Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/0ad7d478-4c06-3292-89e1-747777b4506a.roa
File:                     0ad7d478-4c06-3292-89e1-747777b4506a.roa (raw, json)
Hash identifier:          yNXHrKYk4wxvlAwWYlIFXOz9UkfAS7iqihnwsA2I/S4=
Subject key identifier:   91:E4:68:2F:B8:20:72:E4:E9:87:E1:DD:1B:9B:0B:B5:5C:DD:73:FE
Certificate issuer:       /CN=937a6fc8-35c3-4151-aa2e-2513420f9344
Certificate serial:       010D0C9F4328584CEA5CE437B7C74B3797977200
Authority key identifier: 6A:1F:E6:4E:1D:16:39:6D:86:6E:99:3B:A8:64:29:AE:C3:4E:FC:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/0ad7d478-4c06-3292-89e1-747777b4506a.roa
Signing time:             Thu 19 Feb 2026 14:00:40 +0000
ROA not before:           Thu 19 Feb 2026 14:00:40 +0000
ROA not after:            Wed 20 May 2026 13:00:40 +0000
asID:                     13720
IP address blocks:        69.174.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/937a6fc8-35c3-4151-aa2e-2513420f9344.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/937a6fc8-35c3-4151-aa2e-2513420f9344.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ea:5c:e4:37:b7:c7:4b:37:97:97:72:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=937a6fc8-35c3-4151-aa2e-2513420f9344
        Validity
            Not Before: Feb 19 14:00:40 2026 GMT
            Not After : May 20 13:00:40 2026 GMT
        Subject: CN=55429ea9-4a0b-4304-9b93-fe77b2e90f83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:e7:ca:57:79:6f:d2:ab:c7:67:27:0b:30:57:
                    1a:d3:41:f2:52:77:80:c6:be:50:14:91:26:d9:d8:
                    2a:bc:1e:2d:72:07:84:b7:c7:31:ec:45:95:49:4d:
                    d3:e3:cc:f2:23:d6:f6:4c:be:b5:4a:be:99:25:9a:
                    01:d9:1e:af:03:95:b4:1e:09:01:bd:f2:cc:51:4f:
                    f2:5b:1e:41:3c:00:3a:5f:b0:e9:47:a8:c3:41:13:
                    bd:56:74:5b:67:2c:b7:34:a1:43:53:9b:25:c3:3f:
                    79:3b:49:00:55:f6:76:52:1f:cf:62:74:43:e1:1d:
                    fa:cc:df:53:5b:c7:6e:8c:5e:e4:a4:b9:24:8f:fe:
                    49:82:eb:01:d9:03:fa:8d:f4:5d:aa:02:db:e9:25:
                    21:60:02:19:41:84:6a:79:cb:e4:70:d7:6c:28:86:
                    df:e7:69:39:62:10:0b:fd:a6:24:4c:8f:22:34:24:
                    88:fa:a4:e9:72:c8:be:f9:45:de:79:fb:72:36:f6:
                    37:e5:be:de:8f:2e:a9:5e:ca:fa:ef:3e:86:b5:d7:
                    a9:83:f0:b2:c4:85:9d:e2:0b:2e:a4:7c:f2:09:73:
                    85:26:3b:30:a7:53:d4:49:ab:ad:30:02:c2:5a:81:
                    27:5d:fc:b7:08:db:2d:74:72:80:a1:ae:8e:1a:94:
                    1d:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:E4:68:2F:B8:20:72:E4:E9:87:E1:DD:1B:9B:0B:B5:5C:DD:73:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/0ad7d478-4c06-3292-89e1-747777b4506a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/937a6fc8-35c3-4151-aa2e-2513420f9344.crl

            X509v3 Authority Key Identifier:
                keyid:6A:1F:E6:4E:1D:16:39:6D:86:6E:99:3B:A8:64:29:AE:C3:4E:FC:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.174.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:57:32:5d:a2:df:1e:f4:db:13:cf:11:ee:11:e7:40:7b:c7:
         1f:fd:4e:19:d0:0c:99:cc:e9:af:ff:c1:c7:34:27:c7:9a:00:
         e0:4b:8f:ee:36:3a:e5:b4:7e:6a:ca:7c:59:be:8a:8b:8a:d3:
         78:0b:5f:47:e3:71:bd:07:c7:4f:f5:cb:15:e8:a4:1b:f6:2f:
         d0:57:25:b3:7b:22:81:38:5b:ef:02:97:a5:f8:d7:2a:f9:01:
         bc:03:57:6b:22:61:a3:5f:a3:dd:c6:4d:f9:8e:8b:c0:58:f1:
         04:10:e9:43:4a:32:ac:d9:9f:08:e5:14:49:9b:ff:78:40:92:
         c9:29:2e:3e:a3:a0:50:bf:a8:0f:b3:41:8b:4a:bf:7b:b7:c2:
         a7:06:f3:27:11:ef:cb:52:53:ba:4e:0d:8d:57:81:90:b1:bc:
         94:5d:15:05:11:95:90:18:18:21:02:b1:c9:76:f1:d4:bc:95:
         8e:3f:26:41:5e:d7:e9:d4:00:3e:1c:72:e5:e3:ec:64:71:54:
         91:d9:0b:58:97:af:7a:48:fa:fe:e1:df:62:2a:13:f2:f1:62:
         45:f0:c8:a5:f7:6b:37:d7:b4:61:a0:05:5a:33:5b:e4:e3:32:
         cf:4b:12:42:dd:a3:0c:e4:3d:d7:bd:1f:6c:5f:0d:36:c6:a7:
         53:26:39:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:12:44 2026 by rpki-client