Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/6c23abd1-db11-3f16-ada0-726e8b7d4014.roa
File:                     6c23abd1-db11-3f16-ada0-726e8b7d4014.roa (raw, json)
Hash identifier:          mXzmNE3IVNMmt6JtRgvOW86NjJRx5NFFAEYehdSo5Is=
Subject key identifier:   D4:AF:1B:77:3C:2C:DF:0B:77:9A:AB:BB:6C:69:3A:0F:A1:16:29:BE
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F4328584CB981FA9413075B65E3CFA1A0
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/6c23abd1-db11-3f16-ada0-726e8b7d4014.roa
Signing time:             Mon 02 Feb 2026 02:00:32 +0000
ROA not before:           Mon 02 Feb 2026 02:00:32 +0000
ROA not after:            Sun 03 May 2026 01:00:32 +0000
asID:                     16509
IP address blocks:        170.114.124.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b9:81:fa:94:13:07:5b:65:e3:cf:a1:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Feb  2 02:00:32 2026 GMT
            Not After : May  3 01:00:32 2026 GMT
        Subject: CN=2eaf9e5f-7ffe-4c96-85b5-2a33bf9faf68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:4e:69:fe:fd:69:d5:88:c2:83:d6:a2:f2:fb:
                    e9:b3:45:92:8b:22:b7:4a:65:c8:67:9e:e9:dc:77:
                    52:22:4e:23:52:9f:4b:ed:0b:cf:03:9c:30:60:0c:
                    57:de:8c:13:72:b3:b8:30:75:e6:64:6f:7f:8e:6d:
                    77:ff:15:3a:eb:4b:a1:bf:7b:41:ef:ea:9c:a3:32:
                    2c:b8:3e:43:bf:23:1e:b5:b4:70:5c:dc:b4:74:ff:
                    2f:3e:7c:46:d5:75:b7:fe:9c:ec:99:9f:fc:0e:67:
                    e4:e7:a9:26:fa:5e:c4:e7:34:3e:95:ba:a4:bb:5e:
                    cf:4a:70:d9:da:50:94:92:c9:c1:0b:e5:26:fe:5a:
                    10:58:e3:d5:31:36:63:f9:37:c7:38:91:91:a3:63:
                    50:4a:7c:f4:a0:af:51:52:e7:c5:68:32:c2:c9:cb:
                    dc:4c:82:07:15:5e:a7:df:29:3f:da:68:0e:38:58:
                    30:52:0a:2c:63:80:62:06:39:39:29:af:27:80:e1:
                    3a:62:b3:38:a2:d1:28:2f:70:e1:d7:87:6b:d7:66:
                    bf:27:67:be:6e:2b:1d:28:c4:9b:6a:fe:15:dc:62:
                    90:67:f0:43:a4:39:2c:fd:0d:74:0d:73:17:2b:39:
                    b8:d0:14:d3:36:b8:05:6f:9d:21:1b:02:d1:32:74:
                    72:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:AF:1B:77:3C:2C:DF:0B:77:9A:AB:BB:6C:69:3A:0F:A1:16:29:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/6c23abd1-db11-3f16-ada0-726e8b7d4014.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.114.124.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:57:f7:8a:3a:fa:9a:ce:07:53:a4:91:24:96:b6:47:f1:d7:
         a3:95:5c:33:8d:ef:c3:b7:d2:29:c3:fe:f9:2e:69:a0:c0:a9:
         7a:a4:ea:e2:db:43:27:17:e1:99:97:68:60:ec:21:68:ab:78:
         2a:c2:f3:d6:bf:fa:1e:53:34:4e:bc:91:48:35:83:e3:97:1f:
         bf:e3:b8:b2:ec:16:df:45:16:97:c9:03:e5:8e:ba:0d:07:44:
         8e:3b:b9:b7:66:86:ef:c7:ec:25:40:0d:9f:ef:6a:c6:0a:74:
         b7:0e:a0:44:62:ae:a6:c5:d4:29:b8:0d:bd:94:02:b1:a5:35:
         0f:7b:43:e9:3f:2d:8d:ef:62:62:81:f4:71:db:01:31:74:90:
         e9:f5:14:8d:80:95:ad:85:99:a8:d9:5f:e3:bf:37:ae:c1:93:
         15:76:0a:9f:2c:a0:4e:2f:73:d7:10:46:df:a2:23:6b:c4:78:
         7b:14:05:6a:80:57:62:e2:c6:ff:3d:15:6e:8d:c3:80:dd:59:
         e9:b9:83:2d:ee:46:82:6e:4e:24:32:c6:40:ae:03:54:cc:a6:
         88:bf:36:1f:85:be:cd:ad:c6:c3:56:f0:19:db:df:8e:89:15:
         fd:3c:bd:e7:35:e1:65:5a:6e:a6:7f:ba:8c:65:f1:49:dc:a4:
         05:81:87:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 19:11:23 2026 by rpki-client