Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/f88ffbb9-f86a-36c3-ad20-333e7fa84114.roa
File:                     f88ffbb9-f86a-36c3-ad20-333e7fa84114.roa (raw, json)
Hash identifier:          /5c/OjYhz9cKeGOGKzPW4Eqbz2c+L5YDdlqn5h9gqqA=
Subject key identifier:   CC:71:EC:3A:EE:31:C2:0F:2F:12:9D:F7:72:8D:95:A9:54:9C:58:70
Certificate issuer:       /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
Certificate serial:       010D0C9F4328584CCD0C97F73AC98507A4684900
Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/f88ffbb9-f86a-36c3-ad20-333e7fa84114.roa
Signing time:             Mon 09 Feb 2026 02:00:31 +0000
ROA not before:           Mon 09 Feb 2026 02:00:31 +0000
ROA not after:            Sun 10 May 2026 01:00:31 +0000
asID:                     13445
IP address blocks:        23.89.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Feb 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:cd:0c:97:f7:3a:c9:85:07:a4:68:49:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
        Validity
            Not Before: Feb  9 02:00:31 2026 GMT
            Not After : May 10 01:00:31 2026 GMT
        Subject: CN=bfc1d71b-22fb-4856-8b52-889be2e1dc15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f4:5a:8f:7a:ba:34:cf:3c:de:73:b5:ba:1c:
                    ec:10:73:d7:9e:4d:3d:b9:5b:0e:a7:b9:42:b7:a9:
                    1e:db:82:10:7e:ef:f2:dd:91:5b:f7:27:5e:1d:d3:
                    63:54:6a:76:53:05:a9:94:d3:a5:a3:ea:b0:37:21:
                    9f:3e:de:11:36:cb:27:90:70:ce:07:81:21:11:d1:
                    ad:45:c7:d1:07:d8:15:06:4b:c9:ae:1c:18:ea:e8:
                    8c:0f:7f:f3:ea:e0:70:2a:df:30:de:4d:fa:a7:ef:
                    08:f8:bd:d4:35:bf:87:5f:cb:f8:46:e9:ea:12:69:
                    9b:24:3b:86:fa:e7:d9:e1:b2:73:9a:bf:a5:16:46:
                    31:b9:9d:59:d8:8a:40:ed:65:88:81:31:ca:6d:80:
                    8b:71:1b:20:d4:40:45:78:a8:4b:8f:28:e2:1a:93:
                    12:6c:8f:fa:18:bd:e0:be:3e:1a:11:64:66:3c:0c:
                    34:7b:02:b9:83:28:99:61:6f:e1:b8:ad:f9:fa:07:
                    77:f5:31:76:ff:e1:15:79:bf:bc:df:88:4a:80:89:
                    37:9b:dc:3a:3e:af:49:e7:4d:8c:c1:21:83:ba:8a:
                    32:5d:c2:3c:2d:a2:95:5c:4c:31:0c:e1:04:dc:f8:
                    e9:f9:1f:26:8a:a7:f8:0e:ef:94:ab:63:24:5b:fc:
                    d7:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:71:EC:3A:EE:31:C2:0F:2F:12:9D:F7:72:8D:95:A9:54:9C:58:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/f88ffbb9-f86a-36c3-ad20-333e7fa84114.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl

            X509v3 Authority Key Identifier:
                keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.89.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c3:cf:d1:a6:90:b0:c8:02:9d:1e:a2:83:c3:2d:53:d5:b9:6b:
         b8:8c:06:95:84:0c:71:61:e1:e2:2a:94:59:dd:27:d1:ab:89:
         ad:87:93:ef:10:be:f4:4e:55:1b:1b:5c:1b:05:dc:70:a5:0d:
         53:01:db:41:2c:17:8d:7c:1a:82:0a:6d:1d:e1:78:d9:20:39:
         d2:e3:cb:ca:17:20:dd:50:81:ea:8b:b1:3d:fa:19:5d:57:25:
         73:3c:82:1f:c9:fa:a5:e2:2f:d0:c6:4c:41:1c:31:9d:3c:39:
         d5:ee:0e:38:ec:5c:e5:a5:79:6d:1a:06:c5:05:13:fc:5b:a2:
         4a:e4:0c:14:52:c6:1f:9a:ac:92:91:6a:fd:72:9e:d7:a1:04:
         4a:f9:f1:c4:d4:9e:31:1b:7e:51:01:8e:a4:03:6b:9b:2c:05:
         ef:bd:e1:bf:fc:3e:92:98:52:f3:c3:7f:74:f7:2a:aa:f5:d1:
         f6:9d:a2:22:29:b9:bb:51:3b:b6:de:61:7e:81:2c:5e:9c:eb:
         26:c8:bc:c8:0f:a4:e1:9a:e1:e6:eb:e1:fc:40:63:fe:ff:4e:
         26:39:b0:5e:ec:0f:dc:24:95:57:cd:66:3d:01:c8:96:2e:82:
         72:6b:a7:62:64:47:cd:12:6d:df:7e:5b:85:b1:df:cd:7d:3d:
         78:d8:05:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 10:44:11 2026 by rpki-client