Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb/9a634cdb-3f00-32ed-b82a-68d49afe6ccf.roa
File:                     9a634cdb-3f00-32ed-b82a-68d49afe6ccf.roa (raw, json)
Hash identifier:          TqFE6guQjkyysJT43moacJGdteClxg7jqtmpRUGoVW0=
Subject key identifier:   36:83:E8:08:F6:0A:B4:8A:DE:EF:FB:FB:72:75:1F:A1:1C:39:25:67
Certificate issuer:       /CN=54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb
Certificate serial:       010D0C9F4328584CAE5E8FFC6CD9411000373620
Authority key identifier: 53:65:50:E9:F8:19:F1:12:15:D9:A6:AC:59:7E:1F:43:51:66:D8:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb/9a634cdb-3f00-32ed-b82a-68d49afe6ccf.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     22296
IP address blocks:        23.155.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Feb 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:5e:8f:fc:6c:d9:41:10:00:37:36:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=c1bc887f-3203-4572-ac16-d8847f711e86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ae:91:48:a1:29:03:d8:5f:a3:a8:ae:e4:ee:
                    f2:c4:40:b8:9f:63:53:0c:d5:2b:a9:6e:a3:7d:ef:
                    0b:3e:f7:fb:44:21:af:2a:52:e9:9f:ef:b6:18:aa:
                    c4:6c:dc:9a:7f:33:ee:ad:fc:02:bf:6b:44:08:2e:
                    ae:74:30:13:f1:af:c1:83:ab:dc:a5:32:fe:4f:38:
                    21:95:84:d1:75:25:e3:83:f5:02:1e:a5:99:79:1e:
                    f8:78:1b:bb:7c:85:b3:75:ff:3f:f8:c8:bf:fe:7f:
                    99:7a:e9:a5:c1:38:86:b6:db:4f:c7:5f:3b:7a:92:
                    b2:89:53:43:9e:37:f2:cb:d5:0d:3f:b3:f2:8f:9e:
                    40:03:8d:ff:2f:99:ce:03:69:e5:fd:4f:f6:02:3b:
                    ca:26:7a:5b:6d:91:28:2f:c8:e2:8d:55:50:cb:f7:
                    90:31:a0:72:6f:dc:88:d3:4e:9e:82:27:4f:53:56:
                    0b:3c:25:93:e7:93:88:ca:b8:56:8c:7b:a8:43:d6:
                    50:51:7c:7f:d4:05:35:dd:4b:63:b3:e3:38:40:fc:
                    16:d1:a7:c1:4f:4d:04:cc:01:c2:1a:05:ca:7d:8e:
                    96:2a:ba:03:f3:4d:58:91:9f:a6:47:8b:fe:be:c2:
                    59:dd:17:03:ad:b2:b4:69:94:ba:62:cd:1c:aa:70:
                    0a:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:83:E8:08:F6:0A:B4:8A:DE:EF:FB:FB:72:75:1F:A1:1C:39:25:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb/9a634cdb-3f00-32ed-b82a-68d49afe6ccf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb.crl

            X509v3 Authority Key Identifier:
                keyid:53:65:50:E9:F8:19:F1:12:15:D9:A6:AC:59:7E:1F:43:51:66:D8:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.155.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:5c:6e:cc:d0:aa:ef:0b:3c:6c:62:41:55:76:51:c2:68:df:
         20:ef:56:37:90:5b:38:77:f5:84:4d:bd:8c:bb:cd:1b:76:53:
         62:93:a4:15:eb:76:87:1a:0b:0f:22:99:02:9e:bd:0e:c6:b5:
         a7:71:98:cd:47:7c:7e:4f:08:09:ec:d5:0d:3e:41:bf:51:09:
         97:fd:ab:f5:1d:bf:0b:dd:d7:4a:e2:69:18:05:80:c2:5e:fe:
         6e:c6:d8:e9:ac:46:5d:70:77:07:4b:f3:75:65:e3:ef:8d:31:
         01:03:c3:93:3e:97:55:f0:b6:b7:94:69:a0:9c:00:1d:bb:f8:
         8d:9e:ad:18:13:ff:8b:5e:c4:74:a2:a4:ab:7c:e4:ae:0b:6e:
         f3:e0:6b:22:f6:cd:4c:39:a5:77:75:7b:5d:b5:ad:47:6a:ca:
         52:04:30:22:25:17:da:c0:c1:fe:4e:13:91:ea:8c:d2:af:1d:
         af:cd:e0:8a:fe:c7:99:c0:97:4f:c2:ca:05:58:1e:0d:9b:6b:
         75:6a:ff:7c:f0:39:da:c7:e5:72:03:1a:d9:31:c3:6a:51:5b:
         d2:b3:4e:c5:b4:65:24:f4:3e:81:09:ff:c5:bf:63:33:d4:49:
         6b:bc:3b:95:30:0c:a2:c8:b4:86:30:4e:49:c7:cd:22:60:cf:
         2e:df:65:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:12:44 2026 by rpki-client