Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/08ed5d26-737b-4818-a76d-ac026d331614/88878503-ca57-3c1e-b74f-4fdbb01c2b80.roa
File:                     88878503-ca57-3c1e-b74f-4fdbb01c2b80.roa (raw, json)
Hash identifier:          /0fAH8QRiU49khK3XruH9AWJ/Tj0INig6woDd5YFqV4=
Subject key identifier:   08:CB:73:F8:EC:DD:C1:5F:03:13:59:23:DA:78:36:92:90:CD:52:C1
Certificate issuer:       /CN=08ed5d26-737b-4818-a76d-ac026d331614
Certificate serial:       010D0C9F4328584CFB73158AA023BEC075B6D680
Authority key identifier: B8:54:5F:B0:9B:1A:05:9C:0F:03:AE:4F:1D:3A:0A:17:9F:0D:D9:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/08ed5d26-737b-4818-a76d-ac026d331614.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/08ed5d26-737b-4818-a76d-ac026d331614/88878503-ca57-3c1e-b74f-4fdbb01c2b80.roa
Signing time:             Wed 25 Feb 2026 16:54:25 +0000
ROA not before:           Wed 25 Feb 2026 16:54:25 +0000
ROA not after:            Tue 26 May 2026 15:54:25 +0000
asID:                     2914
IP address blocks:        128.254.176.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/08ed5d26-737b-4818-a76d-ac026d331614/08ed5d26-737b-4818-a76d-ac026d331614.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/08ed5d26-737b-4818-a76d-ac026d331614/08ed5d26-737b-4818-a76d-ac026d331614.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/08ed5d26-737b-4818-a76d-ac026d331614.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fb:73:15:8a:a0:23:be:c0:75:b6:d6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08ed5d26-737b-4818-a76d-ac026d331614
        Validity
            Not Before: Feb 25 16:54:25 2026 GMT
            Not After : May 26 15:54:25 2026 GMT
        Subject: CN=f0a98553-0127-4b5d-9295-e1b08cc4ac59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:66:13:b9:05:e1:15:c6:b6:15:bd:0b:c1:92:
                    7d:dd:01:3b:47:47:4c:26:6f:b6:d7:33:10:1c:45:
                    32:a2:a0:65:a8:3c:1b:0b:f9:fe:8b:63:95:3e:50:
                    fc:4f:10:1b:ad:09:e7:b2:7c:60:68:18:cc:7e:98:
                    0a:68:28:50:e8:f3:4a:5b:93:d9:50:c8:76:8b:ed:
                    4e:57:8c:c6:2f:c5:9f:be:9b:4d:29:e3:ee:4d:18:
                    16:2c:ca:2f:0a:a0:cc:31:a3:7b:1e:3e:3c:eb:7b:
                    17:11:17:2e:52:7d:72:e7:8c:c9:07:f9:e4:a2:4e:
                    3e:a5:57:b8:e7:41:70:81:fe:a6:9c:42:c0:9f:19:
                    00:8f:cc:c3:e0:09:3c:55:97:3e:52:2a:f3:3e:49:
                    34:65:e9:bd:15:61:b8:7e:97:4e:a2:98:58:d1:de:
                    9b:57:7d:b7:01:fc:09:c1:5f:46:a8:5d:f2:08:2b:
                    a2:7a:70:bf:c7:dd:5e:f3:eb:5a:9f:88:b7:da:44:
                    9f:76:c9:79:54:bb:61:83:f4:7a:9c:e6:90:4f:b4:
                    12:95:30:fe:24:b5:5c:01:2a:37:fc:8f:5c:23:35:
                    13:a7:af:a0:b0:b7:e6:8c:4e:95:ae:d8:a8:3a:31:
                    9b:54:3f:9e:94:c4:e1:a6:11:1f:90:3f:96:27:04:
                    d7:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:CB:73:F8:EC:DD:C1:5F:03:13:59:23:DA:78:36:92:90:CD:52:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/08ed5d26-737b-4818-a76d-ac026d331614/88878503-ca57-3c1e-b74f-4fdbb01c2b80.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/08ed5d26-737b-4818-a76d-ac026d331614/08ed5d26-737b-4818-a76d-ac026d331614.crl

            X509v3 Authority Key Identifier:
                keyid:B8:54:5F:B0:9B:1A:05:9C:0F:03:AE:4F:1D:3A:0A:17:9F:0D:D9:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/08ed5d26-737b-4818-a76d-ac026d331614.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.254.176.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:a4:b5:3d:8f:4d:2a:c1:8e:78:d2:5d:b9:a2:44:d5:0a:17:
         53:8b:e1:1d:81:43:d0:ad:cd:b6:47:2a:32:ba:8e:b5:d7:4a:
         3a:56:59:c0:61:92:43:bc:b8:a3:ca:82:80:b8:96:13:ef:69:
         c4:5b:f4:b5:55:db:27:46:73:75:ab:24:5e:7c:b2:4a:f2:17:
         32:40:77:0d:ab:4f:e3:9a:df:d4:12:a4:43:f3:ef:4b:e0:fc:
         50:d0:9c:73:f1:92:15:4d:36:97:93:ab:3b:ab:a6:83:11:f3:
         a9:62:00:d7:29:86:15:b0:10:25:bc:9c:7e:7f:28:b6:a9:03:
         6a:5e:34:6f:51:95:73:74:23:42:1b:1b:5a:cb:5c:d2:2a:c2:
         e5:6f:17:11:f6:b3:10:d7:3d:d4:9f:cc:5c:76:a7:47:6c:49:
         12:49:7e:a5:d0:73:21:9c:e2:bd:4d:6f:f4:da:f3:b2:65:44:
         07:58:94:31:ec:07:17:03:c2:14:ff:7a:8d:5f:f6:9e:f5:18:
         01:b7:77:fb:dd:60:b3:35:f0:89:9a:6f:0c:2c:52:2e:df:4d:
         80:bd:37:84:5e:57:64:4d:0f:43:6e:1e:77:1f:1c:fa:2f:c9:
         3a:38:4b:3b:7c:44:13:df:2e:30:de:85:ff:8b:49:03:5e:72:
         60:e1:38:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:20:51 2026 by rpki-client