Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/26e665dc-5ccc-4aea-b74d-d8a612089217/2d09799d-a17a-3abc-a268-1152c154d554.roa
File:                     2d09799d-a17a-3abc-a268-1152c154d554.roa (raw, json)
Hash identifier:          KFyV2yOnUOXQVOon7MbKmoyI/UJDtW+ivfIH6mmZZeA=
Subject key identifier:   90:FD:47:47:35:7F:6C:4E:0C:BD:AC:2C:8A:DD:5A:CB:B6:13:BD:5A
Certificate issuer:       /CN=26e665dc-5ccc-4aea-b74d-d8a612089217
Certificate serial:       010D0C9F4328584D359F7173182DCD0EF325AAA0
Authority key identifier: CC:29:ED:2F:CB:DC:6D:D8:D2:25:03:A7:9D:1B:20:1F:1D:94:60:2E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/26e665dc-5ccc-4aea-b74d-d8a612089217.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/26e665dc-5ccc-4aea-b74d-d8a612089217/2d09799d-a17a-3abc-a268-1152c154d554.roa
Signing time:             Wed 18 Mar 2026 13:00:40 +0000
ROA not before:           Wed 18 Mar 2026 13:00:40 +0000
ROA not after:            Tue 16 Jun 2026 13:00:40 +0000
asID:                     401894
IP address blocks:        23.143.44.0/24 maxlen: 24
                          198.190.13.0/24 maxlen: 24
                          2602:f5b1::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/26e665dc-5ccc-4aea-b74d-d8a612089217/26e665dc-5ccc-4aea-b74d-d8a612089217.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/26e665dc-5ccc-4aea-b74d-d8a612089217/26e665dc-5ccc-4aea-b74d-d8a612089217.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/26e665dc-5ccc-4aea-b74d-d8a612089217.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:35:9f:71:73:18:2d:cd:0e:f3:25:aa:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26e665dc-5ccc-4aea-b74d-d8a612089217
        Validity
            Not Before: Mar 18 13:00:40 2026 GMT
            Not After : Jun 16 13:00:40 2026 GMT
        Subject: CN=5ed73f37-d669-446a-83a6-edc50b5373fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d1:cf:fe:1f:3c:ca:01:45:1b:cf:69:f3:d0:
                    d5:6b:bd:b1:a5:ea:38:2d:0d:57:c0:41:af:6c:91:
                    6b:9e:10:a1:c7:cb:28:58:67:fc:92:9f:6a:1c:b5:
                    ef:e4:49:da:a0:02:35:ea:ef:da:da:87:89:de:9b:
                    e8:89:7f:61:8c:6d:c8:ea:a5:4c:af:aa:ab:d9:1b:
                    79:2a:62:64:a2:9f:1e:29:62:33:24:e8:24:1b:55:
                    fc:9a:58:f1:44:7f:35:a4:cd:17:29:70:35:33:e5:
                    7e:77:41:53:4b:60:ac:f3:26:02:cf:b2:d1:2b:32:
                    f4:07:16:9e:f6:67:07:35:44:de:44:50:a7:9f:f1:
                    ee:af:13:41:cd:ab:c3:2f:5f:f0:89:48:f9:ad:63:
                    35:aa:d0:33:65:2a:c9:71:d4:32:3d:b8:01:b6:60:
                    ac:e4:57:d1:30:82:a9:23:22:a2:86:c3:49:f2:f7:
                    22:72:90:6d:5c:f5:f9:41:7b:af:31:0b:a7:c7:e9:
                    a1:23:16:fc:dc:2a:3b:9d:21:dc:bc:9e:9b:c4:57:
                    62:b9:c7:92:1f:71:61:8a:19:a8:1c:de:ff:d0:54:
                    05:18:ca:e3:08:ad:82:ab:f2:45:17:4c:c7:6a:8d:
                    29:3e:ea:ce:f2:19:93:f9:fa:15:89:ec:69:5e:a0:
                    ab:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:FD:47:47:35:7F:6C:4E:0C:BD:AC:2C:8A:DD:5A:CB:B6:13:BD:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/26e665dc-5ccc-4aea-b74d-d8a612089217/2d09799d-a17a-3abc-a268-1152c154d554.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/26e665dc-5ccc-4aea-b74d-d8a612089217/26e665dc-5ccc-4aea-b74d-d8a612089217.crl

            X509v3 Authority Key Identifier:
                keyid:CC:29:ED:2F:CB:DC:6D:D8:D2:25:03:A7:9D:1B:20:1F:1D:94:60:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/26e665dc-5ccc-4aea-b74d-d8a612089217.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.143.44.0/24
                  198.190.13.0/24
                IPv6:
                  2602:f5b1::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:00:38:34:d2:76:4c:fc:ba:32:56:9f:7a:8f:88:83:6f:97:
         9e:4e:9c:1b:b2:49:89:e9:b4:72:78:32:57:29:9a:25:ff:a0:
         bc:5e:12:7a:67:63:e6:11:a0:c0:5a:c7:04:fc:bb:c2:53:7c:
         a1:b5:77:e7:82:39:57:56:80:8b:05:d4:c2:c6:55:60:ba:2e:
         48:a8:21:f8:bc:ea:46:eb:b7:fd:94:ee:a9:8a:3d:9a:02:ab:
         ff:ae:57:f9:68:09:25:dc:17:70:89:99:c8:92:5d:28:dd:fb:
         5c:18:60:92:94:9e:d5:ba:fa:f1:21:db:28:ea:20:74:6e:51:
         ad:d0:9d:27:2d:7f:80:37:1b:d3:a6:7e:ab:25:33:58:ff:34:
         82:be:23:cb:d9:6b:0d:f5:9b:30:31:36:31:24:19:0a:99:b7:
         b9:bd:0f:12:07:a4:ed:d5:0e:b5:39:b8:f7:7b:10:6c:3f:99:
         9e:21:81:5f:96:c7:11:0b:6c:b6:e4:a6:27:a4:98:30:ad:26:
         98:c3:3a:a3:0f:e0:1d:d7:7e:f2:a2:be:a8:18:a1:95:1c:a7:
         91:38:b6:ee:56:ad:59:c4:84:39:ab:92:09:08:ba:50:77:31:
         1c:9c:da:28:9c:ef:7a:94:84:ea:d5:f7:b0:87:e7:fc:78:62:
         50:f8:e8:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:19:17 2026 by rpki-client