Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/81396079-e954-3d30-8252-b463122b36a2.roa
File:                     81396079-e954-3d30-8252-b463122b36a2.roa (raw, json)
Hash identifier:          Xnrth4qODzFZjXk3q9PqXwb0PWSrA1F1NAU+6ycUEhc=
Subject key identifier:   DE:16:26:FF:CB:69:02:2F:1E:49:65:D8:C4:64:D8:EF:1D:E1:30:02
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584CDB0236B5A2B54B664EDB0300
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/81396079-e954-3d30-8252-b463122b36a2.roa
Signing time:             Sat 14 Feb 2026 02:00:32 +0000
ROA not before:           Sat 14 Feb 2026 02:00:32 +0000
ROA not after:            Fri 15 May 2026 01:00:32 +0000
asID:                     20940
IP address blocks:        23.41.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:db:02:36:b5:a2:b5:4b:66:4e:db:03:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Feb 14 02:00:32 2026 GMT
            Not After : May 15 01:00:32 2026 GMT
        Subject: CN=cbd145dd-f0d0-4e9e-9dde-9c07ed37665f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:58:80:d8:69:21:62:50:e9:4f:3f:ed:7a:64:
                    58:33:ec:6a:18:a2:87:a4:44:6e:eb:bc:d4:40:42:
                    3a:1a:41:25:bc:35:5c:0c:ff:aa:be:fe:d9:ca:f5:
                    0a:b9:4d:1d:71:f6:89:fa:c7:98:87:eb:4b:fa:37:
                    18:95:c0:53:83:05:fb:2e:bd:72:b1:50:db:42:1e:
                    d0:64:70:af:bf:46:b7:1b:01:7d:38:77:3c:0d:1d:
                    ea:79:39:15:61:a9:af:dd:11:9d:ce:c3:26:85:c8:
                    2f:a0:ee:32:36:0c:fc:d3:aa:74:2b:63:21:3f:fe:
                    39:54:d4:0c:d6:bf:6b:80:4a:13:20:66:3e:d1:b0:
                    33:53:c8:9c:28:74:ab:3b:97:63:d3:21:b8:1e:7f:
                    fc:15:4a:b1:ed:f1:6f:be:87:e7:43:03:5d:62:8f:
                    d3:bb:82:ca:da:cd:0e:84:7c:be:42:3f:78:4d:1b:
                    26:b5:43:f9:21:b5:4f:e8:80:ac:bc:83:60:ce:2c:
                    9d:3f:e2:0e:6c:7e:3b:3a:6e:87:cd:19:83:9e:51:
                    f7:c7:11:67:c9:6c:45:90:e5:1d:0f:51:b7:f4:21:
                    ee:6e:78:2f:81:d9:2b:64:bb:b0:f5:b2:7d:4f:06:
                    9d:41:35:41:2b:d9:26:1b:c4:88:51:cb:7d:8b:2c:
                    88:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:16:26:FF:CB:69:02:2F:1E:49:65:D8:C4:64:D8:EF:1D:E1:30:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/81396079-e954-3d30-8252-b463122b36a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.41.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:40:ed:a0:93:bf:45:61:74:e2:49:b9:38:37:59:6b:3b:89:
         c9:bc:ef:38:68:fd:cc:9d:78:8e:07:e7:1e:95:04:2b:c8:5a:
         48:6c:e4:00:28:03:a4:7d:fe:3c:c4:ce:69:0a:1c:0e:39:1c:
         4e:a0:ed:a0:58:cf:c6:6a:8a:a8:ec:f5:bb:ec:bf:70:7e:e9:
         ba:a4:a4:c9:d8:d3:cd:dd:be:bf:de:a0:38:25:0c:13:14:82:
         b2:88:4c:19:56:72:29:50:75:db:30:1d:09:36:b4:d8:29:40:
         e5:c7:85:9b:fb:d1:e2:00:06:8f:83:a3:e7:d1:db:bf:dd:10:
         87:32:ee:d2:d1:97:67:39:c8:47:3d:df:63:8b:b9:35:06:95:
         77:b6:87:3a:ee:36:78:cb:e8:aa:4a:fa:7b:d9:7a:83:d0:07:
         a0:2d:35:6d:0d:1e:cb:0f:b5:22:43:f1:6b:95:df:db:33:85:
         2d:12:a1:73:2d:c7:2f:b3:df:43:a0:ba:d4:2f:57:d0:ac:e4:
         2a:e8:07:cc:be:9b:81:54:f7:86:02:d0:0f:5d:6d:a0:f1:0d:
         76:fc:3a:b2:28:a6:e3:9f:37:59:b2:a1:87:7b:c1:60:25:d0:
         65:8f:c5:33:1a:ad:0b:58:d1:bf:90:04:5d:92:c9:65:53:37:
         03:a2:6e:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:11:39 2026 by rpki-client