Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801/23d825fa-abf4-3f5c-a138-dea5c5c747f7.roa
File:                     23d825fa-abf4-3f5c-a138-dea5c5c747f7.roa (raw, json)
Hash identifier:          KAVMdz9UvAuHkc+CKVQuUfmyGD3tGeHcUsvt+z1ToK8=
Subject key identifier:   42:99:AB:06:42:16:34:37:2D:31:68:20:41:A6:66:6A:B6:C3:63:00
Certificate issuer:       /CN=604a49f2-58d6-4709-bdaf-e7181b613801
Certificate serial:       010D0C9F4328584CE62CD2266DF8D310966E7CC0
Authority key identifier: 85:78:22:95:76:5B:FF:E6:81:20:3B:83:B0:3F:AC:B1:74:74:47:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801/23d825fa-abf4-3f5c-a138-dea5c5c747f7.roa
Signing time:             Wed 18 Feb 2026 02:00:31 +0000
ROA not before:           Wed 18 Feb 2026 02:00:31 +0000
ROA not after:            Tue 19 May 2026 01:00:31 +0000
asID:                     13886
IP address blocks:        65.75.205.0/24 maxlen: 24
                          65.75.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801/604a49f2-58d6-4709-bdaf-e7181b613801.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801/604a49f2-58d6-4709-bdaf-e7181b613801.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Feb 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e6:2c:d2:26:6d:f8:d3:10:96:6e:7c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=604a49f2-58d6-4709-bdaf-e7181b613801
        Validity
            Not Before: Feb 18 02:00:31 2026 GMT
            Not After : May 19 01:00:31 2026 GMT
        Subject: CN=a51b367a-7612-4d8f-ac35-a6472c75219b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:31:3e:06:40:ab:97:1d:b5:73:ff:4b:96:7d:
                    b9:05:27:a5:5f:3b:65:09:ab:f4:1c:64:ed:29:8f:
                    d4:db:23:91:96:b0:ce:84:97:5f:d4:6e:82:9a:99:
                    ad:30:9b:a5:6c:9d:d6:79:23:97:95:90:05:9b:5a:
                    cd:9c:3b:87:80:a5:db:e1:92:92:ed:d6:1f:48:15:
                    8c:1e:80:c9:4e:8b:bb:56:a3:9b:3e:f4:99:15:6a:
                    1a:72:5d:f0:d1:e5:6b:e0:25:c5:4e:b0:32:c3:10:
                    04:8e:b8:61:21:22:99:2a:d1:06:5f:dc:b8:a7:db:
                    2d:fd:64:01:48:cd:0a:7e:22:a4:df:6d:ae:50:8b:
                    16:50:3f:0f:b3:6f:77:d1:88:5c:fc:b1:52:60:5f:
                    40:0a:fb:7d:85:95:e0:87:74:dd:bc:33:10:3e:c5:
                    26:31:58:fa:4f:5f:ed:99:99:ae:ee:22:7c:76:a1:
                    3e:da:69:dd:a0:99:46:75:ac:73:7f:a7:1a:82:f7:
                    b1:49:91:ad:95:24:7d:c0:d5:1a:6b:f6:55:d2:56:
                    e9:1f:d7:5c:88:59:f2:b0:4d:b0:87:c6:27:2d:2b:
                    15:a6:eb:01:21:99:bc:18:33:d7:a3:05:ae:6e:8c:
                    02:2f:99:fb:7e:05:66:e6:04:28:f7:0b:e5:b8:5d:
                    86:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:99:AB:06:42:16:34:37:2D:31:68:20:41:A6:66:6A:B6:C3:63:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801/23d825fa-abf4-3f5c-a138-dea5c5c747f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801/604a49f2-58d6-4709-bdaf-e7181b613801.crl

            X509v3 Authority Key Identifier:
                keyid:85:78:22:95:76:5B:FF:E6:81:20:3B:83:B0:3F:AC:B1:74:74:47:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.75.205.0-65.75.206.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:cf:db:2c:15:19:47:4a:cf:a6:a0:9b:35:0d:5e:32:ac:c7:
         23:76:c7:4a:0c:6e:de:43:8e:2f:01:1a:f4:05:40:ea:9e:c9:
         34:86:95:22:b2:1e:24:55:b8:d2:34:9d:68:fd:d8:bb:3d:ce:
         ce:df:84:74:63:b8:1d:42:c1:3d:fe:64:29:e9:19:26:97:8c:
         25:0b:27:13:d5:40:09:79:2a:9d:84:3f:d7:35:6b:0f:80:d3:
         64:b3:6d:01:33:ae:1a:06:b7:ba:b3:41:c4:e8:31:6f:82:14:
         58:2a:5a:6e:bf:89:41:04:83:72:72:2c:d2:53:47:28:7c:f5:
         8c:e5:17:9a:7e:ce:73:05:fd:ed:b5:41:c5:e8:55:37:04:2b:
         78:a5:66:e5:70:f8:92:61:57:c0:34:03:df:e0:fa:a0:c9:10:
         74:ee:bb:c0:c8:3c:09:62:b1:b1:5c:6e:a0:df:dd:ec:7d:dd:
         22:3f:f1:7e:c8:33:fe:48:48:9f:e5:cd:19:ab:4c:86:bf:81:
         bc:07:2b:c2:e6:4d:7a:37:56:41:22:be:a1:7f:18:a0:ad:b1:
         06:2f:20:21:1a:98:f4:56:64:65:e3:62:46:67:c6:5b:77:9a:
         dc:dd:df:e3:a3:05:f3:92:fa:9e:09:d2:b9:16:59:6e:17:cb:
         05:7f:55:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:36:22 2026 by rpki-client