Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1bc07705-3b80-4dc4-8b09-9e4fb2f314a3/d098d574-3077-39e6-9495-eadae1167a90.roa
File:                     d098d574-3077-39e6-9495-eadae1167a90.roa (raw, json)
Hash identifier:          jRczVKEaYJ280PMxknk0wcWJiEs89dJPCQ+zhuTobuw=
Subject key identifier:   1D:00:40:8B:7B:7A:BC:1B:9D:41:15:D9:8A:A8:54:17:A6:99:68:42
Certificate issuer:       /CN=1bc07705-3b80-4dc4-8b09-9e4fb2f314a3
Certificate serial:       010D0C9F4328584CEA5D03496EB477FC13949180
Authority key identifier: E1:B6:70:2B:1F:C6:BA:36:94:7C:87:DA:65:6A:FD:C4:89:77:10:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1bc07705-3b80-4dc4-8b09-9e4fb2f314a3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1bc07705-3b80-4dc4-8b09-9e4fb2f314a3/d098d574-3077-39e6-9495-eadae1167a90.roa
Signing time:             Thu 19 Feb 2026 14:00:40 +0000
ROA not before:           Thu 19 Feb 2026 14:00:40 +0000
ROA not after:            Wed 20 May 2026 13:00:40 +0000
asID:                     401970
IP address blocks:        23.145.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1bc07705-3b80-4dc4-8b09-9e4fb2f314a3/1bc07705-3b80-4dc4-8b09-9e4fb2f314a3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1bc07705-3b80-4dc4-8b09-9e4fb2f314a3/1bc07705-3b80-4dc4-8b09-9e4fb2f314a3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1bc07705-3b80-4dc4-8b09-9e4fb2f314a3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ea:5d:03:49:6e:b4:77:fc:13:94:91:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bc07705-3b80-4dc4-8b09-9e4fb2f314a3
        Validity
            Not Before: Feb 19 14:00:40 2026 GMT
            Not After : May 20 13:00:40 2026 GMT
        Subject: CN=0027dc89-f751-4881-a8c8-28b74f3cf93b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:17:6f:46:de:3d:dc:d6:7d:a4:8a:e2:8e:c2:
                    6a:dd:16:47:a3:07:dd:70:fa:17:cf:c4:61:a4:37:
                    85:e0:88:e4:1e:36:02:60:ee:64:87:28:df:20:8a:
                    2a:ae:d8:e5:c5:55:89:80:0e:ba:ca:4c:be:92:d6:
                    fb:bf:a1:3e:af:9d:44:66:3d:1f:39:7b:e0:ea:ba:
                    35:d9:2a:af:da:c0:b3:7f:54:d4:fd:3f:3c:3f:1f:
                    f3:a8:ba:e5:0b:2d:41:5a:53:c3:e7:3c:18:38:22:
                    92:70:0e:58:8d:7d:db:b5:fb:85:ce:ca:0c:73:78:
                    cc:e5:bb:3a:5c:6c:70:2b:bc:76:70:bf:be:31:77:
                    66:98:ab:b3:b2:d7:62:4b:88:bb:cf:9d:02:bf:e4:
                    83:2b:5a:86:5e:bc:85:07:b0:f7:83:e3:7f:c9:7b:
                    97:ad:5b:48:cb:c0:db:4f:b9:05:a4:cb:60:d4:79:
                    a2:e0:4b:c5:83:c8:de:1d:70:11:bb:c2:58:b8:1b:
                    8e:79:40:87:37:39:13:18:26:65:9b:8d:5c:05:d9:
                    42:db:15:41:70:ef:28:9d:e6:1c:29:8d:cc:cd:0a:
                    c5:34:f3:72:51:a5:e2:a1:e8:eb:40:40:53:0a:ec:
                    74:07:59:ab:7e:2f:fc:36:e5:39:04:e6:56:59:86:
                    90:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:00:40:8B:7B:7A:BC:1B:9D:41:15:D9:8A:A8:54:17:A6:99:68:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1bc07705-3b80-4dc4-8b09-9e4fb2f314a3/d098d574-3077-39e6-9495-eadae1167a90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1bc07705-3b80-4dc4-8b09-9e4fb2f314a3/1bc07705-3b80-4dc4-8b09-9e4fb2f314a3.crl

            X509v3 Authority Key Identifier:
                keyid:E1:B6:70:2B:1F:C6:BA:36:94:7C:87:DA:65:6A:FD:C4:89:77:10:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1bc07705-3b80-4dc4-8b09-9e4fb2f314a3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.145.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:28:1e:57:6d:fe:d4:b8:7b:12:94:6d:95:2d:94:74:6d:32:
         76:79:b0:f6:1c:84:ee:26:01:ac:46:f9:4b:ff:77:e5:4d:6c:
         78:a5:b0:db:07:82:e5:bf:57:be:d8:1c:56:e5:6d:76:18:9f:
         7b:8d:92:e2:2f:78:dd:aa:aa:d4:a1:f1:f3:82:b0:ee:fc:c7:
         a2:61:6b:ea:3a:fd:1e:2f:43:c7:8a:6f:c2:39:7e:98:e5:a2:
         86:5f:a3:fd:37:b5:f3:be:57:3f:e3:e9:28:14:6c:88:d3:3a:
         99:f4:42:ab:fb:94:3d:1e:39:e6:3e:b2:a8:25:df:66:fa:70:
         76:6f:9b:67:e2:b0:87:f7:1e:ef:1d:67:10:aa:25:44:c8:40:
         fa:2e:6b:d3:63:40:c9:c2:de:48:3d:43:3c:78:69:13:58:78:
         68:ed:8c:45:c1:49:3b:d8:09:6f:c5:d6:73:51:45:9f:28:81:
         1f:1c:84:19:94:df:2f:9c:b3:f5:d9:ca:50:2e:7e:30:76:ec:
         e1:14:bc:7a:02:2e:8f:20:98:36:1c:85:80:db:9d:0f:8b:86:
         64:f8:86:62:cd:ad:bc:67:63:22:45:5a:9a:c7:d9:c4:e3:7f:
         ce:a9:c2:32:c9:47:bb:46:90:de:49:b3:b7:5e:45:53:a0:55:
         b4:5d:c5:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:25:50 2026 by rpki-client