Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/4098e103-d04a-3465-a7e1-f3debf7a9e61.roa
File:                     4098e103-d04a-3465-a7e1-f3debf7a9e61.roa (raw, json)
Hash identifier:          HMB118juOIHmLha8jUwuRVJAQ6tOGlTDs6fA/Rp26jU=
Subject key identifier:   E0:24:A3:C0:DB:4E:B5:7E:3F:F5:9C:44:64:0A:30:F0:BA:23:54:14
Certificate issuer:       /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial:       010D0C9F4328584CDF324251864689ECBC657E00
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/4098e103-d04a-3465-a7e1-f3debf7a9e61.roa
Signing time:             Sun 15 Feb 2026 14:00:41 +0000
ROA not before:           Sun 15 Feb 2026 14:00:41 +0000
ROA not after:            Sat 16 May 2026 13:00:41 +0000
asID:                     16509
IP address blocks:        23.239.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:df:32:42:51:86:46:89:ec:bc:65:7e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
        Validity
            Not Before: Feb 15 14:00:41 2026 GMT
            Not After : May 16 13:00:41 2026 GMT
        Subject: CN=b8dff028-5ee0-4e39-b6c0-8b692271011d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b8:50:10:75:05:bc:d8:41:a8:e5:11:7a:30:
                    b3:64:f3:8e:c5:07:b9:12:65:da:2f:0f:5e:cd:10:
                    e1:01:d2:de:6a:29:6e:7a:a2:b2:e8:36:a7:5b:97:
                    9e:bd:dc:c4:df:7f:a7:7b:3d:1b:80:71:32:27:26:
                    86:0a:da:a8:86:1d:50:0b:d7:bb:78:c4:1c:c7:4d:
                    48:af:65:1d:9b:60:eb:8e:69:27:17:c7:ad:5d:52:
                    d4:65:63:1d:ae:0d:74:1f:20:5d:7c:b8:77:4e:10:
                    b7:b6:c7:5f:70:f5:c2:75:be:40:a2:97:19:ea:7d:
                    09:a7:ad:13:27:39:27:3b:b8:b3:54:16:3c:a8:35:
                    4a:4c:83:59:f0:cb:6d:7d:c6:ef:c1:54:d7:58:86:
                    f9:73:0b:30:b1:06:41:20:4f:4a:01:ac:48:b7:1e:
                    bd:d9:51:67:82:28:87:4d:d6:7a:9a:83:54:61:47:
                    1d:57:03:b1:da:dc:c4:cd:af:a2:ab:a0:e9:13:51:
                    6d:d6:cd:ed:9c:9a:c6:ad:f7:24:4a:17:c4:64:45:
                    cf:b1:93:03:13:55:93:bd:68:f9:84:a7:0f:85:98:
                    02:a3:13:a2:54:bd:a5:2c:34:ac:36:3b:7a:bc:b7:
                    65:5d:a5:4a:f7:1e:4f:65:15:10:29:fc:be:9a:2b:
                    d2:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:24:A3:C0:DB:4E:B5:7E:3F:F5:9C:44:64:0A:30:F0:BA:23:54:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/4098e103-d04a-3465-a7e1-f3debf7a9e61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl

            X509v3 Authority Key Identifier:
                keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.239.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:6e:63:27:c9:b5:75:eb:23:37:96:79:71:e5:35:ae:43:56:
         b3:32:1e:e7:6a:1e:7a:04:f3:9b:75:32:b4:fb:d8:33:89:f7:
         76:b1:15:82:45:2c:25:77:99:05:af:43:d3:d1:3c:0d:5c:6b:
         2b:3f:2e:4a:28:48:f1:34:30:77:9f:e7:7d:12:8d:47:ab:c7:
         5f:f9:fd:3d:3a:38:6a:8c:c0:91:64:07:e4:5a:c4:09:58:d7:
         c3:f5:c0:af:17:33:b4:35:21:03:88:a2:d0:13:e7:ca:62:2f:
         02:ec:c0:2f:92:33:36:22:30:96:d9:de:8b:d0:a2:f8:e7:6a:
         f0:b8:3b:7f:b7:89:ba:e0:ed:d1:80:90:f0:4c:b3:55:b1:cb:
         d3:77:17:33:61:d7:99:43:64:d2:45:db:b4:68:21:80:7c:7d:
         47:6b:6a:30:dd:fe:ca:bd:2d:a7:28:ec:1a:01:ae:1e:af:9b:
         1e:8a:75:0a:ed:fa:61:14:79:6d:08:63:e0:cb:4b:ae:5d:d1:
         52:31:a9:8d:8f:93:9e:b1:13:e8:52:32:8f:e6:9c:f7:fb:42:
         75:5b:7a:54:0a:f8:43:93:04:07:f3:ff:a1:63:e4:59:cb:17:
         54:57:52:26:5b:f2:6b:73:6f:c9:68:d7:21:54:f0:18:7a:cd:
         90:9d:da:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:34:37 2026 by rpki-client