Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5ad6fa24-7c60-4275-b208-9a73092370c7/2f9313df-a623-30d3-a9c4-87a46c7b7e7b.roa
File:                     2f9313df-a623-30d3-a9c4-87a46c7b7e7b.roa (raw, json)
Hash identifier:          HGEwR0GL/zjimEXeiuqx6juxZLl/M0xc5SLiud3bF98=
Subject key identifier:   53:0E:06:7D:E7:26:07:6B:0C:5D:A3:3C:2D:C1:35:ED:D5:9A:5D:7A
Certificate issuer:       /CN=5ad6fa24-7c60-4275-b208-9a73092370c7
Certificate serial:       010D0C9F4328584D11725B82221C8BB54AA24EB8
Authority key identifier: 4D:25:9F:5E:77:79:3E:8E:7F:FD:72:BD:1E:E3:F5:F2:13:93:3F:A6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5ad6fa24-7c60-4275-b208-9a73092370c7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5ad6fa24-7c60-4275-b208-9a73092370c7/2f9313df-a623-30d3-a9c4-87a46c7b7e7b.roa
Signing time:             Thu 05 Mar 2026 14:00:40 +0000
ROA not before:           Thu 05 Mar 2026 14:00:40 +0000
ROA not after:            Wed 03 Jun 2026 13:00:40 +0000
asID:                     401962
IP address blocks:        23.145.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5ad6fa24-7c60-4275-b208-9a73092370c7/5ad6fa24-7c60-4275-b208-9a73092370c7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5ad6fa24-7c60-4275-b208-9a73092370c7/5ad6fa24-7c60-4275-b208-9a73092370c7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5ad6fa24-7c60-4275-b208-9a73092370c7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:11:72:5b:82:22:1c:8b:b5:4a:a2:4e:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ad6fa24-7c60-4275-b208-9a73092370c7
        Validity
            Not Before: Mar  5 14:00:40 2026 GMT
            Not After : Jun  3 13:00:40 2026 GMT
        Subject: CN=0303c8d5-204d-40da-9e9a-f9048bbc243d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:45:bc:33:e2:51:6e:37:41:b2:d4:c7:dd:fc:
                    84:d9:cc:ea:77:0e:67:9e:fc:5e:07:e2:34:f6:3a:
                    28:65:cc:d4:a4:33:44:c5:2b:12:62:af:95:a6:f7:
                    eb:2f:63:03:56:ec:fc:cb:56:56:2a:5c:c5:a6:6c:
                    aa:b2:61:53:ab:b0:d1:b7:fa:86:b4:ea:8c:d2:75:
                    c4:ab:35:83:4e:8b:fb:e9:c8:fd:09:d8:27:96:04:
                    66:13:3e:1e:d0:8b:d5:1b:41:20:8a:69:b8:02:c9:
                    dc:57:43:dd:9b:65:74:25:7d:9b:3d:0f:a9:99:2c:
                    e8:22:c9:d6:d2:c3:22:f8:ed:5e:8e:4a:5c:9e:ee:
                    cb:7e:c0:20:76:df:ed:fe:bd:9c:07:95:8b:4a:09:
                    c8:83:37:1b:9b:03:13:7a:d5:c7:84:fd:57:65:bf:
                    ca:e8:e6:4a:3c:53:25:81:e3:39:a8:35:b1:9b:b2:
                    2e:8e:4e:9f:07:3d:72:36:49:f2:49:90:e7:ed:51:
                    f1:3a:5e:a9:f7:1a:f3:0c:d0:42:bd:c7:4e:67:4b:
                    8c:a0:d8:bd:7c:ce:47:63:6c:29:04:5a:79:8f:3f:
                    61:9b:cb:46:63:bd:e9:d5:9b:90:8d:d6:e3:e5:01:
                    fa:42:ea:a9:c3:6a:f6:d2:36:b8:90:03:b9:75:fc:
                    0b:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:0E:06:7D:E7:26:07:6B:0C:5D:A3:3C:2D:C1:35:ED:D5:9A:5D:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5ad6fa24-7c60-4275-b208-9a73092370c7/2f9313df-a623-30d3-a9c4-87a46c7b7e7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5ad6fa24-7c60-4275-b208-9a73092370c7/5ad6fa24-7c60-4275-b208-9a73092370c7.crl

            X509v3 Authority Key Identifier:
                keyid:4D:25:9F:5E:77:79:3E:8E:7F:FD:72:BD:1E:E3:F5:F2:13:93:3F:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5ad6fa24-7c60-4275-b208-9a73092370c7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.145.92.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:bc:bb:00:c3:83:fe:c6:91:93:9c:eb:6f:8f:eb:7e:09:ba:
         e4:a1:85:fe:af:78:2c:69:dd:17:5a:1f:28:f9:3e:22:d8:7f:
         05:6e:f1:93:34:1d:93:24:c2:be:4b:4d:4e:ce:dc:58:3d:02:
         74:27:32:2d:05:31:fc:89:38:24:ec:4a:8b:77:e6:a6:bc:17:
         56:00:97:55:e2:42:e8:85:3d:ae:83:82:a1:3f:f8:de:ed:b9:
         c2:a2:c2:0e:c4:36:b9:46:71:d9:7b:a2:16:1a:a3:a5:e1:f0:
         94:f3:aa:35:76:77:b8:b0:96:44:34:5d:9d:b9:17:72:67:ea:
         db:ce:26:00:dc:33:fe:fd:66:77:e8:41:8e:b7:ef:e7:80:7b:
         fe:c6:7a:d0:5d:c5:12:a1:cb:2f:20:50:2b:33:91:a2:12:a5:
         da:b9:c2:25:26:d6:ac:41:6c:fb:b1:10:ec:66:b9:ba:d6:16:
         80:0a:60:31:68:f6:13:a0:b5:92:d0:58:3a:85:85:4e:d1:ef:
         e4:1c:16:cc:55:50:f2:7b:8c:ba:aa:a2:7a:28:7a:0e:16:75:
         d7:ee:9f:0b:d3:ca:33:c3:89:b5:27:59:37:d8:18:cb:fa:18:
         8e:2f:cb:c8:ef:f5:66:2c:18:e8:32:26:ae:2a:fa:37:02:c1:
         30:8f:8c:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 03:58:59 2026 by rpki-client