Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/813b9a12-50ed-45ab-a965-73c5f633a2d0/bf2c89d1-f9d3-3e3d-8a04-f7fed4c2d3a4.roa
File:                     bf2c89d1-f9d3-3e3d-8a04-f7fed4c2d3a4.roa (raw, json)
Hash identifier:          42YLJsKwpSRdmkzTH9izKa6ywwB+EOVYVu5DpiOzeRs=
Subject key identifier:   28:BF:04:08:C9:6D:2C:31:15:82:82:CA:12:43:27:C8:30:5D:CC:E0
Certificate issuer:       /CN=813b9a12-50ed-45ab-a965-73c5f633a2d0
Certificate serial:       010D0C9F4328584CBE4A450C826C4E9411763680
Authority key identifier: D3:29:29:B8:D6:6F:58:50:DF:E3:7A:C4:1D:87:EA:63:A8:B0:20:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/813b9a12-50ed-45ab-a965-73c5f633a2d0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/813b9a12-50ed-45ab-a965-73c5f633a2d0/bf2c89d1-f9d3-3e3d-8a04-f7fed4c2d3a4.roa
Signing time:             Tue 03 Feb 2026 19:07:52 +0000
ROA not before:           Tue 03 Feb 2026 19:07:52 +0000
ROA not after:            Mon 04 May 2026 18:07:52 +0000
asID:                     214483
IP address blocks:        23.149.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/813b9a12-50ed-45ab-a965-73c5f633a2d0/813b9a12-50ed-45ab-a965-73c5f633a2d0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/813b9a12-50ed-45ab-a965-73c5f633a2d0/813b9a12-50ed-45ab-a965-73c5f633a2d0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/813b9a12-50ed-45ab-a965-73c5f633a2d0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:be:4a:45:0c:82:6c:4e:94:11:76:36:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=813b9a12-50ed-45ab-a965-73c5f633a2d0
        Validity
            Not Before: Feb  3 19:07:52 2026 GMT
            Not After : May  4 18:07:52 2026 GMT
        Subject: CN=03e85de1-c545-4cde-a66a-37c41f6ed4aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:f9:ec:88:10:18:c6:bd:ab:2d:23:17:6c:d3:
                    81:e1:01:1d:6e:08:f6:a0:eb:6a:f1:da:6d:a5:fc:
                    af:1d:57:d8:5f:81:06:30:8c:09:c8:be:7f:85:f1:
                    14:92:3a:b4:b5:23:dd:5a:3a:22:a9:cd:32:48:d6:
                    77:09:76:4e:01:98:14:b3:70:68:fe:11:81:55:00:
                    0e:c5:a1:3e:a2:c4:18:70:bd:33:02:71:e8:6c:22:
                    8d:43:1e:0b:2c:13:6b:13:a0:07:84:f7:75:74:d2:
                    bb:e0:80:a5:fd:f5:d7:38:2a:f5:5f:f1:f3:03:0d:
                    18:89:a5:ec:04:0c:06:aa:90:d4:30:1e:5a:a7:55:
                    2a:c5:8d:ff:30:ce:09:3d:1d:38:d7:6d:28:a4:d3:
                    5e:32:46:9f:00:5f:e6:81:ab:13:e1:59:22:b9:2a:
                    b4:90:08:3d:d0:11:e9:40:14:9c:80:7e:38:ee:c4:
                    f7:e7:ce:d4:9e:66:75:62:96:f1:51:7b:66:e0:69:
                    c3:e6:7d:18:0e:eb:b1:df:c9:44:56:55:9c:38:2b:
                    6d:d7:be:a0:60:cd:db:53:d5:fa:31:f3:77:f6:0b:
                    59:ef:67:67:9d:bb:be:e8:ca:55:e8:6b:5f:c1:2f:
                    76:3e:a2:1a:47:8d:c4:ef:c7:f5:bb:52:1b:0a:ac:
                    87:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:BF:04:08:C9:6D:2C:31:15:82:82:CA:12:43:27:C8:30:5D:CC:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/813b9a12-50ed-45ab-a965-73c5f633a2d0/bf2c89d1-f9d3-3e3d-8a04-f7fed4c2d3a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/813b9a12-50ed-45ab-a965-73c5f633a2d0/813b9a12-50ed-45ab-a965-73c5f633a2d0.crl

            X509v3 Authority Key Identifier:
                keyid:D3:29:29:B8:D6:6F:58:50:DF:E3:7A:C4:1D:87:EA:63:A8:B0:20:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/813b9a12-50ed-45ab-a965-73c5f633a2d0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.149.140.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:93:cf:85:e8:11:7d:ec:7a:a4:11:3d:d2:c9:50:36:d2:88:
         28:4c:a9:62:29:93:d4:49:c3:20:e8:86:6d:de:3b:8a:6a:55:
         0d:71:c9:b9:ef:23:b3:33:fe:0e:cf:11:f1:3c:59:56:ba:37:
         60:f9:bb:b8:04:6b:38:93:72:8b:46:fa:05:63:86:e8:07:11:
         b5:de:b5:f3:f0:06:dd:f9:a5:11:04:49:75:49:51:f6:4a:2f:
         3f:7c:9d:c6:0f:70:0d:7f:84:2e:35:7d:64:11:82:01:83:60:
         e7:86:5a:38:98:59:f2:db:f6:2e:20:9c:35:a4:be:9b:d1:2c:
         54:64:4a:f8:2f:cb:2f:86:c7:63:69:71:01:85:b4:54:6b:1e:
         83:a5:0c:32:e5:d1:10:e6:21:87:49:f6:8b:a5:23:80:66:46:
         54:6a:96:5b:79:96:8a:45:49:ea:5c:93:52:93:0e:9b:f8:41:
         0e:c8:d0:01:ec:5b:6a:61:57:73:e1:7c:a2:f3:7f:07:16:cd:
         41:b7:b4:20:97:e8:05:cb:15:7d:b3:58:06:00:9c:24:ba:c9:
         03:29:e8:73:15:d5:10:f2:e6:94:34:06:28:34:d4:44:bc:a7:
         47:3a:56:c6:be:51:11:00:83:25:8f:df:31:7a:3d:a3:6e:64:
         f6:23:65:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 22:50:36 2026 by rpki-client