Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/668c3a0a-9fa8-3d77-a71c-b71b64a802ed.roa
File:                     668c3a0a-9fa8-3d77-a71c-b71b64a802ed.roa (raw, json)
Hash identifier:          MO7MgQsh5Gzr7JApbGc8yBX7uGwTVQY7iQNz6gKaYH4=
Subject key identifier:   38:83:A8:25:96:A8:CE:70:9C:00:D7:40:E1:6F:87:1E:7D:DC:BD:BB
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584CDC67CB58E80F960D06FF3BB4
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/668c3a0a-9fa8-3d77-a71c-b71b64a802ed.roa
Signing time:             Sat 14 Feb 2026 14:00:41 +0000
ROA not before:           Sat 14 Feb 2026 14:00:41 +0000
ROA not after:            Fri 15 May 2026 13:00:41 +0000
asID:                     20940
IP address blocks:        23.44.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:dc:67:cb:58:e8:0f:96:0d:06:ff:3b:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Feb 14 14:00:41 2026 GMT
            Not After : May 15 13:00:41 2026 GMT
        Subject: CN=45ec658f-4d02-46a5-a14f-de6db03b9b5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:8a:0d:05:6f:c8:c6:4b:9a:af:f2:26:14:53:
                    70:d6:ff:88:d9:c5:06:8e:21:23:d9:e7:1e:78:f6:
                    44:93:21:ab:c5:66:ce:63:83:87:82:87:62:77:b3:
                    fe:c0:1b:ab:b7:c7:34:fc:b5:ad:9f:80:65:dc:e2:
                    d6:ef:94:90:07:94:c2:cb:d2:e7:56:9d:f2:7d:63:
                    6a:ac:69:33:5c:96:ec:f1:02:3e:46:f6:21:1e:1d:
                    dd:cf:c9:ab:a3:79:40:c0:72:07:fc:f0:5e:69:a7:
                    ec:d1:ff:7e:a0:13:9f:2e:e3:58:d3:ba:3b:3c:cf:
                    a1:f1:af:12:05:76:2d:17:22:ce:9b:c4:a1:96:b4:
                    8a:34:00:2e:51:f9:f3:bb:74:01:3c:cd:b3:ee:e8:
                    68:ed:c6:30:98:0c:2b:a8:f3:9e:06:db:18:c4:45:
                    7e:6a:2e:f8:bc:d6:a1:a0:aa:d5:67:25:c9:43:db:
                    c3:8a:b1:ea:8d:57:02:a2:e7:1e:d0:02:f4:45:7a:
                    6c:f4:ed:d7:df:d7:78:51:1f:34:d6:8c:d6:be:aa:
                    75:8a:98:ee:10:2e:14:e3:58:69:cc:63:55:66:c3:
                    59:72:48:6c:9d:51:e3:a6:9a:03:8a:ec:ae:ab:98:
                    8d:c1:3c:1d:0f:e6:84:b2:eb:91:04:ee:e1:05:06:
                    31:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:83:A8:25:96:A8:CE:70:9C:00:D7:40:E1:6F:87:1E:7D:DC:BD:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/668c3a0a-9fa8-3d77-a71c-b71b64a802ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.44.51.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:71:ad:6d:59:39:d4:27:be:c8:4d:44:5c:48:ed:07:c2:a7:
         f7:36:9d:36:b7:1d:4f:e9:24:87:37:db:e2:ef:a8:8a:31:fd:
         4f:ae:95:81:f3:08:a6:81:63:bc:b7:08:ec:41:d6:07:85:c7:
         8a:71:82:46:b0:80:59:1c:14:0d:23:dd:a0:01:29:bc:6c:68:
         89:88:48:86:b4:e8:d4:c0:b0:4c:ad:0c:7b:42:20:df:27:e5:
         81:ab:89:b1:e4:d2:9d:61:48:bf:d2:64:40:cd:ab:18:45:04:
         d1:95:67:44:96:dc:b8:e2:4f:39:2b:ac:2c:ec:d2:8b:0e:bf:
         fc:3e:84:2d:84:68:9f:14:97:a6:83:f7:32:b2:d8:f1:6e:20:
         7c:91:cf:07:ff:d4:e2:44:de:31:2f:a1:e2:83:be:23:eb:7b:
         6c:7a:2e:e5:ce:a6:fd:73:57:05:d3:dc:bb:76:1d:0c:4f:7a:
         67:65:cb:c3:f5:74:52:35:b3:1e:0d:3c:cf:57:cb:f9:ad:e1:
         a3:25:ec:ea:d9:38:b6:a5:16:de:81:03:5d:79:3d:ea:87:fe:
         d7:11:6c:a5:7b:cf:48:c2:b9:88:24:a8:62:b2:45:d7:60:a2:
         a1:aa:8c:45:52:46:8f:09:d3:d8:09:57:86:61:6c:5d:4f:54:
         be:cb:61:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:35:00 2026 by rpki-client