Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2/97a9023c-3b6e-3158-89d8-efe63001f64e.roa
File:                     97a9023c-3b6e-3158-89d8-efe63001f64e.roa (raw, json)
Hash identifier:          re1nXPstgO2mvuMxed2GIGmy6G5HAWiZ43KgcoxpKQ4=
Subject key identifier:   26:0F:97:23:E0:68:B8:18:78:7D:8A:DB:DE:4E:95:71:EC:87:44:F1
Certificate issuer:       /CN=dfd5f35d-5b02-484a-8e0e-a730abd98fa2
Certificate serial:       010D0C9F4328584CF85241155A46010324606430
Authority key identifier: 1A:A3:E3:68:50:AE:CB:27:31:59:DD:A7:8B:1F:10:C2:59:10:9B:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2/97a9023c-3b6e-3158-89d8-efe63001f64e.roa
Signing time:             Tue 24 Feb 2026 14:00:41 +0000
ROA not before:           Tue 24 Feb 2026 14:00:41 +0000
ROA not after:            Mon 25 May 2026 13:00:41 +0000
asID:                     62516
IP address blocks:        23.140.104.0/24 maxlen: 32
                          2604:4940::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2/dfd5f35d-5b02-484a-8e0e-a730abd98fa2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2/dfd5f35d-5b02-484a-8e0e-a730abd98fa2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f8:52:41:15:5a:46:01:03:24:60:64:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfd5f35d-5b02-484a-8e0e-a730abd98fa2
        Validity
            Not Before: Feb 24 14:00:41 2026 GMT
            Not After : May 25 13:00:41 2026 GMT
        Subject: CN=e51f70de-b5da-42a9-b2f0-77bcabd6af06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:c7:bd:04:00:2c:d2:75:03:7f:2b:af:2f:db:
                    a5:29:b7:f9:b0:c9:77:65:b7:bc:20:cd:20:01:e5:
                    74:2f:a2:7f:eb:ca:10:b0:7d:ae:08:a5:b8:4b:c1:
                    1b:2d:b9:7e:6e:c1:b9:8e:0d:8b:da:33:d6:28:99:
                    f2:d2:40:15:df:6f:8c:a0:9e:d6:98:75:4a:d4:c4:
                    57:0d:44:6c:8d:3f:05:55:db:9b:e2:fd:9c:65:18:
                    c0:80:47:a9:89:4a:25:77:c5:d9:ff:9b:1d:11:28:
                    a8:65:b5:ce:c8:56:94:ba:a4:3c:58:78:58:a5:42:
                    66:d0:96:20:df:a8:5d:d0:89:23:73:e3:cb:5f:98:
                    80:6e:6e:a9:82:1b:db:4d:52:24:bd:a8:7f:93:bb:
                    62:87:dc:a2:5a:bd:8f:a4:e7:16:35:c0:b7:9e:1a:
                    dc:f3:f5:94:64:93:82:c8:fc:2a:fb:e8:a5:0a:7f:
                    fb:80:e9:d7:61:15:99:ab:81:bf:57:63:e4:62:68:
                    7c:74:c2:e3:c3:23:16:57:f2:cb:16:97:c8:1f:36:
                    fe:06:cd:a8:94:cc:d2:4c:50:41:ae:4d:3a:20:ed:
                    2b:17:fe:c8:2c:25:4b:da:fa:58:9a:14:53:1c:d2:
                    fd:a9:1f:28:16:14:fe:7c:c5:23:b5:b6:17:d8:3f:
                    6a:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:0F:97:23:E0:68:B8:18:78:7D:8A:DB:DE:4E:95:71:EC:87:44:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2/97a9023c-3b6e-3158-89d8-efe63001f64e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2/dfd5f35d-5b02-484a-8e0e-a730abd98fa2.crl

            X509v3 Authority Key Identifier:
                keyid:1A:A3:E3:68:50:AE:CB:27:31:59:DD:A7:8B:1F:10:C2:59:10:9B:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.140.104.0/24
                IPv6:
                  2604:4940::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c8:6c:98:43:f5:1b:b2:d2:96:b7:07:b9:ff:5e:75:73:93:4f:
         8f:c7:9e:a9:c2:66:7c:d2:d7:b7:a7:69:19:0e:64:ac:e4:46:
         01:4e:8b:cc:8a:48:1f:aa:34:1b:02:b6:4c:34:76:42:0c:95:
         5a:8a:81:82:65:e6:c0:d0:0c:2f:c4:3a:20:e3:fc:d8:00:9c:
         b4:3b:d5:b9:ac:3d:3b:e1:b8:a2:ad:38:b1:dd:fd:52:5c:8f:
         be:a6:82:3a:06:90:fb:aa:4d:2a:ca:d2:b6:86:bd:4d:81:25:
         d2:a5:74:96:e8:d6:74:ef:24:45:cf:2e:1d:15:05:e2:73:6f:
         ee:56:f3:2b:29:7e:29:cb:28:2b:5e:3f:54:9f:a2:8c:5f:a8:
         a6:13:a0:9a:ff:ff:da:48:cf:26:15:49:81:6b:52:0d:47:f5:
         f7:7d:d8:f2:03:1c:12:ff:ec:ad:d6:01:10:cf:e5:8c:02:68:
         71:7d:76:64:9a:d8:d4:70:17:61:9e:7c:64:53:a1:55:05:e1:
         f2:c0:32:f0:86:64:4b:b9:99:67:e6:7a:17:3b:01:db:b5:fc:
         d9:77:56:85:08:01:6e:b5:0a:25:bc:61:fd:3f:06:58:07:09:
         c2:03:fd:cf:1c:69:f5:16:2f:f1:46:a5:3b:6e:45:5c:fc:d1:
         3e:1e:63:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:24:23 2026 by rpki-client