Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4b25c6fa-4d73-3b92-8f4f-8843ec0268a5.roa
File:                     4b25c6fa-4d73-3b92-8f4f-8843ec0268a5.roa (raw, json)
Hash identifier:          59f9JPfNSUeeswGJxa5lkUSQpFTYeS9lKEpxCEDPnxc=
Subject key identifier:   C3:BF:EF:B2:77:A8:B9:8B:1C:16:C6:41:19:A6:D4:06:98:B1:8C:9E
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584CE3621433BB65E4745E314A00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4b25c6fa-4d73-3b92-8f4f-8843ec0268a5.roa
Signing time:             Tue 17 Feb 2026 02:00:31 +0000
ROA not before:           Tue 17 Feb 2026 02:00:31 +0000
ROA not after:            Mon 18 May 2026 01:00:31 +0000
asID:                     16625
IP address blocks:        23.50.32.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e3:62:14:33:bb:65:e4:74:5e:31:4a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Feb 17 02:00:31 2026 GMT
            Not After : May 18 01:00:31 2026 GMT
        Subject: CN=ac75773f-0835-4f27-b4e2-c44dc7e6f8d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:38:cd:9b:f3:0b:dd:9a:0c:ae:d3:ac:7c:f4:
                    44:23:63:a4:d0:26:99:d6:8b:0c:0d:ac:e5:ac:db:
                    7f:15:90:5b:e4:bc:ca:89:3c:9d:81:eb:21:00:df:
                    f3:da:38:4c:93:23:87:50:0b:60:e2:9b:1a:87:0d:
                    6a:4f:06:b6:9d:7d:59:0e:96:9c:22:59:04:d5:27:
                    ab:b1:d6:31:be:bf:77:1b:28:9d:d7:ce:6d:27:7c:
                    7f:a0:e8:69:fa:e9:a9:f4:4d:e9:a7:cd:41:79:d4:
                    d4:d7:fa:e1:6d:23:e8:72:08:67:25:fe:b3:2c:b1:
                    2b:f6:a1:cf:e9:09:27:40:08:75:50:76:a9:08:8b:
                    aa:8d:d8:22:8d:e6:07:54:63:d4:41:8a:90:24:21:
                    58:e4:a4:f6:4c:b8:a1:6e:b2:db:16:bc:1e:8b:76:
                    76:13:a0:27:30:cc:97:dd:36:ba:5b:fb:c0:4d:cf:
                    75:f5:8e:b4:42:49:0f:7b:9d:53:40:9e:43:73:cb:
                    0a:97:26:d1:17:45:20:0e:89:3c:a1:96:77:3f:11:
                    c0:e0:02:25:f3:7e:c6:f9:ad:18:4f:db:c4:79:11:
                    ec:ac:9d:c7:f0:f2:17:af:98:e6:eb:ca:4d:25:f8:
                    8e:fc:38:55:27:01:8e:44:0e:93:54:a3:65:d9:e1:
                    c4:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:BF:EF:B2:77:A8:B9:8B:1C:16:C6:41:19:A6:D4:06:98:B1:8C:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4b25c6fa-4d73-3b92-8f4f-8843ec0268a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.50.32.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:86:a3:7f:11:3b:23:f4:76:66:7b:fa:b7:76:c3:42:f4:e1:
         fc:cd:9e:81:05:2f:f9:7b:4d:a8:51:de:3b:ae:45:8d:74:02:
         06:af:3d:45:f8:0c:c5:86:0c:15:79:1c:90:23:b0:22:ac:29:
         b8:4f:02:5a:f7:d0:c9:b1:86:c6:6f:26:07:41:98:49:da:76:
         91:c3:d4:70:8c:2f:fc:95:9a:1d:c9:6b:52:cc:ea:78:61:12:
         d7:d0:1e:36:8a:fc:40:5b:c1:f5:51:e3:6e:c0:19:4b:43:a9:
         2b:1e:84:9f:85:08:fb:4f:bf:d6:bc:29:ec:95:ea:c5:24:a2:
         65:72:48:f2:66:76:72:42:43:56:0c:57:ea:46:79:d5:d8:81:
         5b:8c:19:2b:78:16:d4:1a:78:a5:08:60:0b:54:b2:fe:e4:46:
         66:15:c8:88:c8:ea:58:67:8d:3f:19:5d:81:32:78:d6:db:6c:
         c4:af:b8:06:78:80:5d:19:a0:f8:f0:7d:96:a9:3c:59:70:08:
         0b:be:6e:33:5a:20:f6:6a:c2:5c:39:62:01:28:07:02:fa:77:
         fa:d3:e6:83:94:e6:02:7b:64:94:ea:98:66:98:e5:9b:1f:6c:
         1b:fd:1f:c2:1f:71:36:e6:84:94:f7:0d:16:f4:97:69:04:2d:
         07:31:e7:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:24:21 2026 by rpki-client