Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/70444867-721e-4deb-beb4-5d6be73da034/8e9dd09e-f968-3e9d-aaa4-300bf4d2ae8b.roa
File:                     8e9dd09e-f968-3e9d-aaa4-300bf4d2ae8b.roa (raw, json)
Hash identifier:          t1v/vgTOETSIrG1WiTuYV8ciaT3w5ByY8YxCpTSqLyo=
Subject key identifier:   C0:28:27:8E:2A:02:1B:69:63:ED:83:02:77:1A:72:E2:D8:D6:71:8C
Certificate issuer:       /CN=70444867-721e-4deb-beb4-5d6be73da034
Certificate serial:       010D0C9F4328584CD2E405E6EE02C0DFC9DCDE40
Authority key identifier: 9F:4B:E9:26:A5:D9:27:C6:10:51:D7:72:27:3C:AC:AB:CC:6D:78:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/70444867-721e-4deb-beb4-5d6be73da034.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/70444867-721e-4deb-beb4-5d6be73da034/8e9dd09e-f968-3e9d-aaa4-300bf4d2ae8b.roa
Signing time:             Wed 11 Feb 2026 04:13:50 +0000
ROA not before:           Wed 11 Feb 2026 04:13:50 +0000
ROA not after:            Tue 12 May 2026 03:13:50 +0000
asID:                     32205
IP address blocks:        23.153.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/70444867-721e-4deb-beb4-5d6be73da034/70444867-721e-4deb-beb4-5d6be73da034.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/70444867-721e-4deb-beb4-5d6be73da034/70444867-721e-4deb-beb4-5d6be73da034.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/70444867-721e-4deb-beb4-5d6be73da034.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d2:e4:05:e6:ee:02:c0:df:c9:dc:de:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70444867-721e-4deb-beb4-5d6be73da034
        Validity
            Not Before: Feb 11 04:13:50 2026 GMT
            Not After : May 12 03:13:50 2026 GMT
        Subject: CN=d58b3647-dc20-46b8-b620-565959806f81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:aa:cf:10:0d:19:51:85:50:22:51:24:c6:7d:
                    7f:63:95:e2:70:a6:a1:ab:f9:31:75:f2:f4:83:90:
                    a2:21:cf:b4:d7:52:03:72:e0:98:79:e6:55:d6:60:
                    1f:e2:1f:81:f7:bb:33:77:90:e7:b7:12:e1:56:e1:
                    5e:d8:f6:51:dd:09:97:f4:f9:00:9f:b1:d4:44:0e:
                    ef:8a:eb:13:04:5c:ff:d4:ce:a4:1e:72:85:21:65:
                    02:8b:61:ee:89:c1:cc:ee:17:4f:1f:16:0a:dc:59:
                    11:d7:a1:ec:6b:46:bc:3b:02:07:7e:c6:f9:2e:4c:
                    0d:1a:8f:07:b4:e0:bc:8b:31:d6:7a:cc:72:ef:64:
                    78:26:38:84:e2:4a:10:11:68:ce:24:0c:b0:4a:6e:
                    8a:1d:10:ca:da:01:7d:a1:17:25:4c:db:46:38:10:
                    de:0b:c4:e2:97:6f:ba:a9:b7:1c:9c:84:63:c4:bd:
                    8e:e6:7e:d0:46:7d:32:5b:74:8b:54:c4:51:88:f0:
                    e2:72:e3:29:46:1d:56:78:a7:79:15:a3:ff:91:69:
                    9c:34:8c:58:39:d6:61:dc:c6:5d:26:11:1b:e4:06:
                    3c:c9:01:59:94:c6:ca:f1:e3:00:74:32:7f:61:51:
                    34:16:ea:83:84:0d:53:c8:58:1e:48:97:fd:31:15:
                    62:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:28:27:8E:2A:02:1B:69:63:ED:83:02:77:1A:72:E2:D8:D6:71:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/70444867-721e-4deb-beb4-5d6be73da034/8e9dd09e-f968-3e9d-aaa4-300bf4d2ae8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/70444867-721e-4deb-beb4-5d6be73da034/70444867-721e-4deb-beb4-5d6be73da034.crl

            X509v3 Authority Key Identifier:
                keyid:9F:4B:E9:26:A5:D9:27:C6:10:51:D7:72:27:3C:AC:AB:CC:6D:78:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/70444867-721e-4deb-beb4-5d6be73da034.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.153.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:d6:aa:51:03:d3:ab:7a:68:be:e7:3c:1b:8a:65:03:e0:a9:
         36:a7:22:8b:6b:92:81:99:de:be:b2:52:25:9c:e6:93:a7:29:
         ac:24:7b:e0:3f:aa:d9:3f:80:e0:a7:28:44:e4:d5:3d:91:e8:
         48:ff:3e:51:ef:f7:1c:1e:6b:a5:dc:df:d8:68:88:88:a3:32:
         36:02:83:c0:80:10:f4:a2:b3:d0:8a:59:8c:ee:2e:ed:a0:c7:
         fe:17:2a:03:d4:ff:f0:d9:5a:73:0f:35:16:c5:23:d1:13:37:
         61:83:92:63:f3:4a:15:dd:9f:68:8b:ac:bf:50:6a:18:ac:48:
         b0:4b:4a:ef:27:c9:ae:b3:00:eb:12:f7:84:3a:20:71:70:09:
         a9:37:10:5b:ba:c5:09:ff:5a:ab:6c:c9:a7:26:93:93:c7:b9:
         3f:35:b7:9a:6b:2e:fe:66:3b:12:03:84:19:fd:5f:3a:ca:ab:
         73:57:45:3d:4b:ad:a1:9c:1c:73:15:09:ba:7d:f2:93:7d:9f:
         44:0b:0e:bf:f0:be:61:a5:3e:0d:25:74:1e:b8:83:88:ee:7a:
         f4:90:10:8c:67:65:bc:4a:bf:22:5d:be:29:87:56:6e:c1:10:
         49:2f:bd:85:f9:bd:47:52:35:13:06:c6:88:f4:e6:44:78:d0:
         d9:0e:b8:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 27 01:56:27 2026 by rpki-client