Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1295ef42-143f-3b03-b92a-bea5540538fc.roa
File:                     1295ef42-143f-3b03-b92a-bea5540538fc.roa (raw, json)
Hash identifier:          WYcZzxl3j8SA9afn0EttkcXb26/l9/9IZriynw6lmVw=
Subject key identifier:   0B:A4:4C:79:52:D0:AC:8D:E7:63:2B:30:63:6C:F3:C6:02:71:C0:8F
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584CEDCE9382FEDAD8BF39662CC0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1295ef42-143f-3b03-b92a-bea5540538fc.roa
Signing time:             Fri 20 Feb 2026 19:37:26 +0000
ROA not before:           Fri 20 Feb 2026 19:37:26 +0000
ROA not after:            Thu 21 May 2026 18:37:26 +0000
asID:                     19905
IP address blocks:        24.129.212.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ed:ce:93:82:fe:da:d8:bf:39:66:2c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb 20 19:37:26 2026 GMT
            Not After : May 21 18:37:26 2026 GMT
        Subject: CN=60f0e52e-d62f-47ea-8429-386a881773d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:c7:2c:4f:05:ed:81:3b:37:0d:8d:a7:bd:9c:
                    74:ad:6c:c3:ea:72:25:4a:57:d8:52:cb:25:87:5a:
                    3b:4b:e5:66:7e:27:b4:df:fa:62:76:5b:8e:59:7c:
                    a9:41:a2:a6:e3:85:40:ad:8a:85:d4:21:47:84:3c:
                    5d:d1:aa:7c:d9:35:55:00:72:99:b5:54:cb:54:9e:
                    3c:22:17:9b:fc:d2:6e:cc:d1:da:90:c5:cc:02:c7:
                    ad:ef:69:36:91:78:41:86:4f:2d:26:d5:6b:45:b4:
                    09:f8:5f:7e:ba:91:c6:8d:77:8c:7d:70:87:6a:6d:
                    f2:3e:a4:4e:5b:fe:f5:a9:cd:a8:d2:c3:17:21:fe:
                    57:51:66:8d:cb:84:92:1e:b2:39:7b:bc:ce:e5:74:
                    17:24:15:a3:08:5f:60:8d:51:09:8d:f0:83:01:b4:
                    8e:06:dd:5c:f5:cb:c0:44:bc:44:4f:e2:df:5a:60:
                    9e:e8:cd:6d:06:1c:90:3c:91:1a:7e:e4:db:f7:71:
                    fe:54:ed:ca:1a:d7:9d:08:a3:ad:aa:73:f8:b6:91:
                    3a:56:a8:19:16:79:80:6b:41:9b:9b:df:83:92:af:
                    6d:d0:3c:38:43:a7:75:73:65:3c:a7:8a:be:31:c3:
                    6c:c8:f4:0f:65:2b:87:cb:38:19:26:6f:cf:8b:63:
                    8b:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:A4:4C:79:52:D0:AC:8D:E7:63:2B:30:63:6C:F3:C6:02:71:C0:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1295ef42-143f-3b03-b92a-bea5540538fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.129.212.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:eb:46:a3:6a:de:a1:36:37:76:bb:d8:d6:cc:75:27:c5:60:
         32:15:ec:3b:67:ac:c4:79:83:be:c3:a1:3c:19:d5:9e:6a:db:
         d3:85:c7:e8:5e:84:74:cb:00:a6:88:80:00:bf:ee:b7:24:a0:
         22:8a:dc:66:7e:35:32:6c:73:5b:9b:67:90:94:1b:fe:37:3e:
         73:84:18:61:90:94:3d:9a:93:9a:bd:6c:fe:b8:6e:47:1f:19:
         8c:0b:61:2a:5e:e3:06:d1:22:ee:22:b3:01:60:66:bf:16:0f:
         1f:6f:3e:f3:53:52:6b:e3:29:38:89:6b:bd:7d:4e:70:15:7e:
         87:2b:e6:81:69:2e:2b:cb:63:2c:b7:b7:64:91:fe:3f:8c:1a:
         af:e8:38:1e:23:35:79:04:53:02:31:54:3d:1c:13:d8:1c:37:
         68:57:60:eb:ce:8f:84:05:4e:68:b0:e5:62:07:b2:10:54:fd:
         e5:3f:ff:de:64:73:42:11:d7:85:04:cf:40:a9:11:70:0c:f0:
         66:4c:64:e1:5f:4d:2d:52:3c:35:00:ea:c7:26:c7:17:e9:a2:
         56:f3:64:59:9f:dd:d8:6f:9f:31:44:6d:35:9f:26:21:04:0c:
         f6:40:f3:23:4d:df:8a:71:10:8f:25:00:83:3a:54:40:53:c9:
         3c:68:88:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:05:29 2026 by rpki-client