Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/743065a1-7855-4be2-941a-23bce4898410/0050983a-0db3-3529-a4a6-e31fdd013725.roa
File:                     0050983a-0db3-3529-a4a6-e31fdd013725.roa (raw, json)
Hash identifier:          oQob91uXCVSRXfQvCW6/okzw0uJ4YaDFCvl+Uw+HdTw=
Subject key identifier:   04:05:28:B9:12:96:00:42:57:E9:6E:95:77:99:9F:FC:56:D7:01:99
Certificate issuer:       /CN=743065a1-7855-4be2-941a-23bce4898410
Certificate serial:       010D0C9F4328584CCBA761298A97E18BDB016B80
Authority key identifier: 1D:E0:AD:EE:8D:77:87:A8:E1:04:5F:81:3B:C9:D9:7C:58:5B:11:1C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/743065a1-7855-4be2-941a-23bce4898410.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/743065a1-7855-4be2-941a-23bce4898410/0050983a-0db3-3529-a4a6-e31fdd013725.roa
Signing time:             Sun 08 Feb 2026 14:00:41 +0000
ROA not before:           Sun 08 Feb 2026 14:00:41 +0000
ROA not after:            Sat 09 May 2026 13:00:41 +0000
asID:                     211392
IP address blocks:        23.145.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/743065a1-7855-4be2-941a-23bce4898410/743065a1-7855-4be2-941a-23bce4898410.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/743065a1-7855-4be2-941a-23bce4898410/743065a1-7855-4be2-941a-23bce4898410.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/743065a1-7855-4be2-941a-23bce4898410.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:cb:a7:61:29:8a:97:e1:8b:db:01:6b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=743065a1-7855-4be2-941a-23bce4898410
        Validity
            Not Before: Feb  8 14:00:41 2026 GMT
            Not After : May  9 13:00:41 2026 GMT
        Subject: CN=162008cf-21b5-4f56-8272-d830214efca8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:c6:eb:3c:1b:95:ae:6b:ca:c3:b1:18:71:75:
                    a3:2c:8a:ab:ad:eb:19:da:7e:6d:ec:e3:d5:6f:fa:
                    49:f1:4a:de:92:36:fd:74:e7:0a:d2:27:a9:74:5e:
                    e1:1e:ae:a1:df:eb:af:2c:f4:06:b2:21:eb:85:76:
                    cc:e9:44:bb:e1:25:7c:4a:98:ec:7d:35:1b:8b:d5:
                    04:f0:63:ca:90:2e:70:f2:c6:ec:bf:22:14:ed:f2:
                    43:fb:51:cc:8f:73:17:9b:61:d0:ef:44:2e:26:1a:
                    30:0a:59:71:b9:eb:9e:aa:92:a4:07:94:8c:36:f4:
                    d5:90:75:c1:91:56:a1:4c:59:7e:d8:5d:c9:2b:ae:
                    38:d8:92:be:f3:43:f0:14:53:6e:1e:48:cf:58:51:
                    96:1a:ed:37:3e:46:bd:00:e5:ac:59:b6:a3:a4:e4:
                    93:b5:78:9b:a4:6f:8f:90:09:f7:3e:1d:5c:ab:d2:
                    20:d4:6e:89:56:dc:c9:65:ea:aa:2d:5c:71:7f:75:
                    9b:6a:79:de:f2:ea:8f:29:d2:f3:16:20:ba:db:52:
                    41:66:79:a8:30:5b:94:51:8f:d9:a7:2d:bf:7a:72:
                    3e:a1:90:12:d9:af:f8:37:14:c0:e8:9c:6c:71:39:
                    7c:8c:e9:fb:93:70:d2:0b:15:5d:34:a8:52:ef:e3:
                    13:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:05:28:B9:12:96:00:42:57:E9:6E:95:77:99:9F:FC:56:D7:01:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/743065a1-7855-4be2-941a-23bce4898410/0050983a-0db3-3529-a4a6-e31fdd013725.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/743065a1-7855-4be2-941a-23bce4898410/743065a1-7855-4be2-941a-23bce4898410.crl

            X509v3 Authority Key Identifier:
                keyid:1D:E0:AD:EE:8D:77:87:A8:E1:04:5F:81:3B:C9:D9:7C:58:5B:11:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/743065a1-7855-4be2-941a-23bce4898410.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.145.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:7d:b5:c2:8a:fe:bd:83:5a:50:33:19:dd:52:96:b5:65:a5:
         55:ba:fe:96:7b:39:8d:65:3c:ae:cd:11:c0:ae:34:06:85:53:
         8d:ba:93:58:a5:14:a9:84:09:45:10:e6:30:a6:50:cf:5f:8f:
         20:fb:93:fe:1e:b4:1c:1e:3f:e8:93:fc:d6:21:d2:7f:19:52:
         ab:25:34:13:c1:df:f9:ed:08:1c:24:cf:92:ff:d0:96:bc:9b:
         21:85:2b:60:70:f4:2c:eb:e2:a4:c4:8f:01:7a:ce:5b:62:bd:
         7b:e6:b8:d2:bf:c2:69:cc:65:eb:08:67:46:47:ed:92:41:a0:
         04:dd:c2:be:55:89:e4:f6:56:29:90:54:ab:3a:c2:37:66:32:
         4b:cc:61:59:94:88:21:fd:2e:42:21:ef:79:ac:40:fc:08:cb:
         bc:79:61:ad:e5:18:ae:e8:79:b9:bd:03:f6:95:86:1f:cf:ce:
         ac:94:12:36:b3:50:70:94:8d:d3:6c:5f:7c:94:ac:d5:3a:2a:
         19:16:31:c3:55:18:86:b8:95:57:0a:62:e7:01:2f:22:fe:90:
         f2:60:de:d0:e7:fd:19:09:13:a5:98:b4:7f:b0:48:46:ca:4e:
         da:fd:86:08:2b:c6:da:d9:8b:78:8c:5a:d7:6b:a7:9d:96:af:
         40:1c:a0:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:05:57 2026 by rpki-client