Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22d70b0d-ee22-49c2-b31d-a9e0de4374aa/febda8d1-f20b-30ce-a76a-4aba46bb9e73.roa
File:                     febda8d1-f20b-30ce-a76a-4aba46bb9e73.roa (raw, json)
Hash identifier:          KdsprhM+Htw6P9vH2RcrgseAD1s8EllTfqLWZqWpQVU=
Subject key identifier:   D4:01:38:E4:5A:CB:3D:DC:DA:B5:49:CE:F1:C0:AB:7E:34:49:84:38
Certificate issuer:       /CN=22d70b0d-ee22-49c2-b31d-a9e0de4374aa
Certificate serial:       010D0C9F4328584CF2BD099F8D223E22091DD500
Authority key identifier: 31:92:AA:07:3E:1F:A7:D4:35:02:61:8F:11:87:31:02:0F:3A:A5:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22d70b0d-ee22-49c2-b31d-a9e0de4374aa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22d70b0d-ee22-49c2-b31d-a9e0de4374aa/febda8d1-f20b-30ce-a76a-4aba46bb9e73.roa
Signing time:             Sun 22 Feb 2026 14:00:41 +0000
ROA not before:           Sun 22 Feb 2026 14:00:41 +0000
ROA not after:            Sat 23 May 2026 13:00:41 +0000
asID:                     9304
IP address blocks:        23.187.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22d70b0d-ee22-49c2-b31d-a9e0de4374aa/22d70b0d-ee22-49c2-b31d-a9e0de4374aa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22d70b0d-ee22-49c2-b31d-a9e0de4374aa/22d70b0d-ee22-49c2-b31d-a9e0de4374aa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22d70b0d-ee22-49c2-b31d-a9e0de4374aa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f2:bd:09:9f:8d:22:3e:22:09:1d:d5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22d70b0d-ee22-49c2-b31d-a9e0de4374aa
        Validity
            Not Before: Feb 22 14:00:41 2026 GMT
            Not After : May 23 13:00:41 2026 GMT
        Subject: CN=ac8c4be2-9348-477e-9e90-b8387f47027f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:80:ef:bc:3a:b3:7c:bb:3e:9e:1e:96:a4:0e:
                    a2:1f:06:a8:a5:d3:56:bd:aa:ff:cb:c5:c5:21:b2:
                    33:3d:48:30:25:0c:84:84:2f:79:27:41:ec:85:f0:
                    03:33:50:f7:d5:29:a0:a3:b4:5d:0e:71:7a:53:46:
                    19:db:b9:8c:0d:7b:db:58:d5:55:78:dc:5b:35:20:
                    a2:77:ad:d3:a1:f6:0e:8f:9b:49:85:28:cf:cd:4e:
                    db:e1:7c:4b:95:df:5f:57:76:49:c1:9f:ff:a4:d0:
                    1f:a9:a4:09:04:6a:7e:b3:5b:2b:18:c0:a7:06:91:
                    a8:f2:b6:d3:a2:a8:36:b3:91:16:b0:20:52:6d:30:
                    9b:99:c1:f2:0b:d4:5d:8d:35:9b:a4:ed:a4:01:4e:
                    56:f7:57:d4:5a:a1:5e:fb:e8:a8:e1:3d:41:86:84:
                    7c:cb:a9:e5:72:53:99:f5:f0:9c:3c:e0:17:35:ab:
                    de:db:42:b6:54:c8:c0:65:1b:9c:c4:1b:9b:09:69:
                    35:cc:ee:1f:a2:be:df:c2:cb:11:b5:19:3e:32:ca:
                    c8:3f:9a:88:f5:e9:43:eb:32:c6:13:f3:02:c0:15:
                    21:4d:1a:ed:56:5e:5a:20:07:aa:3e:a5:86:66:b5:
                    39:9b:68:65:c4:ba:b1:8b:5b:3b:d3:ff:0f:f4:7b:
                    ab:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:01:38:E4:5A:CB:3D:DC:DA:B5:49:CE:F1:C0:AB:7E:34:49:84:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22d70b0d-ee22-49c2-b31d-a9e0de4374aa/febda8d1-f20b-30ce-a76a-4aba46bb9e73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22d70b0d-ee22-49c2-b31d-a9e0de4374aa/22d70b0d-ee22-49c2-b31d-a9e0de4374aa.crl

            X509v3 Authority Key Identifier:
                keyid:31:92:AA:07:3E:1F:A7:D4:35:02:61:8F:11:87:31:02:0F:3A:A5:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22d70b0d-ee22-49c2-b31d-a9e0de4374aa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.187.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:58:c9:4f:42:15:af:5b:0b:08:fd:22:17:bb:9f:b9:b4:ca:
         c3:bf:7a:84:6d:a7:63:1d:36:af:f4:e5:b2:20:9d:56:2f:8b:
         6e:29:94:73:ad:03:b0:73:91:8b:a1:ad:f9:99:44:b3:52:ac:
         c6:20:88:75:d5:7c:3b:34:39:8c:f4:ff:1e:92:3b:81:14:d9:
         71:0e:65:28:6c:bc:3b:5c:6e:51:62:c3:fd:60:78:92:05:d8:
         1c:04:8c:5d:be:2e:2e:7c:fc:9b:5f:33:80:a3:ae:fd:da:01:
         b4:91:cf:95:16:7c:f8:45:e1:28:e9:25:88:be:56:ac:3a:34:
         e6:06:28:7b:69:d0:e1:7f:98:5d:94:1c:64:22:b0:48:cf:7f:
         30:61:cf:0c:56:c8:78:f4:59:01:ef:5d:80:5e:cb:16:cd:38:
         8b:7a:1d:64:f2:36:33:44:4d:e1:d3:75:7d:09:d9:f9:c9:b5:
         ff:cc:7f:d2:a1:3d:b8:cb:aa:a3:04:d7:2d:6a:42:c4:2e:aa:
         9b:8e:d9:64:2c:87:80:30:10:20:79:b8:22:30:a8:1d:35:6d:
         39:30:88:74:dc:34:df:09:56:b0:f4:43:64:b4:57:6c:33:f5:
         57:af:57:9e:2a:e0:f7:0d:f7:43:6a:69:4b:eb:cc:6d:0c:cd:
         f1:16:da:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:16:14 2026 by rpki-client