Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb/255f27c3-b702-3202-96f5-5f1614a9bd0c.roa
File:                     255f27c3-b702-3202-96f5-5f1614a9bd0c.roa (raw, json)
Hash identifier:          HRQ3l7KhpxGy2OBV3iNKMDnSM7CtAMDlMTv0qYBb2QY=
Subject key identifier:   FB:47:53:DE:D1:71:7D:4E:62:C8:51:76:46:9E:54:A9:6E:D2:80:DC
Certificate issuer:       /CN=445edff1-360d-4ae2-a045-ccf7dbc4beeb
Certificate serial:       010D0C9F4328584CAA2715297393A60022CB4900
Authority key identifier: 00:B7:C6:A7:48:8A:12:60:2D:94:01:4C:B0:5E:88:88:58:B0:51:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb/255f27c3-b702-3202-96f5-5f1614a9bd0c.roa
Signing time:             Tue 27 Jan 2026 14:00:36 +0000
ROA not before:           Tue 27 Jan 2026 14:00:36 +0000
ROA not after:            Mon 27 Apr 2026 13:00:36 +0000
asID:                     19528
IP address blocks:        208.89.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb/445edff1-360d-4ae2-a045-ccf7dbc4beeb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb/445edff1-360d-4ae2-a045-ccf7dbc4beeb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:aa:27:15:29:73:93:a6:00:22:cb:49:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=445edff1-360d-4ae2-a045-ccf7dbc4beeb
        Validity
            Not Before: Jan 27 14:00:36 2026 GMT
            Not After : Apr 27 13:00:36 2026 GMT
        Subject: CN=d5be793d-5b1b-47ce-bfe8-256b263bb5e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:8b:5a:ee:16:58:a2:58:49:a4:50:d1:09:20:
                    c6:5b:46:93:52:01:df:bc:b8:38:51:4f:c5:33:af:
                    6a:72:64:c0:cb:83:8a:f9:83:5f:6b:22:9f:c7:bc:
                    31:04:e5:e6:29:4b:ea:fb:01:25:4b:4a:7f:b6:48:
                    42:13:92:7c:9b:39:fc:6a:75:9d:cb:72:0f:e7:e3:
                    cd:77:26:c2:9c:01:1d:43:35:10:55:cd:4b:3b:9a:
                    a8:94:a9:c2:04:0d:fc:36:60:6c:a1:5e:9c:48:af:
                    84:94:e9:00:dc:b2:d0:32:9e:a5:e8:c6:ea:3c:67:
                    fe:9e:84:cf:2c:83:fb:ab:13:3b:a7:9a:90:93:83:
                    4a:20:5f:a3:02:ef:57:3e:76:7a:19:d7:bb:76:39:
                    3c:bf:bf:05:a3:f3:9a:6e:ab:ea:db:04:bb:ea:14:
                    f2:04:b2:1b:34:4a:3e:f5:4b:6e:2d:e1:64:0c:e1:
                    72:b9:6a:a9:7b:f9:98:5a:7f:ba:54:1e:fa:50:6b:
                    e4:65:9e:8f:78:dd:c3:cb:15:20:64:03:b2:e3:c0:
                    8e:1c:c5:0f:72:c0:18:5e:f1:b4:ba:aa:9d:aa:35:
                    ec:fe:c3:5d:21:5e:16:59:26:23:80:b4:d4:91:cd:
                    4b:03:a8:20:b9:0f:27:b5:c7:db:d9:ce:7d:dd:ca:
                    28:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:47:53:DE:D1:71:7D:4E:62:C8:51:76:46:9E:54:A9:6E:D2:80:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb/255f27c3-b702-3202-96f5-5f1614a9bd0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb/445edff1-360d-4ae2-a045-ccf7dbc4beeb.crl

            X509v3 Authority Key Identifier:
                keyid:00:B7:C6:A7:48:8A:12:60:2D:94:01:4C:B0:5E:88:88:58:B0:51:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.89.244.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:6f:d3:af:59:6e:04:71:dd:d6:1f:27:80:20:63:03:d2:c4:
         c4:fd:6b:f0:fb:f1:d3:b3:57:63:ff:fd:71:8c:10:fb:70:48:
         7b:7f:c6:b4:eb:aa:51:77:c7:b6:9c:a4:d4:f9:f2:a8:27:33:
         93:79:b8:1e:c1:ef:0b:c7:1a:fd:af:d7:89:2a:1f:d0:6e:58:
         3e:cd:3b:72:6f:f3:14:e1:11:92:7d:2f:12:99:05:6c:4b:ac:
         57:8f:e7:bb:44:46:a4:45:8b:19:56:f2:74:4d:c8:4d:02:4a:
         b0:f8:1e:06:42:5e:02:e2:31:0c:e3:82:37:73:18:c6:55:10:
         68:55:5c:d1:c4:73:9c:29:5e:2b:78:c7:a9:4d:91:2f:14:ca:
         ff:75:da:2a:c4:a3:49:ed:b4:90:ea:58:ad:ec:7e:8a:84:9c:
         45:d7:aa:76:94:3e:04:5d:69:96:ee:8c:45:ce:a6:b9:a2:79:
         5d:02:44:ff:06:98:c5:5c:b0:23:03:4b:e0:0b:da:d5:c2:af:
         44:e1:73:60:08:38:3b:c6:63:55:64:90:17:be:1f:7c:fe:cf:
         bf:2d:ca:d4:41:f9:a2:2b:f8:9f:c7:1d:91:5a:1f:10:32:d9:
         11:b1:dd:39:e1:2f:08:13:82:bc:93:8c:fb:5e:7f:65:b6:92:
         b4:16:1f:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:20:57 2026 by rpki-client