Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4632e5fd-374e-430f-9af3-308c1ec6c72d/69de081a-dc56-3065-ae89-e1a8a5abdb2f.roa
File:                     69de081a-dc56-3065-ae89-e1a8a5abdb2f.roa (raw, json)
Hash identifier:          h3Fkvm7yuXaaR+pSrOeP0mOa2TbFLgrXrvI7+CX90ew=
Subject key identifier:   28:15:E7:BA:25:AA:76:63:02:A3:14:00:EB:17:DE:FD:12:12:E6:73
Certificate issuer:       /CN=4632e5fd-374e-430f-9af3-308c1ec6c72d
Certificate serial:       010D0C9F4328584CF4222DC6FC734B0822490D80
Authority key identifier: 8C:DC:E9:8C:D0:6A:A4:EE:96:EB:AE:99:01:C5:47:9D:8B:AE:0F:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4632e5fd-374e-430f-9af3-308c1ec6c72d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4632e5fd-374e-430f-9af3-308c1ec6c72d/69de081a-dc56-3065-ae89-e1a8a5abdb2f.roa
Signing time:             Mon 23 Feb 2026 02:00:31 +0000
ROA not before:           Mon 23 Feb 2026 02:00:31 +0000
ROA not after:            Sun 24 May 2026 01:00:31 +0000
asID:                     395261
IP address blocks:        23.155.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4632e5fd-374e-430f-9af3-308c1ec6c72d/4632e5fd-374e-430f-9af3-308c1ec6c72d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4632e5fd-374e-430f-9af3-308c1ec6c72d/4632e5fd-374e-430f-9af3-308c1ec6c72d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4632e5fd-374e-430f-9af3-308c1ec6c72d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f4:22:2d:c6:fc:73:4b:08:22:49:0d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4632e5fd-374e-430f-9af3-308c1ec6c72d
        Validity
            Not Before: Feb 23 02:00:31 2026 GMT
            Not After : May 24 01:00:31 2026 GMT
        Subject: CN=53a58eb3-b2b4-4084-9722-eb432576f299
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:06:6f:3c:35:bc:44:2e:f4:77:58:26:c2:45:
                    a1:61:44:f4:dc:b0:1f:2d:b1:11:82:32:3a:a2:f6:
                    c2:d9:81:70:50:26:f1:eb:67:bd:49:32:90:fc:67:
                    d8:79:e9:27:f4:70:dc:d4:76:22:a0:c9:29:79:c8:
                    81:1f:82:d6:9a:44:e0:29:a5:88:92:13:83:f6:82:
                    19:a7:2c:c0:7d:d9:4a:e1:f6:75:b5:20:70:41:d0:
                    d5:ea:fa:07:0f:ef:36:40:8f:90:28:d2:66:df:88:
                    40:e4:9f:f4:81:17:81:21:3a:bf:3f:4e:72:8b:7f:
                    f7:41:3c:ab:b5:0a:41:2d:7b:2b:d1:4e:cd:a4:39:
                    05:c2:49:32:7b:84:e2:1d:b4:57:36:0e:39:61:e4:
                    09:21:4b:da:ff:d0:be:6a:3c:f5:c2:d4:1a:7d:4d:
                    f2:d5:be:6e:3b:74:fe:a0:86:db:7d:ee:0f:82:ef:
                    0f:e2:b0:86:8f:a5:e4:9d:51:f9:b8:28:c2:50:3b:
                    97:1f:91:ec:0e:82:9d:78:c0:2e:2a:58:27:19:c8:
                    88:c6:af:59:8d:ed:d1:07:e1:49:1b:23:97:11:d1:
                    f3:68:23:e3:48:73:cc:e5:be:3d:58:ad:a8:a1:1f:
                    0b:6c:e1:fe:f4:4f:9c:00:0b:9f:21:c6:ef:9c:c3:
                    05:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:15:E7:BA:25:AA:76:63:02:A3:14:00:EB:17:DE:FD:12:12:E6:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4632e5fd-374e-430f-9af3-308c1ec6c72d/69de081a-dc56-3065-ae89-e1a8a5abdb2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4632e5fd-374e-430f-9af3-308c1ec6c72d/4632e5fd-374e-430f-9af3-308c1ec6c72d.crl

            X509v3 Authority Key Identifier:
                keyid:8C:DC:E9:8C:D0:6A:A4:EE:96:EB:AE:99:01:C5:47:9D:8B:AE:0F:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4632e5fd-374e-430f-9af3-308c1ec6c72d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.155.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:ed:6e:e1:4d:40:46:48:99:56:2c:bd:a9:fa:2c:fa:09:8d:
         b9:b4:6e:bb:ab:08:10:79:0b:fc:ea:b9:74:bd:d2:e3:09:43:
         d4:c0:7b:91:4d:45:2a:85:96:25:38:1c:1f:ba:7a:df:1b:bf:
         e3:99:15:70:1b:49:72:b2:b0:10:a7:64:2c:33:22:ca:59:7c:
         bd:3f:12:69:20:30:9b:f3:88:5b:76:6a:f2:3f:4e:4f:78:ca:
         9c:7a:48:e9:82:4e:f2:25:13:e2:a0:21:13:2e:55:81:bb:d6:
         52:74:57:bd:cc:aa:83:7d:c4:be:29:92:f8:b7:9f:c6:ea:10:
         fe:14:87:32:a5:d6:b7:20:28:14:48:bf:30:24:59:42:91:53:
         cd:56:74:fb:a3:de:8d:27:e6:42:f3:b8:cb:df:c0:5e:31:08:
         15:2b:52:9f:ff:78:ba:9a:50:0f:58:de:50:15:1e:ab:01:74:
         1d:83:ab:d5:07:69:19:fa:4a:1c:c2:5c:1f:da:cf:e4:a8:ed:
         96:4e:b2:c5:ad:1d:41:12:3d:81:b5:10:2b:ab:33:4d:a5:69:
         df:16:10:b1:3d:69:3d:e9:9f:7f:db:3e:a0:64:7b:4d:df:2e:
         cc:65:4f:e7:5b:55:38:18:d0:cf:95:ec:58:e1:43:01:45:a0:
         fb:17:c2:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:49:38 2026 by rpki-client