Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a9bcb725-be6c-4abe-9005-26137d096c13/b60719ee-2329-35e4-8b41-46d500ea1884.roa
File:                     b60719ee-2329-35e4-8b41-46d500ea1884.roa (raw, json)
Hash identifier:          47YMRroZc8+alSF0FEQEY43sefD6PNw5UfQhyG6Ft68=
Subject key identifier:   F0:F6:FD:7F:B6:EA:9D:AB:19:CC:67:44:10:8A:20:4A:6A:23:2F:58
Certificate issuer:       /CN=a9bcb725-be6c-4abe-9005-26137d096c13
Certificate serial:       010D0C9F4328584CD174EFA16FD22862EB327200
Authority key identifier: E9:62:02:EF:AC:83:FE:7E:9A:D8:E1:33:15:7D:35:CE:D9:02:E9:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a9bcb725-be6c-4abe-9005-26137d096c13.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a9bcb725-be6c-4abe-9005-26137d096c13/b60719ee-2329-35e4-8b41-46d500ea1884.roa
Signing time:             Tue 10 Feb 2026 15:54:12 +0000
ROA not before:           Tue 10 Feb 2026 15:54:12 +0000
ROA not after:            Mon 11 May 2026 14:54:12 +0000
asID:                     214483
IP address blocks:        23.174.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a9bcb725-be6c-4abe-9005-26137d096c13/a9bcb725-be6c-4abe-9005-26137d096c13.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a9bcb725-be6c-4abe-9005-26137d096c13/a9bcb725-be6c-4abe-9005-26137d096c13.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a9bcb725-be6c-4abe-9005-26137d096c13.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d1:74:ef:a1:6f:d2:28:62:eb:32:72:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9bcb725-be6c-4abe-9005-26137d096c13
        Validity
            Not Before: Feb 10 15:54:12 2026 GMT
            Not After : May 11 14:54:12 2026 GMT
        Subject: CN=04b4afc4-77de-4a73-b323-e8974ceaa7bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e3:d0:d3:5b:7d:6c:a1:04:96:2a:84:c6:35:
                    21:a3:13:9f:34:8e:7c:fe:f9:88:e6:4b:75:3e:0d:
                    cb:df:d1:19:4e:e9:40:c5:0a:e8:72:26:a2:99:1f:
                    f3:20:65:c4:2e:6b:83:35:25:4c:3c:4d:16:92:7f:
                    47:b0:e6:0b:86:56:b7:54:4f:df:49:da:9a:e7:c4:
                    f6:86:7e:33:4e:45:f9:2c:2b:ac:48:23:1b:7e:76:
                    1d:ae:e2:ed:0b:a5:b7:07:ed:bd:5b:1f:1f:71:0a:
                    85:a2:6d:1a:16:5c:dd:dd:f0:96:ad:38:b9:58:61:
                    ee:f9:15:8c:d3:c8:ed:fc:7d:3b:41:40:dc:cf:f4:
                    77:5c:ab:02:53:9d:95:04:fb:15:20:68:8d:2a:ad:
                    a6:cf:5c:de:4c:2a:23:1e:3a:03:ab:c3:09:22:eb:
                    97:07:99:01:b1:4c:24:d8:e2:ae:5b:fd:70:43:8d:
                    d4:55:ff:ee:91:73:10:c3:05:cc:e1:55:8e:d2:d5:
                    38:3e:2b:69:98:b3:99:9b:01:13:a2:77:f0:57:a5:
                    dd:53:8f:d9:f6:63:d0:de:19:7e:8d:29:58:16:72:
                    75:fb:1b:a4:8c:3f:a7:ec:ae:ee:31:82:6b:3e:8d:
                    fd:a1:ba:0a:a7:77:f1:a3:f7:28:ee:46:80:90:53:
                    63:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:F6:FD:7F:B6:EA:9D:AB:19:CC:67:44:10:8A:20:4A:6A:23:2F:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a9bcb725-be6c-4abe-9005-26137d096c13/b60719ee-2329-35e4-8b41-46d500ea1884.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a9bcb725-be6c-4abe-9005-26137d096c13/a9bcb725-be6c-4abe-9005-26137d096c13.crl

            X509v3 Authority Key Identifier:
                keyid:E9:62:02:EF:AC:83:FE:7E:9A:D8:E1:33:15:7D:35:CE:D9:02:E9:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a9bcb725-be6c-4abe-9005-26137d096c13.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.174.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:40:bb:94:9b:7c:53:d0:1b:5c:87:1d:47:f0:b0:63:33:bb:
         e3:d2:a7:73:39:64:b0:8b:43:c1:be:1e:f7:77:9b:69:a1:0e:
         51:55:39:28:4d:b1:cd:cd:75:36:c6:9a:16:fb:3f:88:22:9c:
         7b:ee:1f:17:11:6b:fd:58:30:4e:87:fd:60:2a:06:54:73:0b:
         f8:fa:8d:8d:9c:af:07:58:5f:e1:07:4b:3b:cd:dd:7c:d4:db:
         af:5f:24:33:36:d7:04:e0:a1:57:7e:c9:d0:ac:29:f1:f4:d1:
         97:f8:ad:f0:91:ef:e0:d4:fb:49:01:36:5a:1b:9f:5e:20:14:
         5b:0f:48:1c:b5:d7:9b:00:16:ca:56:74:b7:b3:47:00:76:3f:
         73:82:9a:32:2a:f7:9e:23:80:28:98:9c:15:7b:fe:77:36:eb:
         e0:91:ff:2f:08:3f:74:9b:ca:2a:ed:0b:04:81:d6:6e:1c:2f:
         3c:41:2e:e8:ad:5f:32:f4:9c:37:d1:a1:90:d7:ff:5c:05:f1:
         9a:42:33:dc:55:ed:69:0a:04:5d:e6:2c:16:d1:9c:44:c6:b5:
         25:2c:01:30:9d:2f:e5:f8:1f:c7:f9:cd:32:3b:1a:73:0e:e6:
         a1:12:b3:eb:b1:29:6d:51:af:45:92:86:6f:48:f6:8b:c3:af:
         76:a9:56:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:01:17 2026 by rpki-client