Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/25d202df-6bec-4085-8c1b-d1f141557cfe/1c619daa-16a4-38fb-850d-9cd5873b1468.roa
File:                     1c619daa-16a4-38fb-850d-9cd5873b1468.roa (raw, json)
Hash identifier:          QXG3kqg1kIZEpnhtlKsnpZFvZBqQ/Ouo3se+q/T00go=
Subject key identifier:   1B:9F:EB:3F:F4:8E:47:95:94:E2:CB:EF:43:B3:EB:61:08:C8:06:18
Certificate issuer:       /CN=25d202df-6bec-4085-8c1b-d1f141557cfe
Certificate serial:       010D0C9F4328584CB121C932B2756893CC60A780
Authority key identifier: 62:29:36:6F:6F:B8:51:FB:6E:F9:A7:A1:71:11:EB:58:47:04:11:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/25d202df-6bec-4085-8c1b-d1f141557cfe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/25d202df-6bec-4085-8c1b-d1f141557cfe/1c619daa-16a4-38fb-850d-9cd5873b1468.roa
Signing time:             Fri 30 Jan 2026 02:00:31 +0000
ROA not before:           Fri 30 Jan 2026 02:00:31 +0000
ROA not after:            Thu 30 Apr 2026 01:00:31 +0000
asID:                     61317
IP address blocks:        23.144.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/25d202df-6bec-4085-8c1b-d1f141557cfe/25d202df-6bec-4085-8c1b-d1f141557cfe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/25d202df-6bec-4085-8c1b-d1f141557cfe/25d202df-6bec-4085-8c1b-d1f141557cfe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/25d202df-6bec-4085-8c1b-d1f141557cfe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 24 Feb 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b1:21:c9:32:b2:75:68:93:cc:60:a7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25d202df-6bec-4085-8c1b-d1f141557cfe
        Validity
            Not Before: Jan 30 02:00:31 2026 GMT
            Not After : Apr 30 01:00:31 2026 GMT
        Subject: CN=4cb5af0f-b567-4291-be45-f4b13a748cbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:42:5b:bd:f8:46:57:b0:c5:78:56:eb:b1:ab:
                    fa:23:fd:ee:1e:e3:0c:d2:61:ad:ee:32:af:85:40:
                    f1:92:17:a6:2f:61:e7:d4:8f:85:66:80:73:f1:e0:
                    24:7c:a3:a4:63:b0:60:f7:5a:f6:57:a4:89:7b:1a:
                    f3:2b:5a:ca:56:16:41:2a:c2:47:14:8d:fa:c2:d8:
                    15:46:aa:d8:9d:70:a9:32:43:fc:aa:5d:f0:0c:8b:
                    1b:8f:8b:17:d3:1c:d4:3f:57:d8:91:b3:74:44:4e:
                    f9:d2:67:d9:d7:00:e9:dd:4e:f6:ab:89:2a:a8:50:
                    f3:f5:d1:a4:b5:e0:6c:11:42:8b:34:29:97:ce:15:
                    28:c5:75:39:16:2d:51:3f:8d:89:29:e1:8e:f3:a6:
                    92:2c:31:9b:ee:48:32:54:3e:ea:5d:b2:95:a3:17:
                    6e:8c:a9:75:87:08:2e:bd:a7:48:0f:d9:4d:6c:c5:
                    0a:09:46:69:b3:e5:a6:5a:e2:8f:89:2a:1e:94:0b:
                    fb:43:1d:02:ec:fe:c0:61:ec:cb:f2:18:6e:96:54:
                    94:d6:6b:e3:c6:5d:65:73:62:47:cc:58:a0:e1:44:
                    7d:6c:3a:1b:7f:a5:99:4a:16:a8:e6:fd:ac:9e:d0:
                    f1:f2:72:7c:6c:ac:1f:56:11:8c:30:61:64:98:38:
                    36:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:9F:EB:3F:F4:8E:47:95:94:E2:CB:EF:43:B3:EB:61:08:C8:06:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/25d202df-6bec-4085-8c1b-d1f141557cfe/1c619daa-16a4-38fb-850d-9cd5873b1468.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/25d202df-6bec-4085-8c1b-d1f141557cfe/25d202df-6bec-4085-8c1b-d1f141557cfe.crl

            X509v3 Authority Key Identifier:
                keyid:62:29:36:6F:6F:B8:51:FB:6E:F9:A7:A1:71:11:EB:58:47:04:11:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/25d202df-6bec-4085-8c1b-d1f141557cfe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.144.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:fd:16:fc:d5:8a:9c:ec:9b:04:fc:c4:c3:0e:ce:24:f3:da:
         77:df:6e:44:6c:d6:b9:d8:d3:19:ec:d6:be:60:57:37:83:f2:
         a3:77:94:62:5f:fb:0a:40:b2:13:bc:c3:15:6e:6a:93:24:d3:
         51:fc:e4:1f:12:c0:0e:21:2c:a8:72:5c:03:be:69:6d:cb:c9:
         22:e6:a2:91:52:b5:e5:14:57:ac:cd:99:d6:dc:7d:52:69:30:
         43:ac:62:1c:c8:83:3b:56:25:6f:74:58:2d:c6:72:3e:4f:06:
         96:e4:c4:3f:3a:55:0c:93:8f:38:a3:15:73:13:06:5a:29:16:
         47:c3:6d:2c:30:76:da:38:d5:8b:28:1c:9a:c1:2b:a4:53:52:
         26:7a:16:22:91:fd:58:9b:c1:57:57:18:18:bc:1f:92:77:f0:
         62:13:34:27:5a:58:36:ff:25:b6:21:26:67:67:bd:d0:0a:8c:
         1f:0e:84:94:84:0f:2a:9e:1b:a2:fc:0c:16:22:60:00:1f:aa:
         ef:5d:51:8a:ae:89:49:da:17:53:e0:c1:44:64:20:fc:ae:15:
         d4:1b:05:f9:db:31:86:d9:28:11:34:69:96:84:ba:4d:7b:7b:
         59:28:0d:94:25:32:1d:96:a4:3e:49:51:19:a9:85:ce:d6:dd:
         57:4c:1d:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 22 21:33:43 2026 by rpki-client