Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b2679e6f-3d82-435c-a3df-766830f41503/a065aa37-61db-38bb-aafe-9a03f3b919cf.roa
File:                     a065aa37-61db-38bb-aafe-9a03f3b919cf.roa (raw, json)
Hash identifier:          oIpP+Pqj62CiaXpRWHxTCGJxbh700ssYdnC8yAys+0k=
Subject key identifier:   BF:BA:95:07:42:9E:7A:79:35:81:42:67:79:C2:2E:10:EC:5D:E9:33
Certificate issuer:       /CN=b2679e6f-3d82-435c-a3df-766830f41503
Certificate serial:       010D0C9F4328584CE1FCC31F96EAEEE3850AAFEA
Authority key identifier: 7D:BC:35:E1:F1:B7:F7:C7:1F:EF:EE:34:09:74:1C:75:94:C7:2C:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b2679e6f-3d82-435c-a3df-766830f41503.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b2679e6f-3d82-435c-a3df-766830f41503/a065aa37-61db-38bb-aafe-9a03f3b919cf.roa
Signing time:             Mon 16 Feb 2026 14:00:40 +0000
ROA not before:           Mon 16 Feb 2026 14:00:40 +0000
ROA not after:            Sun 17 May 2026 13:00:40 +0000
asID:                     400393
IP address blocks:        23.130.24.0/24 maxlen: 24
                          2602:271::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b2679e6f-3d82-435c-a3df-766830f41503/b2679e6f-3d82-435c-a3df-766830f41503.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b2679e6f-3d82-435c-a3df-766830f41503/b2679e6f-3d82-435c-a3df-766830f41503.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b2679e6f-3d82-435c-a3df-766830f41503.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Feb 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e1:fc:c3:1f:96:ea:ee:e3:85:0a:af:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2679e6f-3d82-435c-a3df-766830f41503
        Validity
            Not Before: Feb 16 14:00:40 2026 GMT
            Not After : May 17 13:00:40 2026 GMT
        Subject: CN=77dde338-0f86-46f3-a252-7a47e77b4714
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:5f:a6:8e:4d:be:fe:89:a7:63:7c:21:9a:fa:
                    75:6d:2a:39:bc:b3:32:cd:b7:09:74:cc:92:9c:63:
                    d2:dd:64:05:0f:ab:24:d5:68:64:5b:44:08:10:c1:
                    ed:b7:62:a1:f0:98:86:58:b1:1c:5e:ed:18:ab:5a:
                    bf:58:7f:aa:81:92:ad:93:ae:02:97:58:97:28:39:
                    87:83:b7:6c:19:15:58:bb:66:cb:03:13:9c:42:d4:
                    7e:49:1f:b4:91:3d:00:01:b1:f0:e0:80:8e:e0:fa:
                    13:45:cb:6b:c1:8e:4c:dc:9e:24:89:9d:dc:1b:77:
                    f6:3b:9a:63:27:f5:54:b1:e0:2a:70:ec:50:16:d3:
                    bb:8b:b1:ea:00:3e:3e:cb:30:67:11:24:42:0f:a6:
                    01:83:96:75:51:07:37:b6:29:11:cb:2e:78:01:78:
                    2c:3e:a8:37:11:bb:c1:0b:14:9f:a2:29:9b:56:bf:
                    6c:b6:88:93:d1:02:91:10:84:26:a2:7d:da:fc:d8:
                    e6:66:54:3b:68:ba:d7:61:d5:f6:75:3e:99:a0:77:
                    0e:38:e5:a0:de:1d:02:5c:35:9c:ac:db:7d:7d:b0:
                    ec:f9:9a:6b:b8:a7:43:b5:fc:4d:21:dc:c6:8b:2c:
                    a6:34:2d:02:7a:56:ed:c5:62:05:e9:5b:50:aa:bb:
                    24:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:BA:95:07:42:9E:7A:79:35:81:42:67:79:C2:2E:10:EC:5D:E9:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b2679e6f-3d82-435c-a3df-766830f41503/a065aa37-61db-38bb-aafe-9a03f3b919cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b2679e6f-3d82-435c-a3df-766830f41503/b2679e6f-3d82-435c-a3df-766830f41503.crl

            X509v3 Authority Key Identifier:
                keyid:7D:BC:35:E1:F1:B7:F7:C7:1F:EF:EE:34:09:74:1C:75:94:C7:2C:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b2679e6f-3d82-435c-a3df-766830f41503.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.130.24.0/24
                IPv6:
                  2602:271::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:41:0b:b9:4f:22:2a:5b:47:ae:19:00:8d:36:e6:0c:0c:39:
         29:30:03:cb:e2:a5:26:bb:d9:10:fd:56:ac:df:1b:15:ad:d7:
         54:10:de:8b:f9:4c:23:59:1b:b4:9d:f4:d8:53:00:01:1f:89:
         4a:24:15:a1:be:eb:a5:c7:ff:c6:e4:32:07:ec:2b:e0:2a:a8:
         62:0e:8b:92:42:3d:c3:db:95:fd:1a:cb:c9:2b:4b:f3:e1:2e:
         df:0c:fa:8a:e3:5d:25:16:eb:21:42:62:6b:23:f8:f3:b3:96:
         52:ef:9b:82:16:ba:d9:da:ef:6b:24:cd:83:b8:43:37:9b:07:
         c9:f5:b2:b7:68:f5:ab:1c:db:3c:22:5d:c8:70:7c:f3:c3:92:
         cc:8b:3b:78:87:a9:17:95:3b:c7:d1:1f:65:1a:2c:f9:13:9c:
         03:6a:cf:22:99:ca:a5:2c:1d:70:5f:7d:3a:75:e4:e0:e1:09:
         1c:b2:8c:01:37:32:c3:ab:51:28:83:51:cf:d7:f5:39:49:c7:
         81:8d:ab:f3:02:9f:5d:de:8a:ca:63:22:95:fe:f3:e3:0d:76:
         9c:cb:0d:3b:08:db:0e:89:b3:0f:91:7c:88:84:c1:e5:d5:a3:
         ae:46:cd:ab:0f:50:1c:12:65:d6:b9:09:75:78:c5:6d:13:2b:
         9a:94:ea:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 18:41:50 2026 by rpki-client