Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/987bdf9f-7000-4d71-b90f-a12e26fdce76/b2c8219a-3f13-3fb9-b005-012508a27db0.roa
File:                     b2c8219a-3f13-3fb9-b005-012508a27db0.roa (raw, json)
Hash identifier:          //xn36jWn27IUeC2Qm8gb59SYocDOizDhUU9kmbIksI=
Subject key identifier:   D9:D1:60:0F:D6:A8:A7:FB:25:B4:F4:F6:41:C9:FF:03:AC:85:70:BF
Certificate issuer:       /CN=987bdf9f-7000-4d71-b90f-a12e26fdce76
Certificate serial:       010D0C9F4328584CEFF247099B86EA9F0F1A5680
Authority key identifier: B5:BF:B6:1F:E4:C5:06:AA:37:BB:61:06:74:6F:A7:9E:F0:62:0F:2E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/987bdf9f-7000-4d71-b90f-a12e26fdce76.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/987bdf9f-7000-4d71-b90f-a12e26fdce76/b2c8219a-3f13-3fb9-b005-012508a27db0.roa
Signing time:             Sat 21 Feb 2026 14:00:41 +0000
ROA not before:           Sat 21 Feb 2026 14:00:41 +0000
ROA not after:            Fri 22 May 2026 13:00:41 +0000
asID:                     8796
IP address blocks:        23.185.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/987bdf9f-7000-4d71-b90f-a12e26fdce76/987bdf9f-7000-4d71-b90f-a12e26fdce76.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/987bdf9f-7000-4d71-b90f-a12e26fdce76/987bdf9f-7000-4d71-b90f-a12e26fdce76.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/987bdf9f-7000-4d71-b90f-a12e26fdce76.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ef:f2:47:09:9b:86:ea:9f:0f:1a:56:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=987bdf9f-7000-4d71-b90f-a12e26fdce76
        Validity
            Not Before: Feb 21 14:00:41 2026 GMT
            Not After : May 22 13:00:41 2026 GMT
        Subject: CN=eb0335be-a588-4d9f-8b9d-313e69203816
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:f4:7f:a3:0a:96:14:76:39:c8:8d:c9:8e:5d:
                    ca:63:49:b8:aa:0a:ff:f4:54:5e:98:53:49:6b:b0:
                    57:da:7f:72:6a:31:d5:3d:6d:7f:eb:47:4e:58:bb:
                    04:cc:aa:57:29:0b:98:bf:aa:f9:ab:a8:ed:35:4b:
                    f0:89:ae:03:50:b4:53:54:f9:cd:fd:3c:bd:07:f8:
                    de:90:8f:8c:cf:75:38:cd:a1:84:0b:0d:f5:06:ab:
                    fd:66:60:a8:ab:8c:b9:17:4a:79:42:3a:45:dc:14:
                    23:18:6e:63:79:11:63:57:20:a2:db:a5:62:6f:14:
                    58:fb:c8:74:75:3c:75:b1:f1:bc:11:a3:4a:79:b4:
                    86:c9:08:c5:9e:8a:de:87:f7:05:9a:e0:00:6b:0b:
                    00:c7:1e:c6:af:6d:b0:96:fa:2e:51:19:e0:bc:ef:
                    58:27:38:1f:44:27:9f:06:cf:36:3c:7c:37:5b:1c:
                    2c:2e:cf:a9:fb:df:7e:9a:47:ec:b2:70:d1:d0:89:
                    92:ab:ec:f2:a5:c7:90:03:f2:b3:1d:f0:ca:e1:dd:
                    6a:65:d0:3a:c7:99:84:1e:55:eb:f2:e9:1d:e8:1b:
                    e3:7d:89:04:b7:28:16:77:a9:4d:73:f7:76:19:be:
                    5d:e1:ea:cd:15:a1:58:6e:31:25:e8:5d:35:c5:10:
                    ce:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:D1:60:0F:D6:A8:A7:FB:25:B4:F4:F6:41:C9:FF:03:AC:85:70:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/987bdf9f-7000-4d71-b90f-a12e26fdce76/b2c8219a-3f13-3fb9-b005-012508a27db0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/987bdf9f-7000-4d71-b90f-a12e26fdce76/987bdf9f-7000-4d71-b90f-a12e26fdce76.crl

            X509v3 Authority Key Identifier:
                keyid:B5:BF:B6:1F:E4:C5:06:AA:37:BB:61:06:74:6F:A7:9E:F0:62:0F:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/987bdf9f-7000-4d71-b90f-a12e26fdce76.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.185.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:ef:a6:cc:50:6d:dc:d7:f5:9d:17:d9:91:16:45:c1:29:37:
         59:7d:29:4d:7e:ee:ed:cf:4b:cd:74:a2:ce:70:c1:14:f6:60:
         bf:66:78:ea:5c:f2:0e:68:b0:cd:be:41:f5:33:03:08:72:bc:
         b2:c5:f0:1f:59:f6:1f:48:b2:af:fd:8e:e7:7f:02:ae:10:05:
         cb:0f:c5:85:eb:b9:9c:f7:89:7c:8c:fc:6e:07:f1:e9:46:a5:
         a5:f8:84:c0:51:8a:67:5a:dd:96:ad:1b:0e:01:d0:28:43:83:
         26:34:af:4b:1b:12:c9:4c:1e:bb:82:b4:70:4a:31:5b:cb:e5:
         56:8e:e1:ed:ab:c5:65:73:fe:f9:69:4c:cd:76:4b:c2:42:9b:
         8e:c1:9f:7b:a0:00:a0:cd:95:62:49:d4:84:f8:d8:b2:fe:c4:
         2e:e5:5d:81:21:e0:4c:15:98:28:25:01:f2:cf:b0:89:c5:99:
         a9:3b:ef:85:41:86:9f:0d:32:2c:ce:80:55:f5:f8:57:15:d7:
         b6:60:ee:18:70:fa:6d:9a:e1:26:18:d6:63:00:94:20:17:7f:
         6d:2a:5a:39:85:27:36:84:92:1c:c1:4b:45:2e:d9:80:4f:72:
         fe:ba:a0:c7:5d:1b:bf:3c:83:71:8b:43:ad:54:b3:d7:7c:1b:
         62:88:52:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:08:09 2026 by rpki-client