Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f2eccad3-9416-4755-b75e-5a77a272beb3/66807622-f529-3717-a7e3-9e3f1a257327.roa
File:                     66807622-f529-3717-a7e3-9e3f1a257327.roa (raw, json)
Hash identifier:          IzBzZ6H5UHBI3lgD1FI73nTnD4CVeQ7Uf62e9TrCyas=
Subject key identifier:   1D:B0:F6:F7:A2:91:69:80:E2:FB:E4:4A:D2:72:24:02:DB:C3:36:08
Certificate issuer:       /CN=f2eccad3-9416-4755-b75e-5a77a272beb3
Certificate serial:       010D0C9F4328584CA5F6F6BAD5271EAB86CB94A0
Authority key identifier: 4F:2B:E0:FF:62:0B:EA:21:24:4C:D6:E2:99:C0:42:D8:AB:3A:E6:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f2eccad3-9416-4755-b75e-5a77a272beb3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f2eccad3-9416-4755-b75e-5a77a272beb3/66807622-f529-3717-a7e3-9e3f1a257327.roa
Signing time:             Mon 26 Jan 2026 02:00:32 +0000
ROA not before:           Mon 26 Jan 2026 02:00:32 +0000
ROA not after:            Sun 26 Apr 2026 01:00:32 +0000
asID:                     19625
IP address blocks:        23.188.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f2eccad3-9416-4755-b75e-5a77a272beb3/f2eccad3-9416-4755-b75e-5a77a272beb3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f2eccad3-9416-4755-b75e-5a77a272beb3/f2eccad3-9416-4755-b75e-5a77a272beb3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f2eccad3-9416-4755-b75e-5a77a272beb3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Feb 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:a5:f6:f6:ba:d5:27:1e:ab:86:cb:94:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2eccad3-9416-4755-b75e-5a77a272beb3
        Validity
            Not Before: Jan 26 02:00:32 2026 GMT
            Not After : Apr 26 01:00:32 2026 GMT
        Subject: CN=c50c7bb2-a9c8-486c-8860-31e8f2da71bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:7d:c3:17:8c:3c:8f:98:bd:e3:49:da:d2:8e:
                    15:65:b5:95:5b:be:58:4e:2a:95:4c:0a:f8:02:6b:
                    91:54:68:96:c6:bd:8e:5f:69:6c:f8:a9:c6:ff:e6:
                    77:ca:02:b5:9d:f8:10:b9:88:bd:9b:17:00:0b:43:
                    8b:0a:b4:f1:6d:0d:a0:17:b6:a7:3c:0f:95:63:aa:
                    dc:21:16:a6:41:87:f3:b1:18:aa:b4:a4:31:8b:3c:
                    28:f7:b3:00:65:52:4b:bb:30:7f:f4:fd:ec:0f:30:
                    16:99:ad:35:76:a6:dd:f2:ca:16:c7:93:98:a8:cd:
                    b0:c4:0a:9c:b2:15:1b:c4:59:ba:71:9e:f6:64:04:
                    33:58:39:ba:1d:55:38:a9:35:a7:db:b3:64:a6:c2:
                    5c:96:f0:92:50:70:7b:92:f4:67:32:f7:82:1e:4d:
                    c9:2a:34:c3:6d:68:f9:6c:3e:93:10:07:14:21:df:
                    37:0b:86:df:99:2f:55:e4:b0:bb:5f:a2:68:04:74:
                    fc:0f:c2:32:2e:8c:71:6f:ae:17:9d:b9:8a:d6:06:
                    fe:34:9c:fc:07:e7:0d:dc:f4:ad:37:40:4c:1d:32:
                    f1:47:bc:50:63:4b:40:ad:10:59:a5:17:8e:ab:60:
                    aa:0c:7e:d9:92:59:f2:f9:f8:ed:7f:10:a3:cd:32:
                    d3:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:B0:F6:F7:A2:91:69:80:E2:FB:E4:4A:D2:72:24:02:DB:C3:36:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f2eccad3-9416-4755-b75e-5a77a272beb3/66807622-f529-3717-a7e3-9e3f1a257327.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f2eccad3-9416-4755-b75e-5a77a272beb3/f2eccad3-9416-4755-b75e-5a77a272beb3.crl

            X509v3 Authority Key Identifier:
                keyid:4F:2B:E0:FF:62:0B:EA:21:24:4C:D6:E2:99:C0:42:D8:AB:3A:E6:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f2eccad3-9416-4755-b75e-5a77a272beb3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.188.240.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:65:8b:b3:b5:f0:41:aa:49:bf:e1:91:1c:26:b4:da:72:87:
         e7:d4:00:4e:30:76:62:73:48:64:e9:e0:14:51:c6:bf:06:3f:
         a4:a2:c1:e3:d1:b1:b0:46:2d:06:5f:1f:a9:54:b0:e5:91:cb:
         43:a6:c8:c4:b8:d9:8e:17:60:07:45:87:40:e6:4a:2b:90:5c:
         ee:4a:77:fe:01:20:c5:8e:5b:d9:46:5d:88:66:15:bc:7d:92:
         e4:3d:21:c8:73:6a:51:4c:b6:42:03:69:dd:85:a1:b9:ba:79:
         81:30:43:22:b6:cc:e5:72:bf:40:cb:8d:90:fb:1c:89:c4:f6:
         a2:00:12:5b:f5:f0:ea:3f:73:cd:42:53:8d:e1:e7:64:f7:01:
         45:20:62:d6:8c:f1:7c:b9:19:58:d9:59:b0:ae:97:02:58:58:
         d3:2b:bc:4b:3a:db:73:93:30:b1:2a:2b:cd:44:ef:ef:1e:ba:
         bc:d4:18:6c:6f:f3:18:c1:07:fe:57:df:a9:58:7b:72:51:67:
         1d:ba:f1:88:7f:fa:05:47:ed:21:1f:bc:e8:fb:dd:de:5b:08:
         aa:d6:6e:fb:9a:49:26:fd:40:1f:a6:b0:ea:21:af:fe:ec:c9:
         e8:e8:eb:1e:e6:1a:84:a0:02:49:26:59:d3:44:e2:a2:17:c8:
         57:23:89:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 01:35:24 2026 by rpki-client