Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0f73ad8d-cb5a-46a8-a5f3-8f9014fde58c/9515eff7-97eb-3b07-a48d-6c9f3e651e31.roa
File:                     9515eff7-97eb-3b07-a48d-6c9f3e651e31.roa (raw, json)
Hash identifier:          xkmDbs4tcyB9RmA1PNoO4Kgy8ToHdfFzg2oaWAVmo44=
Subject key identifier:   4F:D0:2E:2D:54:48:1B:00:0F:1C:67:61:2C:72:52:57:7C:B7:C9:9F
Certificate issuer:       /CN=0f73ad8d-cb5a-46a8-a5f3-8f9014fde58c
Certificate serial:       010D0C9F4328584CCE720D67BF97A78760B0E300
Authority key identifier: 97:C8:FC:AD:B8:85:C4:F1:E0:95:9A:D5:DD:8E:1B:39:56:CB:C0:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0f73ad8d-cb5a-46a8-a5f3-8f9014fde58c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0f73ad8d-cb5a-46a8-a5f3-8f9014fde58c/9515eff7-97eb-3b07-a48d-6c9f3e651e31.roa
Signing time:             Mon 09 Feb 2026 14:00:39 +0000
ROA not before:           Mon 09 Feb 2026 14:00:39 +0000
ROA not after:            Sun 10 May 2026 13:00:39 +0000
asID:                     401773
IP address blocks:        199.5.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0f73ad8d-cb5a-46a8-a5f3-8f9014fde58c/0f73ad8d-cb5a-46a8-a5f3-8f9014fde58c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0f73ad8d-cb5a-46a8-a5f3-8f9014fde58c/0f73ad8d-cb5a-46a8-a5f3-8f9014fde58c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0f73ad8d-cb5a-46a8-a5f3-8f9014fde58c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ce:72:0d:67:bf:97:a7:87:60:b0:e3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f73ad8d-cb5a-46a8-a5f3-8f9014fde58c
        Validity
            Not Before: Feb  9 14:00:39 2026 GMT
            Not After : May 10 13:00:39 2026 GMT
        Subject: CN=5424d000-818c-4da4-9b5e-4a3c88f429b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:4f:72:19:1e:9b:a5:d7:17:60:22:a6:17:c7:
                    7a:f6:71:13:10:87:0a:32:c6:b6:3d:c0:f8:e3:02:
                    8f:80:e2:6b:10:c7:81:de:61:c7:aa:c5:cf:e5:82:
                    1a:58:72:80:83:ad:26:f3:5b:81:d9:1c:4b:e3:a6:
                    46:51:e0:a8:0c:38:e6:ff:9d:bf:d0:9c:0a:ef:68:
                    d0:af:a8:d7:73:ac:b8:ab:79:e8:e8:80:ca:30:60:
                    de:ad:5a:61:1d:30:83:b6:90:db:63:76:07:4e:b6:
                    aa:68:41:21:3d:d0:db:0d:d5:b3:1f:d4:37:ae:a9:
                    85:69:e3:f1:ea:94:be:2d:a0:e1:29:65:cd:dc:a9:
                    f8:a4:2e:32:cc:fa:bf:b1:60:dd:4a:bc:4a:b7:fb:
                    83:6b:ea:6c:95:5e:ea:47:32:cd:78:27:20:57:71:
                    24:0d:2e:4a:7f:3b:07:8d:f6:a0:52:6b:88:26:68:
                    7b:89:d7:51:ec:bc:a5:ff:02:46:7b:26:95:10:01:
                    9d:08:87:f2:55:83:76:60:27:d9:5e:7d:a0:f2:99:
                    d7:5e:49:d6:14:bd:b9:de:4a:24:3a:1c:e2:3f:48:
                    3d:07:5b:6b:28:06:f5:96:62:82:d2:5d:29:3e:18:
                    95:e2:88:9d:11:8c:8e:82:de:fb:6f:4a:c1:60:b8:
                    6d:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:D0:2E:2D:54:48:1B:00:0F:1C:67:61:2C:72:52:57:7C:B7:C9:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0f73ad8d-cb5a-46a8-a5f3-8f9014fde58c/9515eff7-97eb-3b07-a48d-6c9f3e651e31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0f73ad8d-cb5a-46a8-a5f3-8f9014fde58c/0f73ad8d-cb5a-46a8-a5f3-8f9014fde58c.crl

            X509v3 Authority Key Identifier:
                keyid:97:C8:FC:AD:B8:85:C4:F1:E0:95:9A:D5:DD:8E:1B:39:56:CB:C0:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0f73ad8d-cb5a-46a8-a5f3-8f9014fde58c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.5.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:aa:0e:ce:3c:21:cb:69:c1:17:ee:97:34:05:05:19:8d:52:
         34:37:74:4e:03:44:cd:73:d3:5b:72:65:21:ef:e0:2c:18:cf:
         b5:dd:b4:3a:67:43:e8:b9:a0:e9:fc:72:11:b0:49:aa:79:27:
         ca:b3:60:dc:e9:6b:55:72:82:24:c7:b3:0a:2b:18:1d:34:34:
         0a:80:10:b3:b9:f7:3f:52:41:3b:09:89:20:14:6b:89:28:7f:
         22:8d:86:2c:2d:bf:8e:10:77:7f:4b:39:2a:8d:a3:1f:bb:ca:
         81:6a:38:82:b0:3f:a9:aa:77:06:b3:3b:f8:1f:d6:b9:e7:2c:
         62:d9:69:ac:fb:c0:aa:d6:a1:39:0e:b6:42:f9:b9:e6:84:b7:
         77:4e:51:61:5e:74:d8:9c:b2:cb:01:62:4a:40:fa:f2:fc:55:
         9f:ec:79:2f:2c:28:9d:ba:52:f4:bb:81:48:a9:a4:96:5e:dd:
         95:ae:76:7d:3b:b0:8c:b1:51:f5:b4:7b:ce:5f:2c:8c:f1:36:
         14:f9:95:83:74:cf:9d:43:ce:fd:44:f2:08:a5:f9:07:7b:21:
         10:07:12:4f:a7:b3:f4:6b:87:71:c0:11:81:d1:38:cb:3a:d2:
         1a:0e:c5:4a:37:26:ce:0c:ad:4a:63:5f:50:bc:59:b8:a1:21:
         ce:02:83:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:02:09 2026 by rpki-client