Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970/67f9a853-6a8f-3d2a-87bf-a1dd95b56fb8.roa
File:                     67f9a853-6a8f-3d2a-87bf-a1dd95b56fb8.roa (raw, json)
Hash identifier:          JlLRw8VoLmXIX267h7N1IhNUa6eSYbFFvl4CLhDHrsA=
Subject key identifier:   68:67:09:76:A6:40:1F:09:D1:1F:E1:62:27:4E:7A:C9:61:41:2D:71
Certificate issuer:       /CN=0b5f2daf-7d7a-4848-bbd2-055f43ae8970
Certificate serial:       010D0C9F4328584CD4075A485E56723F34D52C80
Authority key identifier: 31:92:05:77:3C:9D:CE:89:CE:95:DE:50:97:AF:43:01:1E:56:6F:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970/67f9a853-6a8f-3d2a-87bf-a1dd95b56fb8.roa
Signing time:             Wed 11 Feb 2026 14:00:41 +0000
ROA not before:           Wed 11 Feb 2026 14:00:41 +0000
ROA not after:            Tue 12 May 2026 13:00:41 +0000
asID:                     47050
IP address blocks:        173.224.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970/0b5f2daf-7d7a-4848-bbd2-055f43ae8970.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970/0b5f2daf-7d7a-4848-bbd2-055f43ae8970.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d4:07:5a:48:5e:56:72:3f:34:d5:2c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b5f2daf-7d7a-4848-bbd2-055f43ae8970
        Validity
            Not Before: Feb 11 14:00:41 2026 GMT
            Not After : May 12 13:00:41 2026 GMT
        Subject: CN=2a048e70-745a-44c1-99d1-ede23a9533d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:73:25:a3:86:8b:28:d4:11:08:31:09:34:d4:
                    de:05:9e:11:20:37:7b:be:c9:df:ec:6c:8f:2a:c9:
                    9c:18:2a:c0:39:19:ce:85:00:b2:ba:26:a3:af:9f:
                    43:34:31:96:44:75:20:94:da:96:ff:dd:d5:33:e0:
                    3f:af:48:eb:e2:6c:f0:6e:b6:6d:2e:70:d1:3d:e2:
                    a9:ad:56:a8:f5:31:c4:8e:63:40:26:93:6e:4d:75:
                    2a:22:87:83:86:52:88:71:82:3d:ef:39:16:c8:e0:
                    52:ff:f9:d5:c5:79:63:c4:fb:88:04:50:ef:eb:53:
                    ae:ec:70:7a:39:39:4a:44:20:87:1f:f5:ce:52:02:
                    d2:3f:b6:32:59:8e:26:f7:5f:00:4b:f9:47:4c:8c:
                    0b:2d:8a:0a:d8:67:7a:4d:9c:73:ae:fa:cf:0a:57:
                    80:86:9c:a0:e8:14:3c:aa:a7:ac:0c:2a:ac:9e:aa:
                    8b:67:7a:9d:2d:55:25:e4:01:52:db:52:1b:31:92:
                    2a:0a:8c:70:cc:cf:8d:bb:e3:73:9f:7f:56:39:3a:
                    7a:03:39:0d:1b:6d:9d:ed:4f:68:a0:43:c6:0a:ed:
                    2c:eb:b5:19:74:71:93:38:4d:d0:28:fe:6e:24:c6:
                    ef:ec:14:ea:a5:ea:24:c9:e6:49:87:71:04:a2:36:
                    35:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:67:09:76:A6:40:1F:09:D1:1F:E1:62:27:4E:7A:C9:61:41:2D:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970/67f9a853-6a8f-3d2a-87bf-a1dd95b56fb8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970/0b5f2daf-7d7a-4848-bbd2-055f43ae8970.crl

            X509v3 Authority Key Identifier:
                keyid:31:92:05:77:3C:9D:CE:89:CE:95:DE:50:97:AF:43:01:1E:56:6F:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.224.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:b1:5a:fe:5e:5f:04:3d:cf:72:fa:cb:f2:f4:22:07:9d:cc:
         fb:b7:06:e8:5e:21:0f:04:3a:81:e2:94:ec:57:6a:f2:5b:94:
         26:ec:e7:91:8b:cb:dd:91:20:05:32:c3:08:52:2b:21:83:5a:
         a4:b4:d8:92:93:61:d8:a1:c1:3f:9f:4f:3f:6c:2c:04:13:68:
         ff:10:20:34:fb:5b:e1:60:6b:9f:73:47:e2:10:ef:e4:ba:33:
         2b:46:e5:30:9e:86:a2:9c:b9:53:e0:fd:38:0f:97:42:ca:3d:
         18:e2:15:99:40:4c:92:09:23:5d:f1:ef:bc:b9:9d:fb:3d:fe:
         fb:b2:87:af:6f:a2:fb:8f:76:ee:c2:92:4d:54:98:6c:4c:85:
         a6:e3:1e:f2:ee:d5:36:ba:d9:38:9d:a5:b8:e2:60:8e:83:6a:
         20:35:eb:af:31:71:00:36:7d:b8:ba:b6:0f:a3:3b:b3:ed:aa:
         c7:23:04:26:d6:b9:9e:bf:6d:48:c0:56:55:4f:29:bd:4b:bf:
         07:a6:47:b0:54:f1:8a:31:28:20:c0:5a:3e:f7:04:14:82:90:
         d3:a7:b5:2f:90:bb:f6:66:ca:a8:f7:16:8c:0d:97:fd:03:e9:
         ac:e1:27:69:4c:c5:b0:fe:ab:c2:e7:99:7c:2a:a9:3a:86:6c:
         fd:6e:c3:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:49:55 2026 by rpki-client