Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9cfaab4b-7d49-43b7-80dd-84ab0ebeb214/33e98f4a-46f2-39d5-8f60-8120def084e3.roa
File:                     33e98f4a-46f2-39d5-8f60-8120def084e3.roa (raw, json)
Hash identifier:          w2yl7VQeq84T/p9EjzmyThL3+vKQ/slclv66Em+c188=
Subject key identifier:   24:B5:67:E6:F0:14:4A:97:E4:96:92:36:75:43:DB:79:31:A7:18:1A
Certificate issuer:       /CN=9cfaab4b-7d49-43b7-80dd-84ab0ebeb214
Certificate serial:       010D0C9F4328584CB551C3C4D46E88D5087FB280
Authority key identifier: 61:9D:D7:B9:B2:35:05:84:A5:AC:4A:5E:DB:81:0E:00:C6:38:24:2D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9cfaab4b-7d49-43b7-80dd-84ab0ebeb214.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9cfaab4b-7d49-43b7-80dd-84ab0ebeb214/33e98f4a-46f2-39d5-8f60-8120def084e3.roa
Signing time:             Sat 31 Jan 2026 14:00:39 +0000
ROA not before:           Sat 31 Jan 2026 14:00:39 +0000
ROA not after:            Fri 01 May 2026 13:00:39 +0000
asID:                     30381
IP address blocks:        23.145.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9cfaab4b-7d49-43b7-80dd-84ab0ebeb214/9cfaab4b-7d49-43b7-80dd-84ab0ebeb214.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9cfaab4b-7d49-43b7-80dd-84ab0ebeb214/9cfaab4b-7d49-43b7-80dd-84ab0ebeb214.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9cfaab4b-7d49-43b7-80dd-84ab0ebeb214.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b5:51:c3:c4:d4:6e:88:d5:08:7f:b2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cfaab4b-7d49-43b7-80dd-84ab0ebeb214
        Validity
            Not Before: Jan 31 14:00:39 2026 GMT
            Not After : May  1 13:00:39 2026 GMT
        Subject: CN=584ce8e7-1844-4d82-9955-c644eb3e8bef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e4:e3:39:4e:d0:a2:52:1c:3f:12:6c:15:6e:
                    b8:d0:30:78:b2:9c:b6:a3:d0:8a:60:ae:df:58:11:
                    9e:88:01:c7:c5:08:6d:15:ac:ab:26:3d:5a:33:35:
                    72:a9:ec:f3:7e:28:a0:fd:24:63:4b:11:42:61:0e:
                    c6:62:11:14:ed:69:05:7e:2d:2b:b9:5b:4b:aa:76:
                    09:77:ce:3a:50:8a:5c:a1:7b:bd:bf:a5:d2:c8:42:
                    e3:ec:4e:fe:37:9b:80:51:8e:0e:d2:a2:1f:1a:1a:
                    2c:39:a8:0b:d5:fb:b4:02:59:49:65:fd:f7:e8:4f:
                    36:37:22:80:e8:fb:f8:3b:85:99:a4:51:50:c1:8d:
                    83:91:8a:9a:70:5a:22:a4:75:c6:c4:48:ee:7b:2d:
                    7b:c1:09:8a:37:bd:c9:9a:7e:85:d5:ab:e5:0e:65:
                    4e:28:b8:4e:11:ee:75:34:1c:58:a7:8b:e4:c7:2d:
                    01:ec:2c:6c:a4:4b:0e:27:d9:30:cb:1c:a7:c5:53:
                    ed:84:2f:32:9b:e4:16:60:a7:23:aa:9e:73:3c:87:
                    40:d9:7e:51:67:f8:af:b5:b7:c5:e3:8d:47:42:47:
                    f7:63:23:32:3d:30:80:b8:42:a7:5a:70:b2:4d:fe:
                    e3:65:87:1a:94:6c:b0:c7:ef:58:97:ef:4c:54:22:
                    64:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:B5:67:E6:F0:14:4A:97:E4:96:92:36:75:43:DB:79:31:A7:18:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9cfaab4b-7d49-43b7-80dd-84ab0ebeb214/33e98f4a-46f2-39d5-8f60-8120def084e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9cfaab4b-7d49-43b7-80dd-84ab0ebeb214/9cfaab4b-7d49-43b7-80dd-84ab0ebeb214.crl

            X509v3 Authority Key Identifier:
                keyid:61:9D:D7:B9:B2:35:05:84:A5:AC:4A:5E:DB:81:0E:00:C6:38:24:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9cfaab4b-7d49-43b7-80dd-84ab0ebeb214.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.145.244.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:2f:d2:c5:f5:73:14:c8:c9:d5:6d:63:98:1e:d9:19:14:9d:
         52:98:fd:d7:51:bb:ae:e3:4c:c1:c1:74:fe:47:b7:b8:8a:bb:
         3c:37:99:cf:75:ae:50:d5:b0:92:31:61:eb:70:9b:10:8d:9d:
         d7:03:fe:25:63:34:62:7c:f6:d3:b8:2d:0f:5e:20:49:40:12:
         5a:56:47:f6:e2:96:b3:31:6b:25:43:2f:a7:90:4e:cf:d2:3f:
         d8:41:06:6c:f5:c1:58:9e:42:07:7e:d4:4c:0f:e8:88:41:27:
         2f:09:dc:08:21:97:73:7f:33:24:ac:4e:16:83:44:f5:fe:e2:
         0d:45:09:42:81:11:0e:8c:2c:a5:7c:19:2a:77:80:fe:9f:fb:
         4d:75:40:51:fa:a5:58:1c:79:4d:6b:f2:53:21:21:39:8d:63:
         e3:4a:e6:67:bc:80:72:29:c0:bb:1d:b3:40:90:45:e8:9b:5a:
         80:46:b3:50:c2:17:b5:c8:cc:95:c9:72:44:2e:99:96:85:61:
         7b:f4:fc:f4:27:4d:93:26:36:65:48:36:19:43:3c:e7:5d:31:
         49:76:21:2a:da:91:13:6d:ed:e8:7d:7c:3a:b9:4b:41:74:05:
         87:01:d1:c5:30:00:a0:f2:47:e2:5d:03:18:f9:74:24:11:ee:
         f9:e3:a9:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 27 01:57:50 2026 by rpki-client