D:B7:C7:1B:6D:2D:5E:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2c9dc640-2f2e-4d96-b672-187e81d3d4ff/075439ad-b463-39da-bd19-5d02bddea01e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2c9dc640-2f2e-4d96-b672-187e81d3d4ff/2c9dc640-2f2e-4d96-b672-187e81d3d4ff.crl

            X509v3 Authority Key Identifier:
                keyid:8F:31:9A:8C:B7:13:DC:7B:1B:DB:6D:6A:B3:69:24:8E:B0:0C:09:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2c9dc640-2f2e-4d96-b672-187e81d3d4ff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.155.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:f5:44:34:a8:8f:d8:1a:89:76:af:5a:94:39:6a:fe:53:fd:
         15:d9:36:dc:ff:e5:29:88:1b:60:a1:cf:d4:b9:c5:f4:44:c8:
         ad:8a:e6:ba:55:22:35:40:40:46:d7:68:ad:47:95:a8:5d:90:
         46:f4:52:68:ff:91:1b:f3:81:9d:29:1a:1b:76:ae:99:a6:1d:
         dc:65:04:45:23:5b:7d:87:67:15:57:54:be:89:53:e7:47:8e:
         0c:eb:8c:b8:86:22:e6:b7:fd:74:f5:99:0b:74:91:0e:75:3c:
         0e:e1:d4:13:8b:61:3b:0f:3a:e8:0d:48:b2:83:0a:74:46:34:
         c0:ae:a4:c9:b8:e8:2c:de:60:58:8d:e6:9b:39:11:9b:1c:8f:
         5e:58:04:17:3d:35:42:1d:51:b7:1b:fa:2a:50:28:fb:71:4a:
         91:d7:7a:37:d0:c8:9f:9e:97:85:89:24:ad:16:57:8a:5f:ea:
         c8:6d:64:70:80:30:ef:bd:f0:ba:06:cf:8c:3c:c1:fc:c1:4d:
         2a:1c:64:8b:e9:6c:66:c0:ec:08:73:04:92:3f:03:ae:75:e1:
         c5:a0:f4:b2:35:e0:dd:3f:0b:b1:43:f0:6e:86:c4:af:60:cc:
         16:a3:6d:64:c4:83:5d:99:16:9f:c3:eb:fa:16:b6:70:21:f7:
         37:3d:57:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:52:43 2026 by rpki-client