Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d04d2126-a09e-46a8-b6c3-1c3c12a6342f/2e628c5f-b9c8-354e-8ca8-2be946b33257.roa
File:                     2e628c5f-b9c8-354e-8ca8-2be946b33257.roa (raw, json)
Hash identifier:          VCXlEGlOX8r6wLedaWZK0Khfh+H7Wo7uc0YR1OobIUA=
Subject key identifier:   50:10:CA:30:27:39:F8:C5:14:EF:E2:C5:F5:D5:08:59:0C:73:66:1B
Certificate issuer:       /CN=d04d2126-a09e-46a8-b6c3-1c3c12a6342f
Certificate serial:       010D0C9F4328584CFB1CE428D67C2F821DB19F00
Authority key identifier: 0C:1B:AA:14:E9:9B:10:4F:A2:BF:22:A9:1B:30:7D:AA:A8:E2:9B:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d04d2126-a09e-46a8-b6c3-1c3c12a6342f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d04d2126-a09e-46a8-b6c3-1c3c12a6342f/2e628c5f-b9c8-354e-8ca8-2be946b33257.roa
Signing time:             Wed 25 Feb 2026 14:00:39 +0000
ROA not before:           Wed 25 Feb 2026 14:00:39 +0000
ROA not after:            Tue 26 May 2026 13:00:39 +0000
asID:                     13850
IP address blocks:        23.132.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d04d2126-a09e-46a8-b6c3-1c3c12a6342f/d04d2126-a09e-46a8-b6c3-1c3c12a6342f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d04d2126-a09e-46a8-b6c3-1c3c12a6342f/d04d2126-a09e-46a8-b6c3-1c3c12a6342f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d04d2126-a09e-46a8-b6c3-1c3c12a6342f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fb:1c:e4:28:d6:7c:2f:82:1d:b1:9f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d04d2126-a09e-46a8-b6c3-1c3c12a6342f
        Validity
            Not Before: Feb 25 14:00:39 2026 GMT
            Not After : May 26 13:00:39 2026 GMT
        Subject: CN=c2ddbfc3-a164-4a8a-a565-2c9efbd75694
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:46:c0:5d:23:9c:8f:c8:50:06:90:a6:0a:e5:
                    28:5c:63:02:29:61:51:4d:d5:27:fc:d6:2d:34:94:
                    a8:40:48:f7:ce:4c:48:75:2c:0b:08:19:63:c7:04:
                    72:97:af:2c:44:93:6f:41:0e:be:6b:30:8c:2a:75:
                    97:3d:6f:d7:fe:5d:eb:e8:73:27:bb:6f:69:41:19:
                    e4:aa:14:9b:41:38:ea:5c:1c:a4:2c:bd:5d:41:41:
                    ea:c8:99:8d:61:f8:dd:d9:39:23:47:9d:af:fc:19:
                    ca:bf:7e:90:2e:f1:17:2a:b4:c5:ff:26:ca:7c:87:
                    4d:53:88:68:dc:21:f1:26:c7:27:3b:1c:be:54:b8:
                    fa:1b:54:1a:ad:ec:75:12:16:af:7a:4b:ac:56:a1:
                    e0:a4:af:32:2c:0c:f2:71:bf:18:d5:20:2a:f7:74:
                    ec:97:fb:32:77:3e:46:fd:1c:b4:e4:48:ec:17:de:
                    cb:90:1b:26:9d:bf:2c:4a:78:67:cf:55:f2:bb:18:
                    35:c1:76:82:13:6f:32:c9:19:41:2b:d1:b9:ee:e1:
                    71:30:2e:d9:84:cf:4d:5a:49:fc:0a:8b:c8:e4:78:
                    71:e7:1e:57:57:28:4f:a8:77:b9:05:74:72:e1:36:
                    60:b6:89:44:8a:13:b8:ea:84:77:f2:38:c8:e6:a2:
                    ec:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:10:CA:30:27:39:F8:C5:14:EF:E2:C5:F5:D5:08:59:0C:73:66:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d04d2126-a09e-46a8-b6c3-1c3c12a6342f/2e628c5f-b9c8-354e-8ca8-2be946b33257.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d04d2126-a09e-46a8-b6c3-1c3c12a6342f/d04d2126-a09e-46a8-b6c3-1c3c12a6342f.crl

            X509v3 Authority Key Identifier:
                keyid:0C:1B:AA:14:E9:9B:10:4F:A2:BF:22:A9:1B:30:7D:AA:A8:E2:9B:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d04d2126-a09e-46a8-b6c3-1c3c12a6342f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.132.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:31:af:6e:4e:70:bd:02:47:c2:c9:2a:a2:09:d0:41:bd:c2:
         a4:ae:76:47:04:00:a0:ca:a9:9a:61:30:85:1e:7a:88:38:dc:
         68:f6:ca:b6:c8:33:e3:3b:b8:98:58:4b:86:0f:81:aa:f9:80:
         85:dc:fb:8e:2e:16:db:99:ba:e5:70:05:30:5e:65:04:84:8e:
         9f:86:17:64:71:a6:ac:c5:43:f0:3d:c2:5f:31:14:ed:c9:e9:
         38:e0:a9:4d:15:0b:33:40:cd:7f:8d:9a:a8:72:2d:a2:a2:45:
         ee:b8:e2:4e:11:44:8c:95:6e:d8:c1:50:1c:e1:7c:ce:7a:e7:
         ab:47:07:2c:f7:a0:39:65:cf:25:fb:8f:f6:aa:90:1d:3c:9f:
         f3:f6:c5:35:26:0b:48:47:d0:f8:bf:14:24:73:5c:73:ee:d5:
         6e:7b:5a:ff:a2:e5:fc:6d:4b:08:76:5d:e6:c1:b7:52:c3:57:
         e0:ca:68:18:f9:52:55:b8:d6:da:41:a6:32:2a:67:02:97:d0:
         8f:b2:e9:4c:c8:c2:b7:7c:10:f0:00:6b:cf:6f:2b:9b:32:69:
         56:e9:49:f6:b1:0d:ef:57:ae:b5:45:96:e3:a2:09:7f:f0:d8:
         6c:db:2c:db:e3:56:a1:35:a8:2b:20:08:7d:5c:ed:b6:be:cc:
         fc:e8:be:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:08:17 2026 by rpki-client