Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4c5f8faf-0c63-3054-8712-ea31db188ec6.roa
File:                     4c5f8faf-0c63-3054-8712-ea31db188ec6.roa (raw, json)
Hash identifier:          OhIdGmZJq1i6qG0LS0bInNMWJW1wDi9UlU6wNtNTp6Y=
Subject key identifier:   0D:94:88:EC:0E:13:C2:23:CC:D0:AE:8D:EB:63:55:AA:7F:A1:F0:C3
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584CED279BFC0AB879933274FBA0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4c5f8faf-0c63-3054-8712-ea31db188ec6.roa
Signing time:             Fri 20 Feb 2026 14:00:41 +0000
ROA not before:           Fri 20 Feb 2026 14:00:41 +0000
ROA not after:            Thu 21 May 2026 13:00:41 +0000
asID:                     16625
IP address blocks:        23.55.224.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ed:27:9b:fc:0a:b8:79:93:32:74:fb:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Feb 20 14:00:41 2026 GMT
            Not After : May 21 13:00:41 2026 GMT
        Subject: CN=776b2bdf-8fb3-4ec0-9642-d953e9e2a48d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a2:12:e4:42:cf:5f:8d:b4:fb:2a:e9:4b:44:
                    2e:6f:69:1c:dc:f0:6a:3d:60:d9:82:59:d6:f1:a2:
                    5a:0a:19:b1:c5:ff:b2:ec:9a:0c:11:ec:7a:d4:e2:
                    39:d4:07:4f:c7:04:fd:a0:e1:7b:37:d8:a3:a5:da:
                    e6:a5:a5:2c:c9:8c:66:d7:55:a2:9d:db:f9:48:49:
                    6c:fa:cb:64:61:77:4a:61:6c:98:e3:5e:0d:dd:29:
                    ab:82:ee:82:64:f5:e6:5a:2e:13:ad:cc:de:d2:75:
                    ff:d1:07:16:71:2e:29:f1:94:63:e1:87:4a:11:6f:
                    87:55:49:5e:1c:5e:69:64:ab:8b:ba:35:8f:7b:1d:
                    b4:94:70:cf:16:80:53:58:06:ba:21:49:18:3d:d5:
                    15:47:29:d3:11:e7:2c:82:8f:69:9c:73:e6:14:70:
                    80:b5:35:6c:33:86:7c:32:30:cb:0e:ff:c6:b2:64:
                    cf:dd:3b:20:25:5b:65:c0:2f:78:fd:32:6f:fd:8c:
                    16:03:e8:6f:62:85:b8:3e:6a:d9:ec:f0:7f:fd:5b:
                    18:0c:54:da:38:2f:09:9c:b3:bf:06:c7:e7:42:80:
                    de:2a:d7:a5:86:df:41:bb:8e:35:c2:a7:d5:73:9d:
                    8a:78:58:7e:ae:5b:25:52:64:3a:74:31:9d:eb:7e:
                    e6:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:94:88:EC:0E:13:C2:23:CC:D0:AE:8D:EB:63:55:AA:7F:A1:F0:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4c5f8faf-0c63-3054-8712-ea31db188ec6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.55.224.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:ef:79:b3:de:cf:6e:b4:a0:83:e5:67:0a:bf:90:48:9e:2e:
         98:64:cc:73:56:00:27:78:d4:07:d5:dc:b1:94:59:62:1b:e3:
         68:9a:52:40:0e:88:32:0b:6e:04:b5:11:6f:be:7d:c1:97:13:
         f4:44:47:50:bb:9d:45:fd:b5:f9:be:3c:b3:91:97:5d:ed:45:
         9c:c7:1b:63:d5:31:e6:78:f8:a5:47:f5:f3:d0:57:15:cb:59:
         90:b0:c0:df:9b:23:59:ea:f4:43:a5:8b:6f:9d:a5:c3:d1:37:
         80:e3:06:39:ba:53:eb:50:65:9d:3a:46:c1:ca:32:65:4c:49:
         dc:79:cb:3e:c6:b1:d1:5f:a5:ea:22:8f:52:50:5c:12:ec:6e:
         89:aa:3d:32:bc:d5:79:c5:64:e6:75:f0:8f:c3:92:0b:96:a1:
         8f:51:74:7d:4c:30:4a:c7:76:c1:a7:2a:1f:98:83:f2:9d:c8:
         cb:f4:d2:c7:6d:7e:dc:78:fb:99:86:c0:29:12:4e:b4:f2:de:
         15:0a:f2:9f:fd:7c:12:0d:4a:b9:93:fc:c1:19:98:86:82:dd:
         96:88:bb:ac:90:1d:a2:59:fa:d3:8e:4b:2a:ab:a1:1a:54:d7:
         05:54:7b:c4:f5:19:e5:6e:94:2a:29:84:0d:7c:18:b4:6a:b3:
         47:4d:35:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:30:42 2026 by rpki-client