Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/74be3d40-a913-348f-b4d7-112446807197.roa
File:                     74be3d40-a913-348f-b4d7-112446807197.roa (raw, json)
Hash identifier:          a62ivWeGaTzLd136Vrn+77IwfpocoLm2VCPjDaUcz9k=
Subject key identifier:   19:03:C9:0E:C8:22:DA:0F:D2:04:7E:58:19:24:83:B0:A1:80:66:73
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584CE36218732F302C4A64FFE600
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/74be3d40-a913-348f-b4d7-112446807197.roa
Signing time:             Tue 17 Feb 2026 02:00:31 +0000
ROA not before:           Tue 17 Feb 2026 02:00:31 +0000
ROA not after:            Mon 18 May 2026 01:00:31 +0000
asID:                     16625
IP address blocks:        23.51.0.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e3:62:18:73:2f:30:2c:4a:64:ff:e6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Feb 17 02:00:31 2026 GMT
            Not After : May 18 01:00:31 2026 GMT
        Subject: CN=486b5b54-d10c-4ae7-bcf6-e0bffc08c327
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f6:ff:fd:33:ef:15:55:47:11:55:75:e9:a4:
                    4e:77:bb:78:38:2e:46:15:b9:68:55:08:5b:ef:e4:
                    0a:bb:87:c3:53:04:ad:c6:5e:7c:6a:06:e7:b4:a1:
                    d3:e9:5b:15:05:e9:90:7a:51:df:87:e6:e1:f1:87:
                    46:f2:da:1b:67:e4:3c:df:04:c1:6e:92:31:79:ae:
                    8c:92:7b:7c:0c:29:be:02:9a:9f:26:64:8f:f2:cb:
                    c0:4e:b2:b7:47:eb:f6:b7:5a:cc:c7:59:2f:ca:02:
                    23:c2:1b:fc:f9:99:72:0b:51:c4:4f:95:f1:04:fe:
                    d5:dd:a7:52:55:28:2c:a0:e8:f1:27:ed:c8:cb:c1:
                    0c:1d:9d:1b:50:53:a9:be:87:db:6d:e2:80:df:59:
                    90:c2:b2:60:b2:c4:cb:f3:04:da:fa:94:f0:c9:f7:
                    b4:7b:b0:2e:9e:de:6a:a2:7a:db:e0:09:a7:e8:e5:
                    5a:00:90:1f:25:2c:6b:8a:a9:12:d0:9f:64:fd:bf:
                    2d:3c:7a:3f:7b:58:34:4e:32:52:8e:bf:d4:18:a7:
                    81:19:9a:48:96:ad:a7:96:4b:1d:25:20:bf:10:98:
                    d4:27:1e:a4:f6:c5:79:84:0a:4c:63:99:ca:34:36:
                    0b:ae:70:30:4b:56:36:84:60:72:9d:5f:d1:63:89:
                    c2:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:03:C9:0E:C8:22:DA:0F:D2:04:7E:58:19:24:83:B0:A1:80:66:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/74be3d40-a913-348f-b4d7-112446807197.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.51.0.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:a4:fa:98:d6:19:99:55:13:77:ec:18:16:8e:4a:0d:cb:94:
         a2:1b:c5:22:51:9c:92:87:9d:f5:1b:55:30:39:4c:dc:cf:a6:
         4a:98:84:20:75:ec:06:05:43:70:b4:00:f8:2e:03:57:93:f5:
         39:a3:72:24:be:ac:8d:d9:de:58:10:87:35:04:7e:45:78:8a:
         14:07:c4:69:13:6f:db:7e:ea:cb:a7:6e:bd:54:79:8a:04:34:
         26:4a:23:23:f5:d7:b2:1b:53:93:b0:c7:16:bd:7f:a8:06:6e:
         5d:c2:6a:33:d0:0b:4f:56:bd:36:56:28:01:81:38:18:53:49:
         5a:96:0a:27:ac:f5:f9:cd:31:dd:45:7f:f3:ad:e5:cc:0c:6e:
         3e:7a:05:bd:ef:2a:ed:c1:37:23:8c:74:ae:27:f7:8f:0f:f0:
         86:11:5c:7a:31:4e:ad:02:06:6c:c7:37:00:43:45:52:61:ce:
         a6:98:d2:25:a1:20:b4:37:19:e5:96:77:b6:6d:db:ea:46:a6:
         5c:7b:85:f4:38:65:73:00:21:40:e5:bd:e3:d9:ee:1e:03:1a:
         67:a5:da:0b:7f:54:ed:79:5f:4c:c6:1e:38:e3:70:34:9a:cd:
         e2:fa:72:be:dd:89:4c:06:21:63:12:ad:67:18:b7:7c:45:bf:
         0d:2d:17:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:47:55 2026 by rpki-client