Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/5ceffb24-5936-3b70-9949-8f99bb4b42d4.roa
File:                     5ceffb24-5936-3b70-9949-8f99bb4b42d4.roa (raw, json)
Hash identifier:          4pR2EDaZighnoFX9MNmlhCDLZG/yRpFu9kLVz8tX4f4=
Subject key identifier:   00:E6:D3:B8:14:3A:6E:C1:D7:81:D9:93:EA:7E:2A:6C:17:D0:AF:E4
Certificate issuer:       /CN=6e9c5894-f794-4209-a00d-cf232363d7c6
Certificate serial:       010D0C9F4328584CE7922852D036E4B4122ACEC0
Authority key identifier: EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/5ceffb24-5936-3b70-9949-8f99bb4b42d4.roa
Signing time:             Wed 18 Feb 2026 14:00:41 +0000
ROA not before:           Wed 18 Feb 2026 14:00:41 +0000
ROA not after:            Tue 19 May 2026 13:00:41 +0000
asID:                     52129
IP address blocks:        66.159.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e7:92:28:52:d0:36:e4:b4:12:2a:ce:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e9c5894-f794-4209-a00d-cf232363d7c6
        Validity
            Not Before: Feb 18 14:00:41 2026 GMT
            Not After : May 19 13:00:41 2026 GMT
        Subject: CN=8b4e4af8-934b-4501-9b45-f5265f10b00f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:73:a1:40:e2:8a:e1:ca:5a:20:db:49:41:8f:
                    81:1c:0f:e8:97:e9:80:fa:e9:f1:a3:a9:55:be:25:
                    50:25:d6:5b:47:04:5b:6e:ec:fe:09:30:56:b1:4e:
                    fb:c7:be:20:5d:e7:df:22:6a:bf:45:44:b5:42:51:
                    ac:4a:c4:50:d6:19:9c:07:77:fc:3e:ff:f3:52:68:
                    38:5e:6d:dd:1d:36:02:e6:fb:6f:49:c1:b1:40:97:
                    0b:11:3f:83:ca:0c:58:f2:0d:d5:74:14:47:d6:3e:
                    9a:63:78:61:78:c1:ae:7b:12:ff:6a:02:02:dc:83:
                    df:9b:36:6e:9c:45:94:f8:32:4a:81:20:4a:4e:96:
                    5e:96:35:90:94:a3:1c:6a:ec:1e:0f:e0:d3:17:97:
                    c9:bc:d8:2a:5d:1b:2d:43:73:5f:cf:18:5a:b8:78:
                    e2:df:c1:8f:27:76:c5:30:68:40:d3:3a:2b:08:08:
                    8b:d2:81:b3:2c:a6:bf:86:0c:cd:5f:10:4c:f1:f1:
                    08:30:c8:c4:8d:31:92:00:6c:4c:e2:70:6e:c5:a7:
                    d6:13:e8:ec:a7:dc:44:70:c4:3d:2e:8a:ab:eb:56:
                    09:90:db:fd:37:6b:e8:7c:0c:b2:14:39:f7:ce:3a:
                    88:55:49:38:94:aa:ac:39:0c:53:16:4d:c0:19:d0:
                    fa:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:E6:D3:B8:14:3A:6E:C1:D7:81:D9:93:EA:7E:2A:6C:17:D0:AF:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/5ceffb24-5936-3b70-9949-8f99bb4b42d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl

            X509v3 Authority Key Identifier:
                keyid:EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.159.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:38:96:e3:8e:40:f4:72:75:1b:a2:89:68:16:75:80:f5:c8:
         01:f4:a4:40:ff:e0:ac:5e:17:9a:ec:00:4d:70:41:df:32:99:
         86:ad:e2:58:ff:33:0f:2b:df:92:44:2b:fa:fc:a0:4a:16:8a:
         91:33:f4:92:72:89:6b:5b:13:27:20:69:16:83:36:ba:0a:01:
         16:da:3b:28:99:2c:22:ce:bd:f1:52:84:77:c3:4b:ca:d0:cf:
         87:96:56:ec:6f:6e:fe:3e:a7:82:70:30:60:b8:6c:73:a2:3c:
         28:14:88:15:76:d3:79:e4:58:5f:e4:05:5c:1b:ad:87:16:a6:
         b5:59:90:37:de:79:7d:72:3a:e8:25:aa:23:04:dd:8c:48:3e:
         75:6c:63:59:e9:24:e9:c5:20:cc:2c:c8:bf:0e:20:25:7b:c3:
         60:fc:7e:52:f6:77:31:e0:5d:7c:63:99:3e:2f:1c:af:ca:85:
         4b:81:00:49:01:2d:24:d8:bc:9d:a6:34:e8:f0:1d:f0:84:88:
         59:b1:db:a0:d1:52:56:30:fe:9e:61:60:d4:26:68:13:3c:a9:
         43:d3:82:1c:4b:0e:e9:3f:08:33:85:6e:9e:65:c5:5b:db:48:
         57:6e:06:f8:17:8c:cb:6c:69:66:3a:a4:5c:28:1a:b1:c5:97:
         b5:71:17:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:09:59 2026 by rpki-client