Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/88d477dd-753c-4439-a255-c88ce462682a/eba353cc-6eb4-354f-844a-7c0277c5dfd1.roa
File:                     eba353cc-6eb4-354f-844a-7c0277c5dfd1.roa (raw, json)
Hash identifier:          VT55o29hWWkev+nwhCDaHCKo6kwZ4bcD2RZOLjff3d8=
Subject key identifier:   27:FC:FF:45:01:0A:B5:F5:20:F8:EF:97:57:44:76:27:21:F9:C3:3D
Certificate issuer:       /CN=88d477dd-753c-4439-a255-c88ce462682a
Certificate serial:       010D0C9F4328584D00B2562542E618E615ADA780
Authority key identifier: 5E:FC:33:F9:EA:AF:DE:05:18:57:35:C7:4B:7D:1A:3B:F4:F4:58:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/88d477dd-753c-4439-a255-c88ce462682a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/88d477dd-753c-4439-a255-c88ce462682a/eba353cc-6eb4-354f-844a-7c0277c5dfd1.roa
Signing time:             Fri 27 Feb 2026 14:00:40 +0000
ROA not before:           Fri 27 Feb 2026 14:00:40 +0000
ROA not after:            Thu 28 May 2026 13:00:40 +0000
asID:                     6079
IP address blocks:        23.145.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/88d477dd-753c-4439-a255-c88ce462682a/88d477dd-753c-4439-a255-c88ce462682a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/88d477dd-753c-4439-a255-c88ce462682a/88d477dd-753c-4439-a255-c88ce462682a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/88d477dd-753c-4439-a255-c88ce462682a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:00:b2:56:25:42:e6:18:e6:15:ad:a7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88d477dd-753c-4439-a255-c88ce462682a
        Validity
            Not Before: Feb 27 14:00:40 2026 GMT
            Not After : May 28 13:00:40 2026 GMT
        Subject: CN=c7535d64-358f-4294-a924-dca47480707e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d8:4c:af:01:0f:6d:cd:3b:e9:33:6d:82:18:
                    e9:d4:6a:d9:81:b5:fd:17:13:75:28:76:6f:1d:4d:
                    85:d8:d6:1a:c4:3a:f1:cc:76:8f:0a:0f:50:75:d1:
                    c6:9f:ea:70:05:f9:21:a8:92:79:34:03:87:2d:71:
                    0b:53:82:41:db:f6:fb:61:1f:fe:25:41:01:c6:af:
                    57:ec:a8:1e:fa:19:36:f5:3f:2b:a1:7b:b8:60:a7:
                    d2:31:84:07:eb:46:d5:19:b7:b8:8b:88:21:3c:a6:
                    d9:db:08:4d:30:56:35:63:8b:b4:35:9f:af:53:6f:
                    65:49:99:02:53:0b:2b:0e:30:ec:24:ee:32:34:15:
                    8f:eb:38:c0:ed:1d:8e:cc:8a:91:fc:c3:94:b5:11:
                    d3:c5:54:dc:eb:ec:7c:60:39:44:a1:51:dd:2f:da:
                    47:41:4d:05:ad:4b:a4:d1:81:68:bf:8d:86:9c:bc:
                    ce:72:c5:2f:29:ec:c6:d1:fd:0b:f7:bb:56:e9:03:
                    df:88:fe:72:96:4c:0f:b2:2b:7d:f6:ce:bd:17:1a:
                    f7:1c:a3:16:b0:49:b3:d4:14:5b:71:3e:5d:7d:9c:
                    1f:69:33:e2:b4:8f:cb:d0:46:54:54:df:3d:6e:01:
                    e7:81:7b:e1:32:ba:ad:3e:e5:db:c6:65:ae:dc:94:
                    0a:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:FC:FF:45:01:0A:B5:F5:20:F8:EF:97:57:44:76:27:21:F9:C3:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/88d477dd-753c-4439-a255-c88ce462682a/eba353cc-6eb4-354f-844a-7c0277c5dfd1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/88d477dd-753c-4439-a255-c88ce462682a/88d477dd-753c-4439-a255-c88ce462682a.crl

            X509v3 Authority Key Identifier:
                keyid:5E:FC:33:F9:EA:AF:DE:05:18:57:35:C7:4B:7D:1A:3B:F4:F4:58:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/88d477dd-753c-4439-a255-c88ce462682a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.145.228.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:96:cb:35:54:30:6d:22:23:84:72:75:a7:25:b0:94:68:04:
         0b:4a:75:4e:d2:ed:0b:2d:df:96:b8:87:47:fa:97:d0:fd:9a:
         88:6d:80:d6:e6:1d:85:8b:27:16:99:16:95:b9:6e:a6:4f:e1:
         ba:4a:be:c9:3b:b0:dd:51:cc:7a:52:d5:2b:e0:35:fe:c5:26:
         5b:8c:d9:d4:19:bf:90:10:97:1a:46:4a:b5:62:be:d9:e3:ad:
         6a:f7:46:52:ca:33:42:85:19:67:46:1b:c9:c9:32:93:af:72:
         64:53:17:d2:61:40:b8:c7:9e:df:de:47:ae:26:32:d4:1c:d2:
         8a:d4:3a:1b:b9:9c:2e:93:0a:84:86:3b:19:e6:40:77:8b:9e:
         69:ed:ed:2a:14:19:0a:b1:e0:25:a8:67:fc:f9:c9:b5:5a:14:
         69:cf:5a:32:5c:7a:6f:67:b6:5e:38:e1:00:96:80:8e:11:09:
         06:df:2f:ca:74:99:60:f3:05:23:cf:d4:29:62:fc:4e:b4:f0:
         68:9f:c4:85:cf:6b:91:ec:01:cc:0c:11:30:7f:2b:8e:4f:0e:
         2f:2a:e8:3a:18:42:af:20:c6:b3:e9:d9:8d:08:e5:53:04:c7:
         56:d8:d6:73:c0:f2:65:34:cc:13:23:0c:1f:f5:14:3b:f9:b2:
         31:ad:af:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:16:43 2026 by rpki-client