Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/adce5ac3-c559-48fc-8577-223c6ed88a3e/0bcc84d1-d5ed-3d15-b09e-e328dfb11002.roa
File:                     0bcc84d1-d5ed-3d15-b09e-e328dfb11002.roa (raw, json)
Hash identifier:          RhpTK3vd98pPiLddmAXO4bkA3rhUTe7ygzMh6/oszRc=
Subject key identifier:   10:37:4C:16:4B:33:67:65:3D:E4:7D:48:52:99:88:9A:90:2A:4A:4C
Certificate issuer:       /CN=adce5ac3-c559-48fc-8577-223c6ed88a3e
Certificate serial:       010D0C9F4328584CF2BCE40BF21E237569D89700
Authority key identifier: 9A:19:DA:B0:79:60:5F:82:89:22:D1:C1:18:A1:EA:FB:D2:7F:66:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/adce5ac3-c559-48fc-8577-223c6ed88a3e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/adce5ac3-c559-48fc-8577-223c6ed88a3e/0bcc84d1-d5ed-3d15-b09e-e328dfb11002.roa
Signing time:             Sun 22 Feb 2026 14:00:41 +0000
ROA not before:           Sun 22 Feb 2026 14:00:41 +0000
ROA not after:            Sat 23 May 2026 13:00:41 +0000
asID:                     47018
IP address blocks:        69.41.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/adce5ac3-c559-48fc-8577-223c6ed88a3e/adce5ac3-c559-48fc-8577-223c6ed88a3e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/adce5ac3-c559-48fc-8577-223c6ed88a3e/adce5ac3-c559-48fc-8577-223c6ed88a3e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/adce5ac3-c559-48fc-8577-223c6ed88a3e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f2:bc:e4:0b:f2:1e:23:75:69:d8:97:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adce5ac3-c559-48fc-8577-223c6ed88a3e
        Validity
            Not Before: Feb 22 14:00:41 2026 GMT
            Not After : May 23 13:00:41 2026 GMT
        Subject: CN=8c8d0a00-ee30-470c-b683-d96b6a0d7509
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:41:37:7f:96:60:f4:f7:ae:1f:58:9d:d9:18:
                    79:87:c0:2a:f0:ae:94:6d:47:0d:6a:e8:bf:eb:d3:
                    42:55:14:7a:f9:61:5d:9b:aa:80:e8:41:af:16:86:
                    0e:ac:bc:6e:64:31:c5:b6:06:31:0a:b3:e8:e9:2b:
                    af:9b:67:2d:a4:b6:17:e7:88:c1:f6:9b:4d:ff:2e:
                    ab:e0:80:c3:62:8f:26:33:2f:29:80:7b:7d:0a:dd:
                    0e:9a:0f:5a:84:c4:43:8f:f9:18:79:ae:a8:5f:81:
                    4f:c8:42:f3:c3:0a:e4:0d:15:ab:9f:b3:f4:55:08:
                    51:06:34:79:c7:52:bf:d0:8a:97:ce:c7:8d:ba:c0:
                    14:38:52:64:87:54:c4:29:f5:63:e0:14:58:3e:fc:
                    ca:54:61:d4:b1:a8:05:a0:88:c4:0f:6f:f0:8d:5f:
                    3a:b0:9b:e2:a3:ab:39:40:31:67:1f:46:04:5a:cb:
                    f5:78:92:0f:5c:75:a9:52:fc:c2:9a:f0:20:78:b5:
                    df:8b:08:de:01:de:fd:ca:df:08:38:19:b8:dd:b0:
                    1c:65:f9:71:8b:7a:eb:44:d0:70:62:8c:4e:b5:3e:
                    13:77:f5:c7:61:b5:0f:0b:e4:62:80:36:a1:fc:84:
                    41:05:53:89:e5:6b:20:e1:7e:a8:55:95:44:44:49:
                    7c:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:37:4C:16:4B:33:67:65:3D:E4:7D:48:52:99:88:9A:90:2A:4A:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/adce5ac3-c559-48fc-8577-223c6ed88a3e/0bcc84d1-d5ed-3d15-b09e-e328dfb11002.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/adce5ac3-c559-48fc-8577-223c6ed88a3e/adce5ac3-c559-48fc-8577-223c6ed88a3e.crl

            X509v3 Authority Key Identifier:
                keyid:9A:19:DA:B0:79:60:5F:82:89:22:D1:C1:18:A1:EA:FB:D2:7F:66:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/adce5ac3-c559-48fc-8577-223c6ed88a3e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.41.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:ed:4d:65:b0:d0:cd:42:ea:65:24:c0:be:2e:4e:11:6a:b0:
         43:80:d1:43:cd:c4:4c:4b:79:4f:64:69:40:a5:84:81:49:a2:
         d0:f0:6a:dc:e7:ee:75:f2:cc:38:68:bc:14:78:b3:9a:d9:60:
         fc:6b:19:c8:e1:84:ea:7e:f1:5f:0d:2c:8d:74:c3:71:bd:33:
         a0:b5:64:5b:9a:dc:44:0b:cf:67:8c:71:a2:b5:fe:83:9c:f8:
         be:52:a0:1c:b5:dc:04:59:d0:24:40:c6:bf:ca:43:b0:c3:69:
         92:b4:c3:cc:78:ca:f9:a0:db:9e:bd:ab:1d:b8:0a:a2:44:35:
         ec:2a:fd:ca:7d:e5:d6:c6:6a:97:3f:41:8b:f1:25:b8:b2:18:
         f5:8a:d8:db:f4:3a:cf:d6:22:58:61:b9:32:ee:cd:66:c7:ac:
         d6:65:50:9a:7c:1b:34:db:c5:2c:3a:43:51:a4:15:36:06:d6:
         34:4e:89:b8:17:74:4b:a7:fe:33:44:7a:9a:e1:11:b5:31:ae:
         ae:23:f2:7c:11:75:fb:eb:c2:ac:87:a3:0d:ea:38:78:fc:e4:
         29:3c:5b:9a:3e:f2:a0:ef:5c:81:74:18:9a:e7:bb:86:c6:58:
         c0:a6:9c:9e:03:f9:14:ff:45:89:6a:0b:b7:ee:2b:bf:6e:ba:
         49:0f:98:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:58:43 2026 by rpki-client