Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/41babb23-89de-46a4-977a-703f3bd0ca95/5d6e5834-f90c-367a-8fd0-cbb6614f1ccd.roa
File:                     5d6e5834-f90c-367a-8fd0-cbb6614f1ccd.roa (raw, json)
Hash identifier:          54sf38dqenufxGvqLkJSFpKmOY8aNlVpM1IauhhZ4vc=
Subject key identifier:   60:FE:CE:C9:AE:CA:4D:34:BF:AD:10:AE:A0:F4:E7:FD:EC:85:AB:41
Certificate issuer:       /CN=41babb23-89de-46a4-977a-703f3bd0ca95
Certificate serial:       010D0C9F4328584CE8F76012D52F3B1273892298
Authority key identifier: 39:B3:56:8D:D4:61:1C:FA:E3:E9:6A:09:5C:98:6F:82:59:05:D1:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/41babb23-89de-46a4-977a-703f3bd0ca95.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/41babb23-89de-46a4-977a-703f3bd0ca95/5d6e5834-f90c-367a-8fd0-cbb6614f1ccd.roa
Signing time:             Thu 19 Feb 2026 02:00:32 +0000
ROA not before:           Thu 19 Feb 2026 02:00:32 +0000
ROA not after:            Wed 20 May 2026 01:00:32 +0000
asID:                     6079
IP address blocks:        23.145.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/41babb23-89de-46a4-977a-703f3bd0ca95/41babb23-89de-46a4-977a-703f3bd0ca95.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/41babb23-89de-46a4-977a-703f3bd0ca95/41babb23-89de-46a4-977a-703f3bd0ca95.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/41babb23-89de-46a4-977a-703f3bd0ca95.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e8:f7:60:12:d5:2f:3b:12:73:89:22:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41babb23-89de-46a4-977a-703f3bd0ca95
        Validity
            Not Before: Feb 19 02:00:32 2026 GMT
            Not After : May 20 01:00:32 2026 GMT
        Subject: CN=163a5ca0-3040-4e4c-9e42-f2dd1bc8dab2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:5f:9d:0a:b3:d7:2f:f5:38:fe:1c:22:ac:98:
                    21:2e:66:86:4f:30:16:7e:fc:2b:d5:a3:26:8d:63:
                    97:22:f6:02:8d:d9:ca:f0:ec:c4:df:32:79:f9:2a:
                    81:44:7e:53:c0:ea:96:e4:cc:58:5e:0d:04:5b:ea:
                    52:c1:2b:91:36:8a:77:25:08:e2:73:0f:20:ab:5c:
                    df:d6:df:4d:39:38:85:7d:44:80:b1:39:4d:3d:9d:
                    fd:58:2c:55:50:7e:6e:1a:8b:ac:06:c3:9f:c7:0e:
                    15:20:d0:bd:b9:e4:10:06:d9:b7:14:a7:7b:da:34:
                    65:16:4f:e8:83:70:7a:d9:86:b8:ec:67:7b:6a:76:
                    0a:cb:c9:cd:ce:57:b0:a6:d6:5e:8b:44:b5:4b:46:
                    32:cd:ca:cc:9f:79:e6:04:97:1b:5f:80:b9:83:32:
                    bd:bd:ba:44:9f:01:7d:ed:7c:77:43:7c:e4:fa:de:
                    36:9f:2e:ec:27:44:20:31:c9:8a:db:1d:41:87:f8:
                    e6:dc:6d:49:30:ac:3b:c2:cb:15:43:0f:d7:cc:e1:
                    be:1e:b1:c1:7b:49:16:f1:41:3f:21:0f:a9:9f:23:
                    a3:31:84:24:e0:b9:55:66:2b:47:68:76:06:b5:d9:
                    2f:6a:e2:3a:f5:84:ba:0b:55:75:cb:09:19:16:4a:
                    c5:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:FE:CE:C9:AE:CA:4D:34:BF:AD:10:AE:A0:F4:E7:FD:EC:85:AB:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/41babb23-89de-46a4-977a-703f3bd0ca95/5d6e5834-f90c-367a-8fd0-cbb6614f1ccd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/41babb23-89de-46a4-977a-703f3bd0ca95/41babb23-89de-46a4-977a-703f3bd0ca95.crl

            X509v3 Authority Key Identifier:
                keyid:39:B3:56:8D:D4:61:1C:FA:E3:E9:6A:09:5C:98:6F:82:59:05:D1:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/41babb23-89de-46a4-977a-703f3bd0ca95.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.145.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:d5:7a:f7:14:71:cc:23:b5:23:f3:ae:19:c8:32:31:e1:14:
         60:ad:62:59:77:b1:72:6a:21:eb:ae:ab:4e:cb:49:07:a2:68:
         38:3b:d3:34:f8:fa:41:34:19:df:33:1c:97:b5:aa:ec:07:0c:
         7c:ae:9a:73:43:26:83:cc:7b:e3:3d:ae:24:68:54:13:bc:4a:
         83:90:63:b4:08:28:db:67:fe:31:c3:ad:60:ca:68:c2:ba:d4:
         23:99:80:88:a0:c8:00:59:1e:5d:62:60:b8:7b:1f:b9:ed:07:
         c2:9e:ee:f4:ab:47:f2:38:44:8f:ff:5d:a9:43:0f:8a:5c:9f:
         7f:02:79:f7:3c:98:5c:b9:d2:fb:ad:27:02:13:38:17:a0:cd:
         49:41:a9:a5:29:bf:15:6d:a6:6e:6b:ff:80:82:d1:72:21:09:
         da:f1:d8:e9:7f:32:43:22:c3:de:5a:d7:a9:71:ff:a3:78:e4:
         46:10:d2:e5:a6:13:86:33:96:39:bb:3c:13:f1:50:6f:ca:68:
         a8:5e:75:2a:64:77:03:69:9c:78:8c:b9:44:d8:7c:bb:bb:d1:
         06:33:c7:e2:71:19:cb:ae:4e:6c:15:cd:e0:9c:20:82:d1:9d:
         d7:29:88:cb:17:72:be:af:94:e4:7b:1d:1f:84:00:2b:fa:29:
         10:8c:cc:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:29:53 2026 by rpki-client