Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/fc3e0244-de13-3a76-85d8-9e4968d59b5e.roa
File:                     fc3e0244-de13-3a76-85d8-9e4968d59b5e.roa (raw, json)
Hash identifier:          cWJQGMCK07ihHsN89w1PRy7ytMmPgNhYEOcHOPG3duE=
Subject key identifier:   05:92:D3:F2:0F:25:C1:F6:A3:73:C8:A4:3B:07:56:E3:D2:35:59:CD
Certificate issuer:       /CN=8d499d1b-9023-4410-8b4a-909ca6a083df
Certificate serial:       010D0C9F4328584CEFF234E8ABE5BE8768399C20
Authority key identifier: B1:8D:63:7D:ED:62:E0:A3:E0:64:3A:23:99:64:92:6D:21:B9:3F:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/fc3e0244-de13-3a76-85d8-9e4968d59b5e.roa
Signing time:             Sat 21 Feb 2026 14:00:41 +0000
ROA not before:           Sat 21 Feb 2026 14:00:41 +0000
ROA not after:            Fri 22 May 2026 13:00:41 +0000
asID:                     397666
IP address blocks:        23.145.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/8d499d1b-9023-4410-8b4a-909ca6a083df.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/8d499d1b-9023-4410-8b4a-909ca6a083df.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 26 Feb 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ef:f2:34:e8:ab:e5:be:87:68:39:9c:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d499d1b-9023-4410-8b4a-909ca6a083df
        Validity
            Not Before: Feb 21 14:00:41 2026 GMT
            Not After : May 22 13:00:41 2026 GMT
        Subject: CN=28816c50-4856-48d8-a5ef-84feb8d5bb21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:7b:54:cf:f8:f1:a2:1d:22:b6:27:e2:02:bf:
                    fe:ba:e6:75:d6:32:85:00:e0:2b:e4:a8:f2:96:71:
                    46:75:dd:19:7d:cd:72:33:8c:11:b9:35:14:8e:ef:
                    72:10:d6:c0:49:c3:5b:19:db:c0:9d:8a:06:09:62:
                    7b:54:c1:06:a8:b2:81:46:62:b7:89:c8:e5:5a:f6:
                    e4:ab:d5:a1:f0:d9:86:56:ce:10:d9:17:92:f4:11:
                    d1:45:fe:22:9e:b3:5b:57:c5:36:35:ca:ad:7b:85:
                    2b:32:03:51:5e:53:39:e1:14:4f:60:29:48:92:49:
                    64:48:e8:6d:95:2c:2c:bb:23:a9:62:e3:49:fb:57:
                    65:1f:b7:56:f1:4e:6e:65:ea:be:23:07:47:d2:3e:
                    25:da:c3:58:d8:86:c6:76:eb:3c:64:aa:8f:39:96:
                    49:51:3e:70:d0:8a:dc:88:0f:46:3b:a3:5b:06:a4:
                    1c:7a:7a:01:3b:e7:07:3a:c6:f2:30:f3:79:31:97:
                    8c:f9:23:1e:d5:a8:88:88:f9:f2:56:2d:30:c1:f1:
                    c6:1d:53:e4:84:bc:99:71:c7:41:7d:d0:f9:76:3b:
                    01:36:90:b5:be:54:a1:1c:cf:29:6e:f8:f0:92:a9:
                    85:32:2f:56:84:f6:6d:6a:c9:26:1d:9c:91:57:69:
                    43:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:92:D3:F2:0F:25:C1:F6:A3:73:C8:A4:3B:07:56:E3:D2:35:59:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/fc3e0244-de13-3a76-85d8-9e4968d59b5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/8d499d1b-9023-4410-8b4a-909ca6a083df.crl

            X509v3 Authority Key Identifier:
                keyid:B1:8D:63:7D:ED:62:E0:A3:E0:64:3A:23:99:64:92:6D:21:B9:3F:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.145.81.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:e6:33:af:de:cb:21:51:df:12:cf:8a:f1:e2:ef:25:08:73:
         a3:e9:b2:46:67:b1:f5:5b:02:e3:73:38:92:21:6f:b2:1b:01:
         12:17:49:41:df:1a:c9:2f:97:8a:fa:42:8f:ef:b8:e1:83:d9:
         9a:0e:27:f5:ae:a2:a0:a3:29:23:46:ea:f7:bc:f1:b4:26:c6:
         7c:53:67:fd:00:74:b3:10:f0:ed:fe:c6:16:f5:3d:9d:b5:14:
         72:fe:a0:79:0c:9c:a4:9f:60:56:9a:54:be:a7:25:fd:89:c3:
         32:df:20:9e:a4:69:1d:32:e8:02:53:8e:c8:16:cc:5e:de:8d:
         9d:00:56:75:54:27:6c:00:43:a8:54:c4:18:fb:9e:55:08:37:
         29:3b:a6:31:14:8c:e6:00:0d:65:cc:4f:05:1a:46:83:3a:22:
         43:bc:fe:76:8b:a4:0f:a5:9f:00:35:89:97:0c:20:8f:05:49:
         88:91:2c:23:1d:21:8c:45:6d:1a:db:b3:8a:a9:6f:54:5c:4c:
         0d:bc:d9:a0:1f:74:ee:46:01:cc:29:2c:19:c8:21:7d:74:81:
         25:1f:64:45:3e:50:0c:c5:1c:d0:c7:e2:14:19:e3:c4:fc:e5:
         a8:a7:02:74:fc:ac:d5:ea:4b:aa:cd:dd:ec:ca:24:fe:df:a2:
         06:bc:52:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 18:41:51 2026 by rpki-client