Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/74bdcdb1-ade3-4be9-818b-4809959ddfcc/4ad5af7c-521b-35a5-bbb6-15cea91f2fe8.roa
File:                     4ad5af7c-521b-35a5-bbb6-15cea91f2fe8.roa (raw, json)
Hash identifier:          8UfXv76V1w+lv+Cul2bzXzZdgUaYlQ9r+mjhfTRq6Iw=
Subject key identifier:   05:44:17:1F:5E:A2:4A:F5:EE:9D:E9:A5:42:4E:48:1A:85:70:1C:7C
Certificate issuer:       /CN=74bdcdb1-ade3-4be9-818b-4809959ddfcc
Certificate serial:       010D0C9F4328584CCFD743F2C21FA3B4A1307880
Authority key identifier: 1C:A2:9E:F3:A1:6B:AC:78:B0:93:45:1A:15:A0:36:2D:89:9C:02:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/74bdcdb1-ade3-4be9-818b-4809959ddfcc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/74bdcdb1-ade3-4be9-818b-4809959ddfcc/4ad5af7c-521b-35a5-bbb6-15cea91f2fe8.roa
Signing time:             Tue 10 Feb 2026 02:00:31 +0000
ROA not before:           Tue 10 Feb 2026 02:00:31 +0000
ROA not after:            Mon 11 May 2026 01:00:31 +0000
asID:                     400734
IP address blocks:        23.172.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/74bdcdb1-ade3-4be9-818b-4809959ddfcc/74bdcdb1-ade3-4be9-818b-4809959ddfcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/74bdcdb1-ade3-4be9-818b-4809959ddfcc/74bdcdb1-ade3-4be9-818b-4809959ddfcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/74bdcdb1-ade3-4be9-818b-4809959ddfcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:cf:d7:43:f2:c2:1f:a3:b4:a1:30:78:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74bdcdb1-ade3-4be9-818b-4809959ddfcc
        Validity
            Not Before: Feb 10 02:00:31 2026 GMT
            Not After : May 11 01:00:31 2026 GMT
        Subject: CN=5b5a5441-2d78-43eb-abdc-566f0dc1953f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:92:3b:33:19:d3:e3:96:6f:31:e2:68:fe:77:
                    58:11:a2:52:77:30:79:0d:15:84:82:2c:7c:ee:2e:
                    69:c5:d5:35:4d:1b:41:84:9a:5a:00:02:ff:43:c3:
                    cb:ba:40:56:47:23:eb:ba:fa:1a:1e:2f:17:2c:6d:
                    04:78:a9:f2:8f:e1:f4:33:97:ed:56:b5:cd:89:de:
                    49:9e:da:2a:55:8a:89:8f:e3:08:4d:ad:a5:9b:d9:
                    76:f5:0b:4d:14:6a:cf:8f:37:a9:f5:d9:30:be:74:
                    47:1f:b1:89:7a:45:ed:4a:84:ee:08:ea:ef:92:30:
                    db:80:ed:b9:f8:6e:8a:7a:0a:af:24:d4:b3:52:8d:
                    1b:07:af:62:2e:e9:eb:c4:45:36:cb:26:dc:3d:7e:
                    99:1b:17:20:5a:f7:f5:39:a3:dc:ea:15:97:f4:c5:
                    ec:23:6c:f2:6c:26:83:68:f7:1f:ac:2d:01:6d:88:
                    0c:99:d7:5b:db:61:a9:a4:de:c4:8c:ef:d0:ee:cd:
                    2b:1a:72:0e:86:3c:25:8d:6d:a7:ee:95:59:e3:02:
                    a6:af:96:99:bd:c7:93:83:a4:c7:90:fe:ed:aa:3f:
                    fb:f4:77:7a:b9:fb:23:44:93:24:8a:8b:0d:73:18:
                    2e:80:75:4f:7f:fc:27:98:ed:5c:37:7b:3e:61:84:
                    30:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:44:17:1F:5E:A2:4A:F5:EE:9D:E9:A5:42:4E:48:1A:85:70:1C:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/74bdcdb1-ade3-4be9-818b-4809959ddfcc/4ad5af7c-521b-35a5-bbb6-15cea91f2fe8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/74bdcdb1-ade3-4be9-818b-4809959ddfcc/74bdcdb1-ade3-4be9-818b-4809959ddfcc.crl

            X509v3 Authority Key Identifier:
                keyid:1C:A2:9E:F3:A1:6B:AC:78:B0:93:45:1A:15:A0:36:2D:89:9C:02:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/74bdcdb1-ade3-4be9-818b-4809959ddfcc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.172.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:61:a6:4a:74:77:a9:04:dc:f8:82:41:1f:3f:07:f2:87:63:
         b2:61:f0:f7:20:6e:49:f2:79:e8:e6:da:61:2e:37:f9:b6:fc:
         24:3b:47:46:32:7e:8d:a8:44:bb:a9:22:9d:6a:ae:5b:1f:cc:
         c6:a7:f9:94:43:c4:bf:f8:cc:84:04:e0:07:a2:93:f4:62:90:
         44:11:21:d6:41:73:38:d4:3e:95:c2:9d:ff:a6:58:bb:07:e0:
         e3:41:c7:87:8b:87:2d:19:d2:49:09:3e:29:8d:1d:c0:2b:98:
         6f:77:0d:b7:c0:ab:0b:38:58:ea:cd:71:7a:b4:a3:77:0b:ab:
         d8:b8:2c:f0:7d:0b:24:cd:27:8a:b3:88:9f:c9:16:aa:eb:e8:
         06:a9:46:33:ed:83:18:dd:66:ee:49:b2:71:62:be:cc:75:b2:
         60:76:ce:76:55:f0:a3:f3:e8:d0:56:66:c7:70:2e:2a:d5:b8:
         96:01:3a:c8:44:4d:92:21:6e:1e:cb:6b:25:41:a4:e7:e5:bb:
         35:1e:76:df:28:9d:8d:a9:c6:c3:8f:18:a7:ca:6e:d1:c1:eb:
         6d:71:a3:4d:cc:fb:d0:23:7b:08:30:fc:7f:21:16:8d:8d:52:
         96:b8:d3:90:66:e4:fa:c8:d8:d5:aa:34:03:e8:69:c4:32:27:
         74:35:a9:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:51:16 2026 by rpki-client