Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/502018d6-5414-4889-b679-53ff6a9e5685/8b9911ad-f040-33b2-b95a-798133f79d2a.roa
File:                     8b9911ad-f040-33b2-b95a-798133f79d2a.roa (raw, json)
Hash identifier:          +lfA50b1Ixf3P48MJnI36NKuKAaP7DeFHt4ShFultq0=
Subject key identifier:   2F:58:81:E5:A3:E4:12:93:E2:65:9C:D6:D2:A5:DE:20:A7:67:E7:2C
Certificate issuer:       /CN=502018d6-5414-4889-b679-53ff6a9e5685
Certificate serial:       010D0C9F4328584CE8F76C64D2D890F65A0A1580
Authority key identifier: F9:6B:8B:EC:BC:84:86:DE:93:EB:7B:24:1E:D2:4A:30:CD:4C:4D:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/502018d6-5414-4889-b679-53ff6a9e5685.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/502018d6-5414-4889-b679-53ff6a9e5685/8b9911ad-f040-33b2-b95a-798133f79d2a.roa
Signing time:             Thu 19 Feb 2026 02:00:32 +0000
ROA not before:           Thu 19 Feb 2026 02:00:32 +0000
ROA not after:            Wed 20 May 2026 01:00:32 +0000
asID:                     28086
IP address blocks:        209.213.184.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/502018d6-5414-4889-b679-53ff6a9e5685/502018d6-5414-4889-b679-53ff6a9e5685.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/502018d6-5414-4889-b679-53ff6a9e5685/502018d6-5414-4889-b679-53ff6a9e5685.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/502018d6-5414-4889-b679-53ff6a9e5685.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e8:f7:6c:64:d2:d8:90:f6:5a:0a:15:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=502018d6-5414-4889-b679-53ff6a9e5685
        Validity
            Not Before: Feb 19 02:00:32 2026 GMT
            Not After : May 20 01:00:32 2026 GMT
        Subject: CN=2506dc66-4f1b-4244-a1b0-9916679d9851
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:3e:69:2d:7c:2c:8c:9f:ee:0d:09:a6:dd:dc:
                    95:5f:3e:aa:e8:68:45:51:b9:07:6e:38:34:ef:76:
                    a8:5d:c8:7f:7e:bf:08:ee:05:31:c4:12:88:ea:f8:
                    ea:8b:34:5b:72:2b:7f:aa:11:25:52:07:a4:14:be:
                    81:28:52:85:f5:ef:0c:8c:4f:f3:41:5a:66:15:1b:
                    ab:88:41:95:81:29:32:f3:2b:47:cf:c6:d7:ee:94:
                    a4:e1:85:8d:bc:21:24:bf:3b:b5:5b:bb:b8:37:d9:
                    cb:a7:9c:58:90:62:e2:a4:e6:54:b6:b5:57:85:1d:
                    45:25:81:85:8f:14:e1:0c:f5:0d:3c:5d:0e:92:90:
                    8c:d4:f2:2f:1d:a9:61:9f:03:75:74:82:d5:36:77:
                    74:5e:5f:df:67:bf:d9:eb:09:d2:25:bc:1d:88:00:
                    91:a8:f5:88:42:84:8a:1d:b9:18:d0:77:50:26:7c:
                    a8:07:2f:f2:dd:6d:99:9f:a0:3d:f6:07:c9:2b:81:
                    0f:bc:17:91:c0:5f:90:d3:a8:0d:34:0d:a1:4d:34:
                    21:c6:ea:2f:b6:bb:fb:60:f5:ff:09:6b:13:e1:30:
                    b3:12:b2:9e:ac:63:88:00:a6:13:90:65:e6:96:72:
                    63:2b:ba:eb:9b:aa:8e:44:9e:bd:bc:29:26:7b:c1:
                    69:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:58:81:E5:A3:E4:12:93:E2:65:9C:D6:D2:A5:DE:20:A7:67:E7:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/502018d6-5414-4889-b679-53ff6a9e5685/8b9911ad-f040-33b2-b95a-798133f79d2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/502018d6-5414-4889-b679-53ff6a9e5685/502018d6-5414-4889-b679-53ff6a9e5685.crl

            X509v3 Authority Key Identifier:
                keyid:F9:6B:8B:EC:BC:84:86:DE:93:EB:7B:24:1E:D2:4A:30:CD:4C:4D:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/502018d6-5414-4889-b679-53ff6a9e5685.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.213.184.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:57:d4:88:d7:45:e1:da:25:e2:f1:f5:c2:7b:e3:4d:35:b8:
         48:fb:5e:1e:60:46:9a:7a:7c:a9:bb:b5:57:11:48:bd:ba:30:
         7d:83:eb:0e:b1:1e:51:84:f1:3e:fb:a0:5b:f4:92:d0:2c:30:
         59:86:ac:1d:fb:f6:b1:06:1d:4b:11:cd:a9:dd:81:22:fe:0e:
         67:2d:b4:4e:48:c4:b2:7a:bb:9c:0c:71:7f:13:f6:74:22:ae:
         c3:0c:27:52:7b:18:72:a7:47:a2:28:aa:36:72:f2:1d:30:d5:
         bb:72:2f:52:0d:f5:7b:b6:55:24:99:a6:80:d7:00:e6:2d:48:
         f2:a8:71:e5:70:c2:d6:b0:c2:82:0e:5d:91:ca:aa:8b:3b:53:
         17:14:ac:bf:84:fb:16:2e:85:3b:88:ae:f7:54:aa:58:34:6b:
         30:94:3b:99:d1:75:57:c8:00:5d:0b:21:f0:6b:70:5d:b3:c7:
         28:b4:f7:8c:2e:a1:54:87:90:5a:c5:22:cd:0a:96:ab:f4:e9:
         12:97:0d:4f:4a:37:64:9a:3e:c1:54:38:c8:92:e4:71:43:92:
         c7:18:9f:9a:c5:2e:44:ad:e2:3a:a9:09:2c:63:15:55:92:67:
         54:72:f6:a8:35:a1:d3:1a:bd:70:b8:a6:45:1f:fb:eb:a7:3a:
         bb:66:0c:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:32:17 2026 by rpki-client