Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb/6dac8569-fab9-3825-b893-8560f81faaad.roa
File:                     6dac8569-fab9-3825-b893-8560f81faaad.roa (raw, json)
Hash identifier:          HJ5dr1F1ycwSgS6hk1NER6oOgvJaJ8ANBeDSHNPcqZM=
Subject key identifier:   98:D5:1B:1C:D7:82:9A:D2:E0:63:54:07:72:E9:C7:B6:7F:7B:1F:F8
Certificate issuer:       /CN=445edff1-360d-4ae2-a045-ccf7dbc4beeb
Certificate serial:       010D0C9F4328584CC3473BE82F642A4C33166500
Authority key identifier: 00:B7:C6:A7:48:8A:12:60:2D:94:01:4C:B0:5E:88:88:58:B0:51:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb/6dac8569-fab9-3825-b893-8560f81faaad.roa
Signing time:             Thu 05 Feb 2026 14:00:40 +0000
ROA not before:           Thu 05 Feb 2026 14:00:40 +0000
ROA not after:            Wed 06 May 2026 13:00:40 +0000
asID:                     14618
IP address blocks:        208.89.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb/445edff1-360d-4ae2-a045-ccf7dbc4beeb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb/445edff1-360d-4ae2-a045-ccf7dbc4beeb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c3:47:3b:e8:2f:64:2a:4c:33:16:65:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=445edff1-360d-4ae2-a045-ccf7dbc4beeb
        Validity
            Not Before: Feb  5 14:00:40 2026 GMT
            Not After : May  6 13:00:40 2026 GMT
        Subject: CN=9c1aa6c5-9844-45d7-8f26-bca18e9430ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:9b:1c:2a:46:d0:64:22:9b:59:34:1c:41:2c:
                    f2:7e:46:df:79:d8:87:7c:81:83:4f:5e:57:88:68:
                    87:b7:aa:d2:68:5e:aa:85:34:d2:9a:2b:69:71:87:
                    6c:39:87:47:83:a7:2a:bf:ba:5e:4f:16:49:87:c0:
                    99:f5:29:cf:d6:09:cd:6d:e9:c1:9a:2d:2d:40:18:
                    d3:45:54:0f:80:09:79:43:21:7b:a6:2a:a1:6c:75:
                    71:f7:4f:9c:33:76:fe:ed:01:81:e4:b0:1d:4a:9b:
                    03:27:a2:35:dd:ec:b5:36:e9:e3:2a:75:0e:c6:61:
                    82:39:ba:4d:08:f4:55:d4:a2:b9:54:cc:04:c9:d9:
                    e5:71:ac:9f:ed:eb:20:79:ca:68:80:ab:19:80:5c:
                    ef:39:07:6a:a0:f5:99:56:d2:19:6a:e1:f7:e8:71:
                    35:5d:6e:9c:11:fb:2b:de:ce:bb:86:1b:25:50:74:
                    82:5a:18:0b:e9:27:d8:72:af:6d:f6:3b:2e:57:92:
                    b6:13:fd:b0:87:12:58:45:ec:ef:32:45:ea:5d:86:
                    48:f5:2f:99:c0:7d:8b:16:69:85:0d:a2:84:0e:32:
                    cd:22:21:97:52:ba:76:fd:0b:f4:5d:2e:52:7e:25:
                    e6:3f:ce:df:5a:3e:ac:f3:4f:41:64:26:e7:68:9b:
                    9e:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:D5:1B:1C:D7:82:9A:D2:E0:63:54:07:72:E9:C7:B6:7F:7B:1F:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb/6dac8569-fab9-3825-b893-8560f81faaad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb/445edff1-360d-4ae2-a045-ccf7dbc4beeb.crl

            X509v3 Authority Key Identifier:
                keyid:00:B7:C6:A7:48:8A:12:60:2D:94:01:4C:B0:5E:88:88:58:B0:51:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.89.244.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:7d:e7:66:ed:4f:07:13:07:9e:13:a5:e8:72:1f:a6:b5:34:
         f9:73:0a:98:17:3a:00:99:53:65:b7:bd:91:dc:84:28:83:f9:
         db:42:92:d4:9b:f0:c3:a3:1f:8b:e5:4c:37:08:99:e4:f1:88:
         b1:9d:95:88:bb:c1:40:35:db:ac:99:6e:eb:77:cb:01:bc:89:
         b9:06:a5:29:70:bb:7d:0f:23:d9:c9:68:42:90:3e:7d:d6:75:
         a5:2c:b7:cb:68:c9:a7:21:81:48:f6:eb:d8:c3:f2:10:3f:2b:
         b9:84:24:29:af:77:bb:d4:e0:70:78:72:ab:ba:07:12:25:76:
         a8:41:c1:61:4a:f0:7a:04:5b:06:78:17:d1:65:b2:3d:21:1e:
         4c:ab:10:80:21:ce:7c:f9:3d:f5:a2:31:82:b0:40:16:39:6e:
         1f:ea:77:e7:6f:1a:f8:85:c8:73:65:25:d2:81:09:30:01:f1:
         ac:aa:e6:c4:3b:4c:12:fa:70:98:fc:83:cf:6b:e4:45:3b:bf:
         0c:86:8c:6e:74:f3:c4:e8:aa:70:0a:a4:3f:d0:8a:81:2f:50:
         58:e3:44:7b:9f:db:2c:6a:db:31:4b:7b:44:0e:01:fb:10:32:
         54:c0:2f:9f:70:33:34:27:2b:7b:cb:45:c0:b8:e6:dd:67:94:
         f9:55:1a:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:35:01 2026 by rpki-client