Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b58aaf28-235a-43af-9bdf-f824731e27c6/95f73a6c-47c8-3c0b-89ab-afc768d225d4.roa
File:                     95f73a6c-47c8-3c0b-89ab-afc768d225d4.roa (raw, json)
Hash identifier:          vpNW0wvNa22Qbo0E1T56Y5nPNfdsJ8dtLk2yHrdmTpY=
Subject key identifier:   FC:FA:DD:43:78:8C:E2:2C:27:B2:2A:98:B6:C5:89:2B:AE:68:A9:D7
Certificate issuer:       /CN=b58aaf28-235a-43af-9bdf-f824731e27c6
Certificate serial:       010D0C9F4328584D02178482AB4CD9851D8D7C08
Authority key identifier: 59:6D:4D:F3:0F:79:3F:BC:27:7F:CC:07:45:87:2B:14:97:01:5B:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b58aaf28-235a-43af-9bdf-f824731e27c6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b58aaf28-235a-43af-9bdf-f824731e27c6/95f73a6c-47c8-3c0b-89ab-afc768d225d4.roa
Signing time:             Sat 28 Feb 2026 02:00:32 +0000
ROA not before:           Sat 28 Feb 2026 02:00:32 +0000
ROA not after:            Fri 29 May 2026 01:00:32 +0000
asID:                     400424
IP address blocks:        23.138.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b58aaf28-235a-43af-9bdf-f824731e27c6/b58aaf28-235a-43af-9bdf-f824731e27c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b58aaf28-235a-43af-9bdf-f824731e27c6/b58aaf28-235a-43af-9bdf-f824731e27c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b58aaf28-235a-43af-9bdf-f824731e27c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:02:17:84:82:ab:4c:d9:85:1d:8d:7c:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b58aaf28-235a-43af-9bdf-f824731e27c6
        Validity
            Not Before: Feb 28 02:00:32 2026 GMT
            Not After : May 29 01:00:32 2026 GMT
        Subject: CN=2dde7096-3751-449b-9dd8-919487e62415
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:bb:a3:11:ad:9d:96:e8:ec:83:2f:a3:3a:95:
                    c0:f2:8c:82:b8:98:c5:20:c2:78:30:38:7a:4e:40:
                    52:eb:3f:8f:3f:82:3e:07:2f:2f:89:91:7a:50:29:
                    b6:b3:a8:a7:da:18:82:16:9f:bd:7d:a0:1a:4f:c8:
                    76:53:bb:64:d1:b3:5f:e5:d1:77:cf:99:1a:06:10:
                    70:f5:f7:40:63:7e:fa:e7:fb:51:ab:a4:ff:11:28:
                    a6:f3:c9:ae:7f:7c:a9:ca:30:d2:30:44:f8:c5:e6:
                    61:9c:7d:d5:fe:42:c6:f7:11:39:d6:05:6f:20:b8:
                    ab:6b:48:be:8b:86:bb:2d:5a:b2:f4:02:eb:1b:50:
                    ef:c0:72:e8:05:f9:7d:a8:48:a2:5a:b5:f9:c9:fb:
                    09:b3:25:52:c6:12:6e:c5:cd:5e:f4:c1:61:f4:d1:
                    b9:07:3d:25:80:c2:2e:28:ff:f5:99:b7:6f:51:ec:
                    d1:72:d2:49:7b:98:4c:c6:1a:2a:ea:31:5a:d1:f7:
                    5f:37:2b:73:79:b5:77:7c:01:2c:3d:55:df:a3:e5:
                    f0:23:f2:60:41:58:cc:09:e6:14:6b:55:e9:1a:f5:
                    77:2f:6c:6a:bd:f7:56:43:48:57:3d:c9:c1:bb:4a:
                    12:3b:07:e1:be:a8:0e:1f:7d:a1:fb:0b:03:fa:92:
                    1a:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:FA:DD:43:78:8C:E2:2C:27:B2:2A:98:B6:C5:89:2B:AE:68:A9:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b58aaf28-235a-43af-9bdf-f824731e27c6/95f73a6c-47c8-3c0b-89ab-afc768d225d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b58aaf28-235a-43af-9bdf-f824731e27c6/b58aaf28-235a-43af-9bdf-f824731e27c6.crl

            X509v3 Authority Key Identifier:
                keyid:59:6D:4D:F3:0F:79:3F:BC:27:7F:CC:07:45:87:2B:14:97:01:5B:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b58aaf28-235a-43af-9bdf-f824731e27c6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.138.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:30:2e:fc:2f:90:cb:e4:17:da:2c:6a:8c:0a:51:15:23:3e:
         95:78:97:58:3c:10:e8:4a:e0:10:57:96:0c:e7:5a:da:d5:84:
         54:9b:28:5d:99:b4:24:e0:e6:91:46:84:b1:e1:ae:d8:f3:0e:
         5b:eb:d8:82:49:01:5e:26:e9:19:ac:ce:9d:2d:22:4e:a3:e1:
         2a:e2:f6:1a:99:41:ec:70:9f:c1:c2:4a:aa:fd:bf:48:59:fe:
         a1:c7:a8:ab:d7:fe:68:0b:f1:36:15:06:0d:d1:ff:d9:33:34:
         0c:85:6b:07:63:d3:be:f2:99:c1:51:e3:55:56:f9:7c:e0:02:
         2a:3f:24:22:1a:f1:1f:81:97:3a:0a:e1:3d:47:10:d5:d4:c8:
         62:23:76:90:5d:54:b7:5a:45:49:c1:b9:82:c8:b5:47:13:0b:
         c2:61:f7:e7:ab:fb:9e:6a:0a:1d:d2:5e:54:84:45:51:f9:0b:
         66:10:2c:73:22:8c:5b:bc:7d:6f:2a:4b:53:ec:68:2f:70:04:
         5e:9d:fe:48:f6:3c:19:e1:24:ef:52:e3:4c:8b:28:a4:9a:c5:
         a5:af:e3:59:09:e3:35:83:61:5f:f4:cd:02:56:1a:bb:6d:bc:
         12:98:4f:98:13:ba:cd:f2:24:44:58:75:1b:38:93:69:a6:d8:
         e1:14:7e:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:10:22 2026 by rpki-client