Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1068cac9-dc99-4d0e-acf7-ce09e28ae97d/166d7fa8-a78b-30a0-9aa6-66932dd483f9.roa
File:                     166d7fa8-a78b-30a0-9aa6-66932dd483f9.roa (raw, json)
Hash identifier:          ySms5ZfYOVi65lcLIFWjbDuwyA5J05EHF+1uj92X7Hs=
Subject key identifier:   72:B3:37:28:B0:C7:6D:CB:D3:C5:C2:D5:D0:3F:79:3E:40:E8:7B:CD
Certificate issuer:       /CN=1068cac9-dc99-4d0e-acf7-ce09e28ae97d
Certificate serial:       010D0C9F4328584CFDD1E770E938217510AA8180
Authority key identifier: DB:21:91:80:9A:67:B7:AD:18:FE:AC:29:68:53:B7:59:60:94:74:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1068cac9-dc99-4d0e-acf7-ce09e28ae97d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1068cac9-dc99-4d0e-acf7-ce09e28ae97d/166d7fa8-a78b-30a0-9aa6-66932dd483f9.roa
Signing time:             Thu 26 Feb 2026 13:17:05 +0000
ROA not before:           Thu 26 Feb 2026 13:17:05 +0000
ROA not after:            Wed 27 May 2026 12:17:05 +0000
asID:                     402019
IP address blocks:        23.149.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1068cac9-dc99-4d0e-acf7-ce09e28ae97d/1068cac9-dc99-4d0e-acf7-ce09e28ae97d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1068cac9-dc99-4d0e-acf7-ce09e28ae97d/1068cac9-dc99-4d0e-acf7-ce09e28ae97d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1068cac9-dc99-4d0e-acf7-ce09e28ae97d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fd:d1:e7:70:e9:38:21:75:10:aa:81:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1068cac9-dc99-4d0e-acf7-ce09e28ae97d
        Validity
            Not Before: Feb 26 13:17:05 2026 GMT
            Not After : May 27 12:17:05 2026 GMT
        Subject: CN=51d59b24-78b1-4967-9f82-b17b2e2d9d22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:4c:8b:ff:6c:09:41:98:d1:c0:46:b1:15:e7:
                    69:98:f9:4d:76:0d:89:38:8f:e4:19:41:0c:9c:29:
                    4a:c7:3a:82:48:a6:4f:f7:9b:41:ea:de:cd:ab:66:
                    0b:61:eb:a6:05:3f:70:9b:bc:1d:cb:97:63:a4:70:
                    a0:ac:e7:d2:27:3d:f8:55:e8:cb:3f:5e:2e:8d:57:
                    ad:e7:e2:99:14:1a:d8:0f:2b:64:0e:3c:7f:8f:7e:
                    aa:ae:78:15:cb:1b:6e:bc:e0:28:63:26:e0:a3:b5:
                    48:51:ba:b0:a5:6a:50:f5:a0:a9:22:7f:2c:8c:13:
                    68:95:40:68:92:25:f9:8f:5a:7c:dc:59:c9:af:b1:
                    ce:ce:06:ee:54:73:2f:aa:61:c4:73:11:81:ca:66:
                    3e:b2:b2:7c:88:ef:e1:0f:a2:9e:68:0b:d4:b2:7e:
                    ec:51:a3:fb:69:34:f8:b5:3a:ef:c0:7d:36:11:e0:
                    66:d9:92:8c:dc:48:09:81:91:dd:2b:1d:c7:47:11:
                    1e:81:b1:56:cf:00:c6:79:34:13:af:2c:be:4b:44:
                    87:8c:8d:a2:00:55:2e:4e:0a:bd:13:92:a6:af:e2:
                    3d:46:e5:f8:c1:ba:7c:bd:46:d2:ab:52:d0:75:71:
                    28:7c:b4:67:1d:38:7e:ec:82:73:82:f6:ec:5e:a5:
                    af:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:B3:37:28:B0:C7:6D:CB:D3:C5:C2:D5:D0:3F:79:3E:40:E8:7B:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1068cac9-dc99-4d0e-acf7-ce09e28ae97d/166d7fa8-a78b-30a0-9aa6-66932dd483f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1068cac9-dc99-4d0e-acf7-ce09e28ae97d/1068cac9-dc99-4d0e-acf7-ce09e28ae97d.crl

            X509v3 Authority Key Identifier:
                keyid:DB:21:91:80:9A:67:B7:AD:18:FE:AC:29:68:53:B7:59:60:94:74:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1068cac9-dc99-4d0e-acf7-ce09e28ae97d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.149.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:4d:18:fd:84:21:10:77:e3:cc:24:37:62:f2:5c:9e:7a:25:
         97:4e:e8:5e:68:08:82:f9:4a:41:0b:ab:a1:aa:9b:80:86:29:
         31:68:cd:5f:ed:f0:0b:fb:4c:1c:84:4f:65:34:2f:ae:79:90:
         4e:fb:a7:95:f4:9e:2c:68:11:40:ae:bd:22:cc:8d:9c:7c:3f:
         4f:e4:0a:93:3c:d2:54:06:95:a8:7c:63:ea:e0:f7:e1:7b:37:
         d1:11:73:81:dd:ed:13:b0:fc:e0:76:fb:b0:b2:0e:cc:08:23:
         9d:09:22:8b:2b:a3:bb:50:74:29:86:47:a8:71:36:88:9d:e9:
         f9:87:04:75:59:32:62:02:7b:29:c4:5d:1f:c1:83:ca:bb:9c:
         51:c3:88:16:c8:ab:59:da:df:4d:8e:a4:85:b0:df:82:b2:fa:
         b6:ea:29:68:d6:10:d3:bb:83:7b:9c:ed:42:dc:4f:cd:c3:dc:
         98:7a:86:74:f2:e8:42:9d:7d:d9:8c:e9:51:e4:c3:70:c5:88:
         fb:be:bd:37:67:b1:a3:5b:1d:22:7b:7f:ca:0f:b9:e5:c7:60:
         5f:9d:78:8c:15:37:46:a9:29:82:86:10:ce:bb:4c:ca:17:da:
         13:f6:79:5f:a7:93:d5:d1:ca:86:b1:7c:3a:e0:6f:2f:44:60:
         1d:9a:5a:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:01:31 2026 by rpki-client