Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a/c9fa3e48-768a-381b-b1ce-cff4c784910a.roa
File:                     c9fa3e48-768a-381b-b1ce-cff4c784910a.roa (raw, json)
Hash identifier:          AMQ88cHv8NJQ7rET/dsD90UajHFDmHikCgvg5R7QhEo=
Subject key identifier:   65:83:90:2C:8B:28:7A:49:9F:9D:F9:3E:2F:5D:D9:68:F1:32:8F:4A
Certificate issuer:       /CN=f0830a41-5b6e-4cbd-a54b-a3350aa02e0a
Certificate serial:       010D0C9F4328584CE968A8E77D306FA53028F080
Authority key identifier: BD:52:9A:21:FD:4F:91:3E:D4:28:17:8E:BC:5B:CC:CF:35:7B:5A:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a/c9fa3e48-768a-381b-b1ce-cff4c784910a.roa
Signing time:             Sun 15 Feb 2026 09:49:16 +0000
ROA not before:           Sun 15 Feb 2026 09:49:16 +0000
ROA not after:            Sat 16 May 2026 08:49:16 +0000
asID:                     16509
IP address blocks:        23.141.168.0/26 maxlen: 26
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e9:68:a8:e7:7d:30:6f:a5:30:28:f0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0830a41-5b6e-4cbd-a54b-a3350aa02e0a
        Validity
            Not Before: Feb 15 09:49:16 2026 GMT
            Not After : May 16 08:49:16 2026 GMT
        Subject: CN=9c076d4d-3e6f-4efa-b620-c2d8cbd84646
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:bd:2f:a9:05:aa:13:5d:22:75:e2:89:96:cf:
                    56:d5:c3:99:46:0e:6b:e4:8c:94:ce:51:e1:c7:e5:
                    bf:9c:59:8d:f7:00:ed:99:41:bf:8f:78:5a:44:9e:
                    a3:72:f5:55:4c:71:e6:8c:a0:61:34:81:30:ee:9d:
                    8e:6a:3f:54:ed:d1:fa:37:15:17:f0:9e:ee:f7:27:
                    2a:b3:02:53:16:1d:7f:6e:03:b1:58:ac:f4:8b:2b:
                    ee:77:cf:6e:e1:ab:ae:d5:bf:f8:1f:b9:e2:65:a6:
                    0d:a9:74:30:92:9c:35:23:0c:97:61:83:87:8e:27:
                    9f:5e:f7:a0:93:ed:19:0f:cd:2c:6d:01:65:58:29:
                    e1:fa:f2:95:aa:fa:3b:bd:f1:7c:f8:6a:0e:ee:b6:
                    34:13:63:3f:9f:78:54:be:1f:21:49:c0:2b:45:1b:
                    63:82:cb:21:11:9b:ad:b4:ec:81:67:2a:77:49:9c:
                    70:60:8a:bf:d6:04:c6:a8:01:a4:3e:59:05:d0:8f:
                    c1:6f:8f:fd:d0:04:0b:82:4b:f8:ac:cf:74:96:c7:
                    64:5a:c3:d2:86:e4:a8:74:78:52:59:88:40:37:d7:
                    9e:1d:a4:82:c6:e6:24:96:c2:43:3b:43:bd:75:54:
                    34:f0:34:0d:3f:dd:95:e6:f1:2e:d5:09:78:ed:bf:
                    c5:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:83:90:2C:8B:28:7A:49:9F:9D:F9:3E:2F:5D:D9:68:F1:32:8F:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a/c9fa3e48-768a-381b-b1ce-cff4c784910a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a.crl

            X509v3 Authority Key Identifier:
                keyid:BD:52:9A:21:FD:4F:91:3E:D4:28:17:8E:BC:5B:CC:CF:35:7B:5A:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.141.168.0/26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:87:51:2e:26:9a:b5:17:86:df:9d:13:6d:2a:92:cf:1e:71:
         97:ee:66:b5:ac:8d:5b:b9:26:5b:0c:de:a0:f3:96:f3:e7:fe:
         e2:e5:c2:53:87:11:7d:79:78:52:6e:8b:76:40:d3:68:7d:4e:
         b6:2c:36:ef:dc:84:a9:be:9c:08:63:46:b6:0d:1c:ad:19:a8:
         dd:36:6a:4c:46:3a:d1:b3:57:8c:f7:60:5d:bf:0d:27:1c:3c:
         28:d1:8f:08:e9:dd:7e:b0:e8:3f:24:eb:74:f2:05:d4:77:7e:
         e7:6c:02:68:65:ce:b4:a6:27:89:17:07:e4:e0:d8:e8:7f:d9:
         ce:e3:d4:32:f6:0a:19:9f:b1:f0:aa:f7:af:99:f9:90:bb:1e:
         80:37:54:1f:44:2a:4e:fc:5b:eb:5e:fd:8e:f3:4a:cc:9f:d3:
         20:54:d0:9c:c8:14:f2:8c:0c:b4:58:6b:8d:6b:1a:9f:e3:47:
         3d:7b:56:f5:e7:32:f5:39:3d:22:6b:78:37:e4:0e:da:48:3c:
         e3:62:f2:0f:1b:1c:97:e7:5b:21:ee:67:4d:a8:94:9a:41:c5:
         c1:1a:a5:6c:03:f4:c1:9f:0c:80:63:3d:95:02:7f:dd:b4:20:
         4c:7c:47:6f:53:54:e6:27:06:7b:04:b7:31:4f:e2:9a:5a:22:
         72:74:6f:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:54:56 2026 by rpki-client