Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/0d6b5bd7-0db5-3a33-9200-6a44a110f2a6.roa
File:                     0d6b5bd7-0db5-3a33-9200-6a44a110f2a6.roa (raw, json)
Hash identifier:          jgKND0Q3YRqxXh7ufGyZM4qHUge5bB13ANIe8XZwiXs=
Subject key identifier:   B0:97:32:E7:05:6B:C0:24:E7:11:BE:03:61:3A:23:98:F4:3D:51:C1
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F4328584CDCA764D15747AE0115A43300
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/0d6b5bd7-0db5-3a33-9200-6a44a110f2a6.roa
Signing time:             Sat 14 Feb 2026 16:09:45 +0000
ROA not before:           Sat 14 Feb 2026 16:09:45 +0000
ROA not after:            Fri 15 May 2026 15:09:45 +0000
asID:                     2731
IP address blocks:        8.225.240.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:dc:a7:64:d1:57:47:ae:01:15:a4:33:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: Feb 14 16:09:45 2026 GMT
            Not After : May 15 15:09:45 2026 GMT
        Subject: CN=cd37646e-e716-4e50-a745-e6cdf3cd06a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:4e:a6:45:f4:22:29:18:ab:2b:51:62:23:00:
                    b9:b7:cd:21:c4:8a:fb:4a:a9:36:d1:bc:6b:db:2d:
                    2a:e3:fc:69:a7:be:c5:46:37:82:54:9f:f0:5c:21:
                    47:c0:fd:d1:63:91:6d:fc:6f:20:bb:bc:e0:8e:27:
                    32:ce:13:a5:81:fc:11:14:6c:31:e1:3d:42:4c:fc:
                    b1:f0:02:f1:74:62:b0:39:6b:fd:59:5b:81:ec:3d:
                    bd:a9:3c:c7:61:b0:5a:6e:b0:b0:12:da:a8:83:88:
                    c3:db:1a:ad:ea:48:fd:2c:dc:2b:f9:ae:22:07:2a:
                    45:8b:2a:9e:fb:2b:fb:84:03:4e:e0:81:b4:91:82:
                    9a:ce:2d:01:e1:48:8c:c9:50:0a:85:fe:d4:1c:d7:
                    72:f2:f4:4d:e0:ff:aa:e6:01:b3:97:7e:30:e3:d7:
                    12:c0:34:a9:c5:cc:6e:cf:3b:ea:31:1f:e6:4a:3c:
                    38:59:45:9a:19:65:ce:63:72:6e:58:a2:70:26:03:
                    49:57:74:69:dd:a1:a1:cc:9c:9c:10:48:4e:ce:b3:
                    63:eb:58:cd:e9:6c:b5:fc:fd:75:df:da:b1:d5:6e:
                    4d:24:21:e5:64:c7:19:a1:ea:42:61:4c:4e:c9:8c:
                    36:91:96:56:bd:9f:88:27:db:06:64:94:cf:b9:ce:
                    ef:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:97:32:E7:05:6B:C0:24:E7:11:BE:03:61:3A:23:98:F4:3D:51:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/0d6b5bd7-0db5-3a33-9200-6a44a110f2a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  8.225.240.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:7d:9d:05:1d:4d:68:81:b0:a6:2a:6f:60:20:e9:eb:ca:31:
         fe:9b:91:e8:41:ce:93:53:5e:09:63:ae:4c:64:e8:38:af:4a:
         61:11:c1:7f:cd:07:18:c8:c3:f8:2b:94:ca:13:6c:5f:1d:70:
         24:bb:9f:1f:cc:57:f6:99:fe:bc:2b:f2:3a:c2:b0:35:02:fb:
         fe:3a:38:26:28:37:60:5a:04:db:d5:41:22:17:97:5d:ec:b3:
         59:94:3f:03:28:82:d6:04:66:cc:78:71:fb:64:74:f0:ee:33:
         08:e9:22:cc:c1:e8:11:a5:41:fe:56:60:2a:17:5f:6e:ae:bf:
         ee:aa:a1:53:e6:69:7e:61:ff:ca:aa:e8:ed:e6:e8:7c:bf:cc:
         a1:e2:ea:93:f8:ad:ab:fa:67:01:6c:f5:1b:ed:1c:18:33:da:
         0a:ac:94:f8:29:54:89:f9:5f:59:0e:0a:1e:ba:fe:37:4f:73:
         10:c1:83:e4:63:e0:33:78:7f:53:48:3f:2d:5c:1a:d4:94:0d:
         90:04:08:eb:a6:8a:49:72:08:5a:4a:13:f8:02:ae:d6:74:6e:
         dc:cd:4b:13:df:4d:4f:61:76:1c:98:12:dd:c4:18:29:bb:cf:
         07:84:fc:80:c8:3e:12:85:44:38:89:79:a1:03:a4:4a:06:6c:
         e7:ca:34:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 27 07:28:12 2026 by rpki-client