Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b0f68432-4129-4f63-bf12-b02f289ecdb4/1f9e74c4-cba2-3de1-ad6f-c12d145c429d.roa
File:                     1f9e74c4-cba2-3de1-ad6f-c12d145c429d.roa (raw, json)
Hash identifier:          qkfzMjJRTZ+4QMe979xlQ78muNYwYZjtMBqA2jZTr6c=
Subject key identifier:   AA:6C:DC:AD:FB:D6:D8:08:D2:0D:A6:C5:32:20:1E:E3:E6:12:04:BE
Certificate issuer:       /CN=b0f68432-4129-4f63-bf12-b02f289ecdb4
Certificate serial:       010D0C9F4328584CED2775421C5AD53B3BD27280
Authority key identifier: 6E:20:C6:AD:40:26:EB:EA:43:BF:F4:C7:C8:CF:59:66:38:6D:93:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b0f68432-4129-4f63-bf12-b02f289ecdb4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b0f68432-4129-4f63-bf12-b02f289ecdb4/1f9e74c4-cba2-3de1-ad6f-c12d145c429d.roa
Signing time:             Fri 20 Feb 2026 14:00:41 +0000
ROA not before:           Fri 20 Feb 2026 14:00:41 +0000
ROA not after:            Thu 21 May 2026 13:00:41 +0000
asID:                     138997
IP address blocks:        23.145.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b0f68432-4129-4f63-bf12-b02f289ecdb4/b0f68432-4129-4f63-bf12-b02f289ecdb4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b0f68432-4129-4f63-bf12-b02f289ecdb4/b0f68432-4129-4f63-bf12-b02f289ecdb4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b0f68432-4129-4f63-bf12-b02f289ecdb4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ed:27:75:42:1c:5a:d5:3b:3b:d2:72:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0f68432-4129-4f63-bf12-b02f289ecdb4
        Validity
            Not Before: Feb 20 14:00:41 2026 GMT
            Not After : May 21 13:00:41 2026 GMT
        Subject: CN=39725f03-8349-4a35-bdfc-a49f745cf8f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:79:5a:43:7a:86:ab:4a:83:3f:2e:a7:2b:58:
                    47:98:c8:c8:da:86:f9:1a:63:63:59:c9:ee:70:30:
                    99:a7:09:2a:9a:07:01:f3:80:91:e9:91:ee:05:e3:
                    db:fd:e2:a7:35:de:3b:54:23:24:8d:22:36:67:fa:
                    c0:86:75:74:a9:b1:f3:fe:62:84:ce:71:4a:0e:cc:
                    a0:fe:af:93:36:d9:77:7f:c3:4d:1f:a3:dc:ef:04:
                    d8:bc:5e:bc:7c:f3:01:b8:19:3c:72:a0:a0:bc:bd:
                    c7:86:40:57:d0:ca:d8:79:e8:91:1f:ed:c9:06:5a:
                    8e:89:1e:d7:88:6e:03:bc:87:08:11:4a:44:22:8a:
                    6a:93:70:1d:87:b7:42:a3:f7:f7:0e:b4:4d:32:53:
                    97:52:7e:3f:88:22:95:4c:38:97:ed:84:0f:a2:01:
                    0b:ad:1e:5f:36:c4:35:96:55:08:53:90:42:17:60:
                    3a:cb:c1:7a:ee:14:36:5d:e0:f9:4a:b6:86:b8:95:
                    13:17:d1:fb:58:63:13:f8:72:77:52:44:4e:e7:8a:
                    e1:b8:70:23:ee:f8:15:3d:01:a8:76:97:ae:fd:7f:
                    80:75:05:8c:21:52:b1:5d:ee:18:27:fa:6a:00:f1:
                    70:30:2f:28:2b:2c:c1:ec:bc:b4:98:74:e6:b1:1c:
                    08:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:6C:DC:AD:FB:D6:D8:08:D2:0D:A6:C5:32:20:1E:E3:E6:12:04:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b0f68432-4129-4f63-bf12-b02f289ecdb4/1f9e74c4-cba2-3de1-ad6f-c12d145c429d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b0f68432-4129-4f63-bf12-b02f289ecdb4/b0f68432-4129-4f63-bf12-b02f289ecdb4.crl

            X509v3 Authority Key Identifier:
                keyid:6E:20:C6:AD:40:26:EB:EA:43:BF:F4:C7:C8:CF:59:66:38:6D:93:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b0f68432-4129-4f63-bf12-b02f289ecdb4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.145.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:1b:c0:71:90:6c:f8:c1:91:91:64:61:1f:92:25:61:1a:52:
         2c:12:da:10:3a:0b:58:62:50:89:3a:a2:7d:3a:06:b8:7b:4f:
         79:37:e3:b9:ca:ce:2a:0d:84:ac:b3:af:8c:f7:0c:31:e6:0f:
         d1:65:cf:d8:5f:9f:f7:48:ca:54:fe:26:f1:ae:a8:df:de:74:
         c3:36:74:c5:4b:7d:7d:f8:f4:9a:45:8e:86:07:c4:22:cc:87:
         d5:6b:f5:98:24:7b:f9:d4:e8:01:c9:d4:48:98:2a:4f:c4:a3:
         0b:65:9e:e0:84:e5:4e:9a:d1:66:a9:d2:e2:2d:5c:06:de:08:
         6c:9a:4a:a6:e8:4c:ad:bb:30:4b:26:6a:d5:17:5f:52:d8:15:
         83:10:66:de:21:93:9c:cb:6a:71:18:2b:d9:cc:e5:d3:e9:59:
         db:c4:4e:b7:f5:4b:70:35:25:55:ad:c1:03:6d:fc:5a:d8:d7:
         89:0a:3d:aa:03:46:8b:ca:ae:2b:14:9b:5c:40:33:3b:c1:32:
         8d:99:22:5b:67:a9:0f:d3:99:f4:4d:68:19:e3:e5:7b:8d:84:
         e1:ec:73:36:2e:c0:5e:5d:7e:91:5c:46:1a:55:15:0a:e4:05:
         c3:68:7a:9c:e6:ca:1e:06:9c:8e:fe:54:e9:aa:ad:d8:6e:11:
         d3:89:f7:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:10:09 2026 by rpki-client