Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5e8ba34-ba4a-475e-9f98-6fd82aabc599/79a67f45-d984-330b-a500-ce1441c6bc30.roa
File:                     79a67f45-d984-330b-a500-ce1441c6bc30.roa (raw, json)
Hash identifier:          ZTcixqhVnZMYXqDsTRVPCIBI3/Y1ejM9ONUYPH4u+HQ=
Subject key identifier:   8D:14:D3:C9:66:64:A1:9A:3E:09:61:D1:06:0A:03:80:86:68:1C:21
Certificate issuer:       /CN=d5e8ba34-ba4a-475e-9f98-6fd82aabc599
Certificate serial:       010D0C9F4328584CE62CC3F90F70957CBAD1AD60
Authority key identifier: EA:00:6E:F9:15:E0:68:74:E9:40:41:BA:35:41:15:44:0E:F2:AA:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5e8ba34-ba4a-475e-9f98-6fd82aabc599.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5e8ba34-ba4a-475e-9f98-6fd82aabc599/79a67f45-d984-330b-a500-ce1441c6bc30.roa
Signing time:             Wed 18 Feb 2026 02:00:31 +0000
ROA not before:           Wed 18 Feb 2026 02:00:31 +0000
ROA not after:            Tue 19 May 2026 01:00:31 +0000
asID:                     36858
IP address blocks:        23.172.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5e8ba34-ba4a-475e-9f98-6fd82aabc599/d5e8ba34-ba4a-475e-9f98-6fd82aabc599.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5e8ba34-ba4a-475e-9f98-6fd82aabc599/d5e8ba34-ba4a-475e-9f98-6fd82aabc599.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5e8ba34-ba4a-475e-9f98-6fd82aabc599.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e6:2c:c3:f9:0f:70:95:7c:ba:d1:ad:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5e8ba34-ba4a-475e-9f98-6fd82aabc599
        Validity
            Not Before: Feb 18 02:00:31 2026 GMT
            Not After : May 19 01:00:31 2026 GMT
        Subject: CN=084d8a07-7eee-41e9-bcf4-4eabc92be34e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:af:45:74:3a:25:3a:45:cb:78:29:b8:03:30:
                    8f:4a:d0:0b:0b:2f:5c:ec:bc:15:ff:5e:3f:08:a2:
                    f7:7a:e5:3a:04:4f:71:7e:35:de:b0:26:c7:17:2d:
                    e1:cd:b5:f8:07:80:92:f8:49:ad:48:bf:a7:91:dc:
                    a6:a9:98:ee:a8:35:4e:42:d0:39:4c:3f:b4:b9:3d:
                    3f:65:b9:1b:34:df:4e:aa:e5:86:4a:cd:8b:ef:5c:
                    87:7e:5a:85:32:f9:15:d3:b1:18:f2:8e:c4:e8:72:
                    e6:0c:30:b7:ff:c4:4e:26:56:76:58:d3:c9:69:b2:
                    37:b2:f6:23:96:12:01:14:2f:50:a2:58:b1:53:6f:
                    a8:ef:fe:f4:93:18:37:29:f9:f3:c1:93:c0:13:04:
                    3d:ea:60:4d:f8:de:b8:8f:ed:e1:58:70:5b:2d:20:
                    09:29:98:1e:7e:08:65:ab:a5:4d:7c:0f:b1:14:4b:
                    44:b6:0f:47:1b:19:6a:f7:7f:41:d7:77:1d:5b:54:
                    c4:e1:05:12:ca:40:9f:a7:63:a8:d3:77:55:d1:9c:
                    fe:9e:e8:07:90:33:8c:ca:4a:f1:61:fd:74:1f:f6:
                    9b:ab:51:7a:c4:60:6f:16:62:a2:b7:d8:9e:6c:cb:
                    0c:06:db:0f:4b:33:b7:b4:8f:72:38:b0:62:2a:ad:
                    e8:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:14:D3:C9:66:64:A1:9A:3E:09:61:D1:06:0A:03:80:86:68:1C:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5e8ba34-ba4a-475e-9f98-6fd82aabc599/79a67f45-d984-330b-a500-ce1441c6bc30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5e8ba34-ba4a-475e-9f98-6fd82aabc599/d5e8ba34-ba4a-475e-9f98-6fd82aabc599.crl

            X509v3 Authority Key Identifier:
                keyid:EA:00:6E:F9:15:E0:68:74:E9:40:41:BA:35:41:15:44:0E:F2:AA:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5e8ba34-ba4a-475e-9f98-6fd82aabc599.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.172.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:6d:61:27:d4:6f:d4:a4:74:e7:5b:6e:32:73:4f:b6:99:52:
         95:10:df:bf:6c:38:24:f4:62:f4:bf:74:d5:03:03:bd:ab:1f:
         73:f2:13:91:63:93:43:7e:33:dd:7d:33:46:37:29:71:c1:43:
         b6:3d:ae:f6:21:ab:98:f8:32:a9:d6:87:2c:49:2e:be:47:8a:
         4b:fe:b0:8e:f8:79:d2:b3:0f:73:33:b4:28:60:8b:89:b0:d7:
         57:48:54:52:2e:19:cb:5c:05:be:d2:f1:1a:8c:27:4c:8a:76:
         52:d9:e4:80:0b:bf:f2:5b:77:7f:41:9f:23:72:30:6c:50:5e:
         03:c2:1a:6a:93:94:15:ec:cb:3c:e9:7b:ce:15:6d:f6:57:d7:
         d5:a7:c0:d2:a7:fc:cd:fc:f7:3d:13:f7:30:c5:7f:ff:0b:03:
         b7:b0:a9:bc:7a:2c:60:4b:ad:c8:e0:56:0c:2f:25:73:be:24:
         7f:03:6b:31:eb:b6:d6:69:92:85:ce:d2:d1:d4:72:a0:b4:15:
         d2:83:cd:12:f8:36:5e:77:08:26:55:35:bf:50:74:50:09:e0:
         9c:3f:d6:5c:8a:e7:60:8d:44:1d:40:49:67:c3:9d:a8:e6:06:
         68:01:13:bd:cd:bb:8b:65:73:42:3d:ef:b6:22:05:71:8c:c4:
         44:3f:70:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:32:55 2026 by rpki-client