Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/26a90ade-c2b4-3e9c-80a0-b67791207881.roa
File:                     26a90ade-c2b4-3e9c-80a0-b67791207881.roa (raw, json)
Hash identifier:          kBn3c8HPrAAwZKVmjGLAAfBshrzCgQk66Wt2SyIF2Ic=
Subject key identifier:   5E:2E:E0:89:9F:A2:38:DB:03:DE:36:24:FA:33:D4:DB:AC:3E:A0:01
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CFDEA96D2DF1CEF98578FF780
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/26a90ade-c2b4-3e9c-80a0-b67791207881.roa
Signing time:             Thu 26 Feb 2026 14:00:40 +0000
ROA not before:           Thu 26 Feb 2026 14:00:40 +0000
ROA not after:            Wed 27 May 2026 13:00:40 +0000
asID:                     21514
IP address blocks:        50.216.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fd:ea:96:d2:df:1c:ef:98:57:8f:f7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 26 14:00:40 2026 GMT
            Not After : May 27 13:00:40 2026 GMT
        Subject: CN=a0b8a962-e9a1-4a1e-baf7-35f6bbb08fe6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:49:c7:3e:97:9a:f3:7b:a1:d5:2d:fa:09:a8:
                    51:e3:83:2b:7b:35:2f:f2:4c:a2:11:dc:46:62:db:
                    89:a2:4c:1c:48:63:a9:3f:f4:ba:3a:71:0f:1d:52:
                    26:19:48:f1:96:c6:31:92:9b:5c:4c:39:d0:4e:6e:
                    df:15:16:15:e9:fd:4c:ab:54:3c:0d:b7:26:4f:35:
                    ee:22:2d:00:53:cb:24:50:77:03:81:d2:02:ce:32:
                    97:c1:5a:d7:13:c2:4b:28:1c:1b:04:d2:79:23:19:
                    25:75:8e:91:4e:d2:15:8e:20:8a:0c:36:28:2e:36:
                    bb:a7:c1:e3:fb:c7:20:5b:fb:e2:21:d0:6d:53:6b:
                    b8:fb:ef:bc:7b:8f:14:1f:75:b5:91:71:e0:42:d2:
                    ef:9c:12:7e:5a:15:95:2b:60:0a:7e:46:da:31:d7:
                    fc:6d:d2:9e:c3:76:9f:0a:9e:71:ea:8e:5e:1f:a3:
                    79:5c:e0:69:05:f2:03:ba:4a:9f:ac:92:01:36:bf:
                    23:a0:c2:7e:08:bb:d5:2d:4f:de:9c:3f:50:bb:10:
                    bc:49:1e:4d:2a:9b:ca:a7:57:d5:1f:27:a0:30:82:
                    ff:9c:de:d8:da:e0:53:cc:4a:fb:f7:61:76:eb:0c:
                    0a:c6:e7:9e:bf:1f:f5:32:21:d6:c3:d4:96:e1:66:
                    bb:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:2E:E0:89:9F:A2:38:DB:03:DE:36:24:FA:33:D4:DB:AC:3E:A0:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/26a90ade-c2b4-3e9c-80a0-b67791207881.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.216.41.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:c9:45:3d:24:da:53:d3:1f:5d:9c:f4:9f:19:15:8d:ee:35:
         9a:3e:df:c3:6a:93:f8:6d:57:50:8b:21:0a:79:e7:4f:27:d8:
         21:14:f1:59:a8:bf:a7:5c:73:d1:e5:cf:7f:e5:a9:a7:8d:a4:
         a3:d7:72:3f:1d:a9:79:df:54:ea:d0:81:8d:c4:b1:98:3c:31:
         2b:bf:9f:6c:9a:9d:8f:94:82:1f:a9:2b:73:27:84:ba:11:a3:
         fe:72:ff:2c:d6:43:8e:3a:10:5b:2b:1c:80:4e:51:8e:31:7e:
         4c:77:86:7b:91:b0:50:86:6a:93:14:c4:c3:ea:ae:c8:af:92:
         62:31:7c:f2:e1:b2:f8:ee:b4:ff:a6:64:7d:7c:32:fb:ca:db:
         2b:cc:f5:19:38:03:77:1e:8c:5d:db:e7:1f:2f:53:c3:77:85:
         d5:4e:52:20:d6:44:69:ba:1b:06:73:5c:f9:9f:5d:73:3f:64:
         00:f8:8b:9e:a9:8f:1b:99:d9:53:bd:d0:1a:f8:a4:dd:71:07:
         8c:d1:9e:63:64:6d:0c:e8:86:65:dd:15:5f:a4:14:15:2c:dd:
         72:42:01:6c:fd:e3:d6:da:64:33:9e:da:c2:3f:61:5c:59:68:
         00:0d:70:5a:0a:98:59:80:b8:94:e2:92:84:09:cb:0d:09:cc:
         f2:83:f7:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:30:48 2026 by rpki-client