Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45b0b374-863f-468e-a08d-342445e7a940/d094c554-69f5-3eed-a828-591b30c926cb.roa
File:                     d094c554-69f5-3eed-a828-591b30c926cb.roa (raw, json)
Hash identifier:          +GUOnoq+W84713NShgelAtp3N9Ql6MWMo60m4lE8zpY=
Subject key identifier:   8F:D7:AB:B5:17:D0:2A:81:EC:F6:EC:0F:EF:CC:0F:93:95:D1:28:92
Certificate issuer:       /CN=45b0b374-863f-468e-a08d-342445e7a940
Certificate serial:       010D0C9F4328584D143DA71275D6B2FD23745C80
Authority key identifier: 59:FA:91:A8:EA:FB:2B:2D:FE:57:AA:23:D6:D4:D5:97:6F:BC:6A:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45b0b374-863f-468e-a08d-342445e7a940.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45b0b374-863f-468e-a08d-342445e7a940/d094c554-69f5-3eed-a828-591b30c926cb.roa
Signing time:             Fri 06 Mar 2026 14:00:40 +0000
ROA not before:           Fri 06 Mar 2026 14:00:40 +0000
ROA not after:            Thu 04 Jun 2026 13:00:40 +0000
asID:                     63270
IP address blocks:        23.155.32.0/24 maxlen: 24
                          98.142.186.0/23 maxlen: 24
                          172.98.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45b0b374-863f-468e-a08d-342445e7a940/45b0b374-863f-468e-a08d-342445e7a940.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45b0b374-863f-468e-a08d-342445e7a940/45b0b374-863f-468e-a08d-342445e7a940.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45b0b374-863f-468e-a08d-342445e7a940.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:14:3d:a7:12:75:d6:b2:fd:23:74:5c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45b0b374-863f-468e-a08d-342445e7a940
        Validity
            Not Before: Mar  6 14:00:40 2026 GMT
            Not After : Jun  4 13:00:40 2026 GMT
        Subject: CN=dfda278c-ca8a-4b91-90a2-d725827d6736
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:d0:40:9e:38:79:4a:b5:11:8a:93:16:b3:c9:
                    be:75:b2:fd:cf:20:e3:7e:36:e2:0f:58:d6:4b:5c:
                    5a:9b:aa:a3:a0:68:d1:34:5e:00:54:34:85:99:4c:
                    a3:06:8d:78:f4:92:64:51:ec:20:b4:d5:45:f0:f6:
                    66:8f:94:f7:11:8c:ce:ea:76:0d:14:95:f8:c0:de:
                    0e:45:dd:c1:3d:66:ad:fc:52:98:11:aa:62:6b:34:
                    eb:cc:f9:75:b5:e4:be:f7:47:3a:ec:ad:b8:45:6c:
                    33:ae:aa:aa:95:d0:04:4e:7d:5d:c6:aa:36:9b:12:
                    c1:be:73:52:fb:db:9a:49:0b:ab:a1:5b:82:83:4e:
                    08:a0:d9:96:5a:63:f6:cd:97:f8:58:26:e9:61:3a:
                    03:ca:ed:15:c0:10:b1:74:87:71:41:c8:3b:2e:13:
                    35:77:25:c5:77:19:3a:59:79:b0:cb:7a:55:7a:27:
                    b1:39:af:df:69:89:79:b1:f3:b8:80:24:fb:42:7f:
                    5d:14:d4:07:6b:2d:4f:17:81:35:27:22:b7:63:af:
                    a7:db:55:81:f4:9b:e5:43:b5:ed:f3:3a:8e:e1:54:
                    9f:2a:ed:ea:f8:87:5f:c8:9d:64:4d:68:bd:ba:4a:
                    b8:69:17:de:29:d1:3a:f6:7a:4d:d1:12:d1:f9:90:
                    77:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:D7:AB:B5:17:D0:2A:81:EC:F6:EC:0F:EF:CC:0F:93:95:D1:28:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45b0b374-863f-468e-a08d-342445e7a940/d094c554-69f5-3eed-a828-591b30c926cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45b0b374-863f-468e-a08d-342445e7a940/45b0b374-863f-468e-a08d-342445e7a940.crl

            X509v3 Authority Key Identifier:
                keyid:59:FA:91:A8:EA:FB:2B:2D:FE:57:AA:23:D6:D4:D5:97:6F:BC:6A:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45b0b374-863f-468e-a08d-342445e7a940.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.155.32.0/24
                  98.142.186.0/23
                  172.98.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:02:3a:a5:ed:2c:5d:b3:97:70:f1:eb:cf:fc:f0:c2:0d:82:
         7b:43:ff:a2:6a:de:21:1f:5a:4d:71:24:e8:d8:7f:c2:a1:8a:
         02:a6:28:26:89:1b:9d:a1:b5:0d:06:e7:b0:65:a8:cc:f0:72:
         0c:b3:8b:a8:50:9f:fc:08:52:d6:1c:d4:70:ef:b1:e9:46:20:
         57:2a:3d:c1:6f:d0:50:e9:fb:43:3c:f1:c5:16:ac:11:91:cd:
         41:c6:21:d5:ac:32:25:dc:43:cb:7b:c7:4f:be:00:36:2d:6f:
         ed:6b:c1:80:77:f8:6f:4e:5c:8c:31:08:7f:a6:18:a6:78:dc:
         d2:50:93:fe:ad:d9:cc:0d:38:69:a9:59:34:4f:42:fc:17:2f:
         c2:70:c0:75:69:a3:74:64:77:3a:8b:03:9b:20:c1:b9:96:dc:
         01:54:45:15:72:97:1b:06:9e:bb:96:92:1b:fa:55:71:ac:aa:
         92:ab:6f:ae:0b:2d:e2:78:53:31:3d:3e:70:10:42:14:78:da:
         36:86:e5:b6:48:12:8e:b7:2f:46:b0:0e:e9:a6:ac:43:27:0f:
         0d:9f:34:37:a1:f5:d8:6f:4f:58:8c:79:bc:89:c9:d9:c3:14:
         08:13:08:24:3f:27:bb:f2:ae:f3:46:b4:e5:9b:68:8c:25:3d:
         7b:bf:26:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 09:59:57 2026 by rpki-client