Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3e00c5c-5e66-4d69-8173-b03c82880bc1/2ef613c6-a522-306e-bd8c-fc8133312b16.roa
File:                     2ef613c6-a522-306e-bd8c-fc8133312b16.roa (raw, json)
Hash identifier:          QPgtLyKyxX42oPAOpbz6EKumE3DcBvsErGA1EXbGQGM=
Subject key identifier:   41:04:63:19:EF:AE:21:2C:2E:F7:4B:F2:B5:10:58:5D:D1:3E:43:27
Certificate issuer:       /CN=a3e00c5c-5e66-4d69-8173-b03c82880bc1
Certificate serial:       010D0C9F4328584CEA5CE0D23551C220248A1580
Authority key identifier: D4:74:D8:AD:B3:79:80:04:10:A4:04:FA:EC:10:CA:29:C1:49:53:E3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3e00c5c-5e66-4d69-8173-b03c82880bc1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3e00c5c-5e66-4d69-8173-b03c82880bc1/2ef613c6-a522-306e-bd8c-fc8133312b16.roa
Signing time:             Thu 19 Feb 2026 14:00:40 +0000
ROA not before:           Thu 19 Feb 2026 14:00:40 +0000
ROA not after:            Wed 20 May 2026 13:00:40 +0000
asID:                     14041
IP address blocks:        199.96.184.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3e00c5c-5e66-4d69-8173-b03c82880bc1/a3e00c5c-5e66-4d69-8173-b03c82880bc1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3e00c5c-5e66-4d69-8173-b03c82880bc1/a3e00c5c-5e66-4d69-8173-b03c82880bc1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3e00c5c-5e66-4d69-8173-b03c82880bc1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ea:5c:e0:d2:35:51:c2:20:24:8a:15:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3e00c5c-5e66-4d69-8173-b03c82880bc1
        Validity
            Not Before: Feb 19 14:00:40 2026 GMT
            Not After : May 20 13:00:40 2026 GMT
        Subject: CN=489d392d-532e-4e8b-baf2-487375083be8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b9:6f:cf:68:46:62:45:44:b4:fc:fd:89:06:
                    ca:82:cf:32:a8:c6:52:55:02:f3:e9:dd:4d:d6:8c:
                    c3:6a:e5:06:c2:36:46:3b:b7:e1:b8:62:1c:e4:82:
                    89:f2:95:aa:ee:c1:e2:b4:ed:96:dc:d8:2e:c8:ae:
                    64:38:93:32:aa:09:6f:74:dd:1a:b3:3f:a2:b6:11:
                    79:51:8c:d5:21:13:1c:aa:a7:30:59:fc:65:d5:27:
                    e2:2c:cf:bd:b7:c1:62:64:69:36:7b:53:14:d9:32:
                    a5:f4:6d:3e:80:b2:c9:08:9d:a4:e9:75:d3:94:22:
                    fb:33:34:ee:90:09:1e:55:ca:c1:f1:f4:e1:d1:d3:
                    0f:ec:5f:2f:85:9f:cb:99:dc:7d:79:3f:06:ed:9e:
                    94:20:e0:f2:0b:e3:6c:43:dd:48:26:28:79:60:52:
                    5f:47:12:af:0e:76:14:d7:a2:f8:d2:d7:1f:ab:6f:
                    cc:da:c8:3f:2d:2e:34:c0:f4:71:5b:ab:2e:81:55:
                    83:72:70:d1:4d:a6:f3:d9:80:5c:22:68:f2:fb:06:
                    64:93:23:6a:3d:0c:49:2a:e6:b6:e2:5d:cc:d9:80:
                    73:fc:82:cd:77:66:20:14:a7:99:0c:4d:08:b5:5f:
                    d3:c7:66:f8:7f:60:b0:cf:f9:e2:69:ce:21:60:47:
                    f8:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:04:63:19:EF:AE:21:2C:2E:F7:4B:F2:B5:10:58:5D:D1:3E:43:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3e00c5c-5e66-4d69-8173-b03c82880bc1/2ef613c6-a522-306e-bd8c-fc8133312b16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3e00c5c-5e66-4d69-8173-b03c82880bc1/a3e00c5c-5e66-4d69-8173-b03c82880bc1.crl

            X509v3 Authority Key Identifier:
                keyid:D4:74:D8:AD:B3:79:80:04:10:A4:04:FA:EC:10:CA:29:C1:49:53:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3e00c5c-5e66-4d69-8173-b03c82880bc1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.96.184.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:57:0e:3b:86:39:ea:41:6f:e4:7f:47:9e:15:e5:d2:9c:ca:
         ef:55:0f:c3:a3:2f:dd:de:f9:c6:38:f9:44:8a:ff:fe:ca:be:
         4a:12:21:2b:81:91:74:04:b1:eb:ef:87:37:a7:cd:68:dd:78:
         91:b0:fb:cc:f0:7e:a2:3a:f3:1a:4b:41:0d:64:7d:ee:c3:e5:
         9a:15:c2:15:7d:06:3d:08:ee:27:68:46:78:66:9c:92:3b:fb:
         ff:13:3d:f0:8f:50:1e:9d:3d:fe:60:e3:77:00:3e:b3:fe:c5:
         cd:49:1d:b7:c8:36:11:e7:b8:55:48:7d:45:98:a4:73:95:1d:
         c7:35:7d:0c:2d:18:a1:e6:31:8a:03:17:e4:26:9f:bb:f4:5f:
         64:98:c3:5d:64:60:bb:2c:99:8c:27:65:ad:6d:9d:a0:e1:d3:
         4d:98:d4:19:60:30:cc:6c:e9:d7:42:d2:8a:b6:c7:74:b0:b9:
         09:8c:80:9c:c5:d8:4c:63:f4:26:ed:77:65:f0:78:6e:20:5d:
         ef:fe:9f:88:12:17:63:84:9b:28:cd:9e:92:9a:9e:f3:d2:20:
         04:ae:0a:03:6b:ca:70:89:44:0a:60:95:ff:fa:a1:a6:c3:84:
         e4:4e:1c:40:a7:11:27:d8:b4:a1:7b:8b:13:e0:b8:31:a1:1f:
         8c:86:44:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 05:35:33 2026 by rpki-client