Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/0ea5f20c-928b-3381-afc8-aedb931306e0.roa
File:                     0ea5f20c-928b-3381-afc8-aedb931306e0.roa (raw, json)
Hash identifier:          xGvdS2mYrTltzCgUJTCugxfkJnP2inS4EodPg8DOQ4c=
Subject key identifier:   07:13:AF:BF:BE:E8:6F:4A:B6:7A:56:D5:82:EE:A7:25:1F:8B:35:7F
Certificate issuer:       /CN=65506c68-611f-46ed-9e78-36da39f8ee7d
Certificate serial:       010D0C9F4328584CEA5CE045CADA18DCB13CF600
Authority key identifier: 64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/0ea5f20c-928b-3381-afc8-aedb931306e0.roa
Signing time:             Thu 19 Feb 2026 14:00:40 +0000
ROA not before:           Thu 19 Feb 2026 14:00:40 +0000
ROA not after:            Wed 20 May 2026 13:00:40 +0000
asID:                     5769
IP address blocks:        24.200.0.0/14 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ea:5c:e0:45:ca:da:18:dc:b1:3c:f6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65506c68-611f-46ed-9e78-36da39f8ee7d
        Validity
            Not Before: Feb 19 14:00:40 2026 GMT
            Not After : May 20 13:00:40 2026 GMT
        Subject: CN=52f55409-34e5-411f-9dac-ba9cf6638382
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:2c:d9:68:de:cf:2b:c2:99:98:64:70:6b:70:
                    d7:28:76:a1:65:72:63:c0:ad:01:01:ac:f9:54:61:
                    c1:c0:d6:cc:a0:4a:0f:32:9d:b9:a0:6a:a6:1f:04:
                    05:ad:4b:9b:07:c2:5d:52:d0:f9:67:69:25:49:c6:
                    ad:60:8f:b5:ef:c6:fe:81:5a:e7:f4:d5:43:21:95:
                    30:78:21:87:a9:cf:70:1d:b2:fd:de:14:ce:1f:6f:
                    58:5a:c3:6c:c6:9e:48:9d:20:72:99:5a:ef:b1:6a:
                    06:09:03:59:03:79:86:82:df:e8:51:c5:b3:d9:d7:
                    d5:2e:5b:9e:bf:bf:bd:e9:b7:a0:46:2c:17:41:b4:
                    7b:9e:5b:fd:09:4b:d1:a5:ca:0d:ae:e1:55:e3:85:
                    c5:35:95:52:2e:b1:e5:38:47:b0:c9:a4:e4:2a:8f:
                    5f:34:fc:55:e2:da:7a:6d:65:16:8d:b8:e8:c5:8b:
                    80:1b:67:55:94:1e:b4:2c:20:2f:f5:6a:e6:12:33:
                    8c:a4:36:83:e6:6f:f7:cd:54:9d:38:72:0e:70:11:
                    6a:31:4d:4e:c5:c1:cf:cf:79:93:c2:7f:80:71:f5:
                    0a:56:f6:37:77:24:ac:ba:52:f1:b0:f0:8d:68:44:
                    10:ad:f1:59:f1:c0:c1:ca:74:9c:91:3a:50:a2:9b:
                    9b:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:13:AF:BF:BE:E8:6F:4A:B6:7A:56:D5:82:EE:A7:25:1F:8B:35:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/0ea5f20c-928b-3381-afc8-aedb931306e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl

            X509v3 Authority Key Identifier:
                keyid:64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.200.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:60:f4:80:5e:97:01:25:9c:bf:35:d0:41:c2:32:38:b2:38:
         73:aa:8b:23:68:68:69:c5:55:d2:df:73:20:b0:76:48:2a:ad:
         02:3f:33:42:af:53:9c:84:a3:dc:5c:bc:76:7d:e6:75:47:92:
         dc:b6:ca:32:d8:eb:64:1f:ba:c3:c2:71:b7:f8:90:d7:69:e2:
         c0:f2:29:1d:20:8c:52:e6:c7:26:93:1e:02:00:09:fc:7a:91:
         60:7e:1e:89:ca:3b:0a:55:33:a6:f9:54:1e:42:be:aa:d5:23:
         8c:c6:45:38:c6:f5:b2:dc:f6:8d:be:01:9a:a1:ff:16:dc:e7:
         59:ae:4b:64:b9:58:5f:e3:fb:05:13:f9:cd:43:03:5e:3e:c0:
         61:7c:41:88:30:5c:f7:3f:fb:ef:4d:b0:93:88:64:f5:06:1c:
         8a:d0:71:44:e6:11:e8:eb:6c:f4:fb:b5:92:25:d9:bb:3a:fa:
         b7:56:f8:a6:29:a7:62:9a:fa:15:35:01:c3:81:d2:db:6a:a5:
         b7:48:c1:b9:04:20:58:a9:e9:59:70:3d:83:18:b8:1c:d0:9e:
         ef:4d:2b:1e:16:04:64:4c:80:27:02:8d:a1:32:bf:eb:7b:3d:
         60:4d:ec:a7:be:f8:a0:53:48:96:ea:bc:f9:55:22:bc:6e:78:
         2b:32:51:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:16:05 2026 by rpki-client