Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970/c833568c-cbec-37a6-85ce-4c572901aa24.roa
File:                     c833568c-cbec-37a6-85ce-4c572901aa24.roa (raw, json)
Hash identifier:          2y87yFic0qMz2e2Fk8RdbhTj9pqnFkioGwF0ENDeM+g=
Subject key identifier:   E5:00:85:93:D5:AA:7A:02:DB:E3:E7:C4:B5:6E:92:B4:8A:97:6B:A1
Certificate issuer:       /CN=0b5f2daf-7d7a-4848-bbd2-055f43ae8970
Certificate serial:       010D0C9F4328584CD4075A6E5752BCEB83B40C00
Authority key identifier: 31:92:05:77:3C:9D:CE:89:CE:95:DE:50:97:AF:43:01:1E:56:6F:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970/c833568c-cbec-37a6-85ce-4c572901aa24.roa
Signing time:             Wed 11 Feb 2026 14:00:41 +0000
ROA not before:           Wed 11 Feb 2026 14:00:41 +0000
ROA not after:            Tue 12 May 2026 13:00:41 +0000
asID:                     47050
IP address blocks:        173.224.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970/0b5f2daf-7d7a-4848-bbd2-055f43ae8970.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970/0b5f2daf-7d7a-4848-bbd2-055f43ae8970.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d4:07:5a:6e:57:52:bc:eb:83:b4:0c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b5f2daf-7d7a-4848-bbd2-055f43ae8970
        Validity
            Not Before: Feb 11 14:00:41 2026 GMT
            Not After : May 12 13:00:41 2026 GMT
        Subject: CN=bc9b128b-2071-483c-8e88-b82b580928a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:29:f3:65:f0:2c:08:08:5b:35:af:e3:f9:5f:
                    b1:e9:a5:4f:63:56:11:bb:16:4e:6b:97:04:54:73:
                    7d:72:62:ec:73:3e:5c:a7:60:32:f2:cc:3a:f7:e0:
                    af:bc:64:9c:42:ac:58:74:13:8a:a2:8d:9c:c5:48:
                    13:5f:2a:ef:83:a4:a7:7e:2f:66:20:bc:31:e0:3f:
                    3a:41:38:d6:72:db:f3:0b:06:8b:68:07:67:c7:d9:
                    52:a9:ce:4f:33:70:64:b5:43:f2:13:42:1d:b7:a6:
                    9e:e0:0a:04:33:d1:e3:17:6c:2c:4c:e7:2a:4f:ad:
                    91:61:87:9c:7e:d6:bc:d8:27:29:54:63:d5:f6:bf:
                    58:11:be:08:59:e3:d2:2f:9b:07:34:29:a0:e0:4f:
                    b8:d7:08:7c:d7:e2:95:0d:e3:2e:66:a1:e0:79:8a:
                    8c:63:61:a4:42:b0:ea:fa:b7:fd:db:d9:b8:82:8f:
                    fe:81:92:d1:22:6e:b7:e9:bf:83:5e:ec:85:8c:2b:
                    d8:54:3e:59:73:12:43:e3:09:9d:d8:cc:55:99:8e:
                    97:05:66:9e:47:16:25:82:f1:c4:b2:80:6b:23:90:
                    02:c6:a4:5c:71:ba:a1:90:c5:72:1a:27:f1:18:ae:
                    1a:02:2a:cd:96:38:f4:59:4f:6e:0c:e8:28:06:05:
                    cd:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:00:85:93:D5:AA:7A:02:DB:E3:E7:C4:B5:6E:92:B4:8A:97:6B:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970/c833568c-cbec-37a6-85ce-4c572901aa24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970/0b5f2daf-7d7a-4848-bbd2-055f43ae8970.crl

            X509v3 Authority Key Identifier:
                keyid:31:92:05:77:3C:9D:CE:89:CE:95:DE:50:97:AF:43:01:1E:56:6F:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.224.91.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:93:6e:d7:e0:62:b2:3b:a9:f8:b4:b5:b1:9c:05:5a:f5:9f:
         1d:4b:0b:99:1f:b7:77:ec:f4:be:56:bf:79:bb:0c:31:8b:2c:
         b9:5a:8a:b5:bd:27:5a:f8:42:cb:84:5e:3c:a9:5a:fb:a6:a3:
         2a:46:83:9c:0f:f2:6a:c6:3c:b7:92:5c:d0:e2:b5:93:6d:bf:
         ae:de:32:aa:b2:83:b1:c1:4b:28:80:19:f0:2b:bf:15:3d:2f:
         15:b4:7f:cb:8c:a2:f8:3c:d0:5e:03:dd:45:66:6d:ba:15:d4:
         e4:84:6f:da:25:f6:3d:f7:95:ed:f3:6c:e9:e6:ca:0f:f4:3c:
         44:de:1a:47:bc:8e:7c:9f:2e:87:69:62:be:b4:8f:5f:3f:d1:
         ae:e4:91:fb:61:03:d0:bc:b6:a3:ed:ce:d6:4e:4c:ed:9d:8b:
         46:6a:c4:c9:ef:44:e4:45:6e:38:ce:27:b4:cb:95:9f:60:c2:
         f0:d9:d0:52:2f:f8:11:3c:ed:25:bc:a6:c6:8d:dc:d3:45:f6:
         07:83:70:5d:41:78:2e:f6:54:e9:0a:b9:a3:48:7a:19:87:0a:
         e3:15:8f:dd:2b:c2:ef:d6:6a:ca:94:26:5a:90:5e:cf:0f:f4:
         0c:a7:e5:ff:70:d3:5e:3a:66:e5:5b:ac:3a:f0:0a:e8:55:95:
         4d:5c:39:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:49:45 2026 by rpki-client