Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/24570cf0-6be7-4f66-a550-b04cfd954538/175b01ae-d440-3465-a430-3580015e4b3c.roa
File:                     175b01ae-d440-3465-a430-3580015e4b3c.roa (raw, json)
Hash identifier:          NcHGbgEEE6NGWzRsfW6EcyNSJ1877CeZP0vwBMEG040=
Subject key identifier:   DE:58:7F:60:16:71:78:A7:63:D8:15:71:95:6D:1F:A5:82:B6:FE:6E
Certificate issuer:       /CN=24570cf0-6be7-4f66-a550-b04cfd954538
Certificate serial:       010D0C9F4328584CC3474A91AC1ACCA43596D2A0
Authority key identifier: 0A:C0:D2:13:85:AA:09:75:83:97:EF:B6:FB:54:0A:9B:77:8D:D2:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/24570cf0-6be7-4f66-a550-b04cfd954538.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/24570cf0-6be7-4f66-a550-b04cfd954538/175b01ae-d440-3465-a430-3580015e4b3c.roa
Signing time:             Thu 05 Feb 2026 14:00:40 +0000
ROA not before:           Thu 05 Feb 2026 14:00:40 +0000
ROA not after:            Wed 06 May 2026 13:00:40 +0000
asID:                     64079
IP address blocks:        23.144.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/24570cf0-6be7-4f66-a550-b04cfd954538/24570cf0-6be7-4f66-a550-b04cfd954538.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/24570cf0-6be7-4f66-a550-b04cfd954538/24570cf0-6be7-4f66-a550-b04cfd954538.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/24570cf0-6be7-4f66-a550-b04cfd954538.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c3:47:4a:91:ac:1a:cc:a4:35:96:d2:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24570cf0-6be7-4f66-a550-b04cfd954538
        Validity
            Not Before: Feb  5 14:00:40 2026 GMT
            Not After : May  6 13:00:40 2026 GMT
        Subject: CN=5cd12673-3c96-4c04-9b84-d9ba568c07eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:67:5c:7c:01:cd:55:83:88:ae:1d:9e:64:ae:
                    f0:41:9d:f9:d3:42:d2:c6:d1:89:79:af:7a:70:75:
                    b2:ab:ee:20:0c:a8:0e:67:ae:b0:d0:b5:68:d6:75:
                    b3:f6:d1:b6:b7:02:cd:17:66:56:0a:31:c1:2d:c9:
                    35:77:0b:79:7a:96:c4:e6:9f:a2:ec:47:f4:56:24:
                    26:c5:11:19:2a:5b:dd:54:d6:55:fe:ce:c6:61:5e:
                    27:5d:2f:2f:a8:01:0b:e6:74:95:66:5e:8c:10:b6:
                    8c:68:ee:f1:1e:51:42:8e:0d:90:e3:d5:53:91:64:
                    da:c1:d4:1e:ae:98:1a:66:71:6f:7e:31:ef:02:d5:
                    e1:f4:27:57:99:5c:40:4a:97:d6:64:f8:a1:21:e8:
                    40:b0:5a:c7:f4:01:5e:e5:07:8e:f5:0e:67:a8:58:
                    c3:0e:27:0a:27:da:3b:44:83:4f:46:99:4d:aa:48:
                    99:6f:69:5b:7c:25:da:69:60:d9:dd:58:65:3e:ff:
                    85:a9:d6:f4:fe:7a:59:a6:d1:41:1b:b5:42:9a:80:
                    da:84:82:d3:d0:0c:5e:f5:b7:4f:6c:fc:1f:e1:3d:
                    0c:ac:07:27:e1:c7:15:bb:e7:b7:fa:f6:31:90:f3:
                    d9:3e:e3:db:bd:85:fb:db:e0:a2:a9:c0:b5:2c:64:
                    a4:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:58:7F:60:16:71:78:A7:63:D8:15:71:95:6D:1F:A5:82:B6:FE:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/24570cf0-6be7-4f66-a550-b04cfd954538/175b01ae-d440-3465-a430-3580015e4b3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/24570cf0-6be7-4f66-a550-b04cfd954538/24570cf0-6be7-4f66-a550-b04cfd954538.crl

            X509v3 Authority Key Identifier:
                keyid:0A:C0:D2:13:85:AA:09:75:83:97:EF:B6:FB:54:0A:9B:77:8D:D2:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/24570cf0-6be7-4f66-a550-b04cfd954538.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.144.140.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:d5:95:86:04:b1:12:32:39:f7:a9:d2:e5:a6:79:00:5d:a2:
         79:ba:5c:b2:db:95:1e:ca:ee:21:15:ad:e1:32:8c:a0:dd:22:
         78:06:93:f8:16:66:c1:69:cb:d6:aa:f5:03:06:27:e4:9e:4c:
         20:07:c8:37:69:2c:e3:aa:e8:09:dc:cb:bb:72:f7:f0:4c:6f:
         d2:bd:4e:c1:b2:6e:18:a8:d5:aa:c1:0a:0d:44:37:8a:c7:a7:
         10:cd:22:a5:bd:8f:75:b0:de:a2:be:f1:3d:ca:63:46:74:f4:
         a2:46:2e:87:bd:e9:d4:89:bb:50:e5:44:7f:06:1f:24:2c:69:
         8c:72:98:e8:33:32:21:a2:f5:33:a2:08:d2:2e:5d:f6:68:df:
         66:c2:77:59:13:c5:0b:1d:c6:ff:08:cc:fb:24:c8:2b:08:65:
         6f:96:22:7d:29:8d:4a:eb:f7:88:da:ff:dc:43:d5:12:79:0f:
         ab:5c:dd:9a:84:ed:81:cf:f3:8d:36:6e:7a:9b:bb:50:ba:cf:
         3b:64:82:fa:cf:56:b3:d9:2f:e6:3b:eb:f4:9a:f3:27:85:aa:
         89:e6:c8:36:d4:91:5d:8f:13:ec:5a:31:11:6b:fa:31:a8:13:
         33:d0:15:23:54:38:be:3f:2a:89:5f:76:a6:aa:9e:37:6e:23:
         c8:45:2f:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 27 10:40:05 2026 by rpki-client