Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/67612b49-91a4-42d2-8352-16977b5d8e8a/ab540f08-40ca-362e-a723-f3bf0d53cae8.roa
File:                     ab540f08-40ca-362e-a723-f3bf0d53cae8.roa (raw, json)
Hash identifier:          FQ4BVbv6ceG5oafNjsOxT1mI4YccAGUjPcBi2SzPvP4=
Subject key identifier:   90:51:09:E4:33:78:E4:CE:AA:73:A1:C9:00:3C:63:DE:44:7F:A3:BE
Certificate issuer:       /CN=67612b49-91a4-42d2-8352-16977b5d8e8a
Certificate serial:       010D0C9F4328584CEFF2324A1906D401214CFE00
Authority key identifier: 26:B9:EA:BA:65:7A:DB:E3:64:D8:3F:BF:D2:FA:77:F6:5B:10:0C:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/67612b49-91a4-42d2-8352-16977b5d8e8a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/67612b49-91a4-42d2-8352-16977b5d8e8a/ab540f08-40ca-362e-a723-f3bf0d53cae8.roa
Signing time:             Sat 21 Feb 2026 14:00:41 +0000
ROA not before:           Sat 21 Feb 2026 14:00:41 +0000
ROA not after:            Fri 22 May 2026 13:00:41 +0000
asID:                     14041
IP address blocks:        198.59.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/67612b49-91a4-42d2-8352-16977b5d8e8a/67612b49-91a4-42d2-8352-16977b5d8e8a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/67612b49-91a4-42d2-8352-16977b5d8e8a/67612b49-91a4-42d2-8352-16977b5d8e8a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/67612b49-91a4-42d2-8352-16977b5d8e8a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ef:f2:32:4a:19:06:d4:01:21:4c:fe:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67612b49-91a4-42d2-8352-16977b5d8e8a
        Validity
            Not Before: Feb 21 14:00:41 2026 GMT
            Not After : May 22 13:00:41 2026 GMT
        Subject: CN=8eca8727-d83f-45e3-a040-0b1ad4e9763b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:4a:c8:69:d0:30:e6:a0:6e:a4:d4:b8:6f:92:
                    64:e7:11:0b:13:24:bf:5f:79:db:f4:c3:9a:e6:1b:
                    af:b7:d3:a6:ca:39:0d:a6:96:b8:a6:e4:7c:f1:8e:
                    d6:f8:dc:7b:43:cb:19:0e:07:28:57:06:be:e2:a1:
                    86:8e:e2:04:e3:15:78:39:30:bb:f9:74:04:8d:a1:
                    3d:c2:c2:ca:5d:4f:da:3c:5d:be:48:f7:4a:d9:e9:
                    26:ef:07:e0:d7:07:bf:4d:61:c5:80:c3:5d:89:22:
                    99:27:04:95:c3:84:61:46:75:40:b4:0b:58:65:b2:
                    03:2a:a9:8c:ca:ca:b1:2e:5b:b8:c8:01:ee:91:be:
                    cf:83:78:26:c6:e4:44:cb:ed:58:e7:3c:44:40:9f:
                    fa:2a:68:20:de:9e:1c:f9:13:08:59:19:db:c5:99:
                    1d:3e:b2:51:4e:ea:04:ff:6c:6a:b7:0b:5a:21:64:
                    3c:e2:90:2e:11:e0:f2:c5:f3:dc:ac:86:04:02:7a:
                    51:5d:4d:db:2a:b7:e9:89:82:98:de:1e:63:ce:fc:
                    2c:ce:be:f8:d6:fd:1b:51:e6:80:43:df:cd:7e:a3:
                    df:42:ce:30:a9:b4:10:e7:63:29:5a:50:ec:cf:34:
                    ca:1b:4d:c5:fe:5d:a8:84:7e:67:48:79:e5:10:1f:
                    88:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:51:09:E4:33:78:E4:CE:AA:73:A1:C9:00:3C:63:DE:44:7F:A3:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/67612b49-91a4-42d2-8352-16977b5d8e8a/ab540f08-40ca-362e-a723-f3bf0d53cae8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/67612b49-91a4-42d2-8352-16977b5d8e8a/67612b49-91a4-42d2-8352-16977b5d8e8a.crl

            X509v3 Authority Key Identifier:
                keyid:26:B9:EA:BA:65:7A:DB:E3:64:D8:3F:BF:D2:FA:77:F6:5B:10:0C:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/67612b49-91a4-42d2-8352-16977b5d8e8a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.59.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:eb:0c:6b:24:ff:04:a2:0a:42:5c:05:0f:ce:49:46:d8:d4:
         79:3f:84:d2:84:41:91:bf:eb:40:2d:96:c5:01:33:60:6c:b8:
         69:65:79:05:b5:cb:e0:42:75:fb:c3:09:2f:ac:b4:8f:0a:da:
         81:83:52:87:4d:fa:b7:e7:e7:8d:53:38:51:9c:ce:ad:d3:93:
         a2:fc:43:86:a3:60:40:6b:04:20:28:51:e0:76:86:76:dc:73:
         ec:d7:8a:e3:30:a6:7d:e9:31:ba:d5:bf:30:9d:52:3a:16:9e:
         d2:a8:7a:8a:43:20:9b:c7:ac:a9:51:ab:07:17:ab:a2:44:df:
         1a:67:96:45:64:2e:60:b6:6f:90:2b:95:d8:e9:83:f0:a0:2d:
         51:04:fb:64:79:38:bd:a1:36:95:60:58:a2:7c:61:b0:15:e5:
         c9:d4:ea:ba:78:c5:b3:ff:45:67:7e:0e:12:64:ed:1d:ff:53:
         f9:07:f2:d3:4c:c8:82:a7:72:38:8d:44:fd:59:0c:3c:8f:84:
         34:02:00:c5:ce:7b:35:03:de:d9:02:9c:c2:ab:b4:f0:46:b6:
         e1:b6:ff:e4:18:55:02:3e:d3:54:94:78:5e:a0:11:53:64:82:
         ef:b9:cc:6c:8d:2e:9b:ca:c2:12:95:df:8b:69:9d:e2:e8:4f:
         4f:ff:76:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:30:41 2026 by rpki-client