Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/926b4ddf-17df-417e-972b-c86cc410fed2/0318cf55-47d4-3640-9ddb-6388db5f3fb0.roa
File:                     0318cf55-47d4-3640-9ddb-6388db5f3fb0.roa (raw, json)
Hash identifier:          TjgHjHujVCxKBn2fMx1/qQ2I4lIY2QmUogvnVARvDLQ=
Subject key identifier:   16:79:40:F1:1D:DD:6B:FB:EC:3C:BE:95:F5:ED:9B:13:55:32:09:CC
Certificate issuer:       /CN=926b4ddf-17df-417e-972b-c86cc410fed2
Certificate serial:       010D0C9F4328584CD4075D288D75F15EC5D39E40
Authority key identifier: 10:57:31:6E:07:F8:5A:4F:36:73:23:D3:F2:37:89:9E:36:C0:BE:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/926b4ddf-17df-417e-972b-c86cc410fed2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/926b4ddf-17df-417e-972b-c86cc410fed2/0318cf55-47d4-3640-9ddb-6388db5f3fb0.roa
Signing time:             Wed 11 Feb 2026 14:00:41 +0000
ROA not before:           Wed 11 Feb 2026 14:00:41 +0000
ROA not after:            Tue 12 May 2026 13:00:41 +0000
asID:                     395713
IP address blocks:        64.56.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/926b4ddf-17df-417e-972b-c86cc410fed2/926b4ddf-17df-417e-972b-c86cc410fed2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/926b4ddf-17df-417e-972b-c86cc410fed2/926b4ddf-17df-417e-972b-c86cc410fed2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/926b4ddf-17df-417e-972b-c86cc410fed2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d4:07:5d:28:8d:75:f1:5e:c5:d3:9e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=926b4ddf-17df-417e-972b-c86cc410fed2
        Validity
            Not Before: Feb 11 14:00:41 2026 GMT
            Not After : May 12 13:00:41 2026 GMT
        Subject: CN=615393f5-60e4-4913-a700-38bb55f63e02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d2:8c:0e:33:46:5e:ab:aa:e4:3a:2b:30:b8:
                    53:bb:92:a7:c7:4c:c3:a1:73:c3:d6:e1:c8:fd:51:
                    04:a9:df:20:f0:c1:77:26:9a:27:da:28:11:45:54:
                    a7:d3:e9:b3:50:73:f6:02:2e:b8:6a:9f:f6:5e:46:
                    03:91:45:06:d1:48:cc:03:f8:f7:a7:98:ea:24:8e:
                    60:e5:15:43:61:6a:4b:c0:06:1c:8c:d7:7e:ed:63:
                    66:8c:84:af:77:13:ee:ca:14:8c:7c:fc:88:e0:0c:
                    86:c8:13:5c:09:4f:f5:17:3f:03:c9:8c:f4:47:f3:
                    51:55:0b:67:80:a9:87:42:e5:ac:4d:fd:43:42:73:
                    f1:6c:82:fb:b9:bd:ea:d9:20:c9:43:bc:cf:55:3b:
                    49:e2:39:7e:e5:eb:3c:ce:1d:d6:87:6e:40:4d:53:
                    f8:c9:01:26:f3:f9:ea:c6:01:32:81:fe:a2:0a:25:
                    b2:3d:70:01:02:45:55:0d:d6:a5:04:c2:22:10:b4:
                    eb:df:01:bf:dc:61:35:65:a5:e0:81:dc:fa:01:0f:
                    83:bb:50:c9:cd:8a:14:52:43:69:38:26:04:a2:aa:
                    15:b7:3a:c9:b9:01:63:0d:56:5b:e0:59:a5:19:39:
                    47:a9:a1:b7:aa:1a:55:ea:39:95:92:86:5e:31:d5:
                    3c:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:79:40:F1:1D:DD:6B:FB:EC:3C:BE:95:F5:ED:9B:13:55:32:09:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/926b4ddf-17df-417e-972b-c86cc410fed2/0318cf55-47d4-3640-9ddb-6388db5f3fb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/926b4ddf-17df-417e-972b-c86cc410fed2/926b4ddf-17df-417e-972b-c86cc410fed2.crl

            X509v3 Authority Key Identifier:
                keyid:10:57:31:6E:07:F8:5A:4F:36:73:23:D3:F2:37:89:9E:36:C0:BE:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/926b4ddf-17df-417e-972b-c86cc410fed2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.56.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:d5:86:34:27:8c:16:cd:52:5f:28:68:f6:66:93:a5:0f:6f:
         db:b2:8d:2e:2d:15:16:df:60:bc:83:fa:7a:84:d3:ec:a2:bc:
         05:fa:2d:f2:f2:99:5f:e6:f7:09:93:73:79:94:58:e7:28:f7:
         af:c4:93:77:1d:78:7d:05:c4:7a:74:42:09:a4:07:25:93:de:
         8b:98:d0:81:62:61:81:45:10:61:5c:51:f6:41:70:6f:c1:95:
         18:62:b1:de:9e:3d:2e:33:e9:4f:52:70:d0:40:96:43:e2:80:
         be:66:7c:47:51:c4:26:9d:b5:64:8f:2d:28:ff:b4:a6:18:75:
         2f:e6:f8:25:e0:48:e5:3f:2c:83:56:76:c4:9d:bf:77:d1:e7:
         5e:f3:57:ba:50:29:27:d6:8d:79:f1:9d:b4:9c:6f:3e:d4:b0:
         aa:24:ae:a7:8a:f4:35:4e:6c:f0:78:e2:5f:bc:5f:08:7d:0c:
         21:a3:c9:64:d8:ac:ea:0c:3f:f0:52:38:03:01:e6:ef:47:9d:
         a5:b2:b5:3a:e3:d4:69:48:e1:95:06:db:e0:85:06:e5:58:21:
         3e:d8:db:68:87:7b:e4:03:7f:fc:3c:30:46:fe:42:f8:92:dd:
         cb:f1:f6:87:5d:fa:f5:d6:7b:fa:d7:ac:7e:a9:74:79:64:47:
         cd:a2:1f:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:02:20 2026 by rpki-client