Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6b39a335-ce19-3cf4-81f4-1be49a706b53.roa
File:                     6b39a335-ce19-3cf4-81f4-1be49a706b53.roa (raw, json)
Hash identifier:          qdwhMtJLp25SJ2N6gJiXO//TQbHNV+LOtY5NgKoXM3g=
Subject key identifier:   50:12:07:2D:F6:6D:C5:20:C6:1F:78:0F:1F:16:16:D0:1E:85:4B:E3
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584CDF3281CA75C80FC4682CDB00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6b39a335-ce19-3cf4-81f4-1be49a706b53.roa
Signing time:             Sun 15 Feb 2026 14:00:41 +0000
ROA not before:           Sun 15 Feb 2026 14:00:41 +0000
ROA not after:            Sat 16 May 2026 13:00:41 +0000
asID:                     20940
IP address blocks:        23.48.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:df:32:81:ca:75:c8:0f:c4:68:2c:db:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Feb 15 14:00:41 2026 GMT
            Not After : May 16 13:00:41 2026 GMT
        Subject: CN=404ec588-2c4d-419b-bf10-40c023836ca0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:15:db:f3:56:17:3c:a4:d5:b2:7a:4e:17:0f:
                    d4:25:a5:34:99:e8:b3:63:99:2c:b0:8f:4f:04:b9:
                    3d:53:61:df:b5:9a:2a:43:0a:29:e4:e1:3d:9f:2c:
                    57:2f:46:8c:bb:3f:f3:3e:ac:f3:b8:62:2f:ca:56:
                    7e:28:d8:6d:86:17:4c:5b:08:e2:e3:5d:74:76:6c:
                    fc:1a:d9:fc:0f:0b:6e:b2:66:42:61:5e:bb:59:e4:
                    01:7c:26:be:31:27:0d:46:f0:41:fd:1f:5d:23:f3:
                    97:41:15:04:93:c4:79:2d:96:8d:51:66:df:db:4c:
                    56:a3:92:6c:01:53:8b:a3:62:be:a2:4b:52:51:b9:
                    45:89:a2:9d:26:ae:62:c7:d8:21:24:bc:4d:31:cf:
                    3c:3d:3b:07:4e:26:2e:8e:45:86:be:36:75:f9:84:
                    6e:43:c6:05:4b:e2:5f:91:f9:91:d7:f8:73:c4:24:
                    c6:ad:e3:cc:73:75:42:b5:99:d1:cc:fd:13:02:44:
                    cd:0a:8d:1c:9c:d2:5a:66:be:2f:60:3b:64:46:3f:
                    bd:ad:57:3f:c0:33:b4:15:52:8b:3f:07:30:f1:96:
                    d7:97:c0:a2:62:e9:97:38:49:4d:07:d1:30:41:8f:
                    c2:c7:72:cf:2b:de:46:7d:5d:d6:4a:33:bc:80:b4:
                    60:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:12:07:2D:F6:6D:C5:20:C6:1F:78:0F:1F:16:16:D0:1E:85:4B:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6b39a335-ce19-3cf4-81f4-1be49a706b53.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.48.165.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:ec:73:6d:d6:78:f3:67:5d:20:72:52:0a:25:31:77:0e:bd:
         3a:ed:a8:19:be:28:0a:f9:bd:c2:56:f6:c6:b0:51:75:2d:62:
         f3:30:ed:76:84:42:16:e2:b9:94:bc:3a:10:5e:c3:d4:1c:46:
         cd:82:0c:a5:84:8c:90:9f:b1:68:bc:f2:e1:87:55:9e:74:c4:
         c6:f6:ae:81:41:57:10:48:0a:88:02:25:ee:22:bd:ee:09:56:
         66:40:3d:46:36:1d:da:34:11:52:21:0d:5b:db:46:b5:c2:61:
         03:61:aa:c4:f3:9e:5b:9a:27:fa:d9:8b:eb:96:e2:56:14:82:
         c5:38:7e:b6:e4:d6:1b:6a:76:e3:32:8e:ed:6c:05:a4:1e:a5:
         ab:fe:f7:0d:43:85:8d:22:17:12:ea:0a:52:0c:77:8d:83:b0:
         d0:80:73:0b:f0:82:13:16:ed:d2:8a:a8:a9:33:52:ea:f2:7e:
         40:1d:29:4e:1d:6f:40:7b:81:c5:f1:4d:0f:09:9d:51:0f:3f:
         7c:78:38:87:ed:7c:43:c1:85:f4:36:a1:41:5f:e5:9c:01:62:
         12:bc:46:81:32:26:8c:ad:76:f5:d1:30:1f:ac:b6:30:07:f0:
         ea:74:ce:6e:b2:d4:45:ad:68:2e:ac:36:4f:10:12:7e:e1:31:
         d9:fb:8c:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:00:40 2026 by rpki-client