Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/2ca309db-44e8-33c3-ad6d-fdcc886a2308.roa
File:                     2ca309db-44e8-33c3-ad6d-fdcc886a2308.roa (raw, json)
Hash identifier:          bZpEhojZ9ohC2/7SnjVRzhZDzSFWTKp8QOrfWHPh7u8=
Subject key identifier:   AA:68:E9:2B:C6:EE:F8:22:2F:01:D0:C2:8A:14:0E:1A:F2:53:EF:31
Certificate issuer:       /CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
Certificate serial:       010D0C9F4328584CEA5CDF77C970FFD846F09A80
Authority key identifier: 39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/2ca309db-44e8-33c3-ad6d-fdcc886a2308.roa
Signing time:             Thu 19 Feb 2026 14:00:40 +0000
ROA not before:           Thu 19 Feb 2026 14:00:40 +0000
ROA not after:            Wed 20 May 2026 13:00:40 +0000
asID:                     393818
IP address blocks:        64.96.1.0/24 maxlen: 24
                          2620:57:4001::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ea:5c:df:77:c9:70:ff:d8:46:f0:9a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
        Validity
            Not Before: Feb 19 14:00:40 2026 GMT
            Not After : May 20 13:00:40 2026 GMT
        Subject: CN=0b98c3a4-259d-48c1-be06-83a331ace6a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c5:73:ab:c9:97:e2:1d:90:39:38:20:87:c9:
                    61:00:9b:18:bf:99:65:c1:cf:bb:eb:be:c0:4e:0b:
                    36:07:0d:ea:c9:2a:3d:b4:ca:4b:e0:3e:4b:57:be:
                    ae:ec:d0:f5:2c:90:bc:b8:f7:bd:13:74:11:81:81:
                    a8:a5:72:e5:3d:2a:7d:ea:07:e8:37:c4:b6:55:39:
                    ea:ed:27:e0:51:eb:c1:18:a6:41:f9:3c:df:df:52:
                    43:09:be:6f:e5:73:61:4f:d3:00:5b:cb:f6:bc:2b:
                    56:95:c0:a2:e9:fb:bd:d3:5f:94:04:d8:8a:97:37:
                    23:20:61:d3:1f:56:b9:06:35:b7:25:a0:e1:68:55:
                    10:76:09:95:b6:ad:60:d6:8c:a8:37:03:3b:1a:da:
                    28:34:d4:af:b7:9a:72:19:40:0a:02:ea:32:8d:ef:
                    08:f2:ae:b9:de:e1:c8:e7:bd:1b:0c:3f:fb:20:af:
                    b8:07:c2:6e:0c:40:7a:03:b9:4f:af:b5:cb:17:f5:
                    9c:d6:f9:81:14:0d:1f:02:18:1d:ce:89:64:92:8f:
                    90:10:ba:62:6c:2f:6b:ac:2e:64:37:5e:6f:52:ed:
                    bc:77:40:1b:62:35:0b:a9:47:e6:88:46:7b:42:7c:
                    65:c0:e2:b8:9e:52:8a:12:b5:e0:8f:dd:a2:96:97:
                    5e:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:68:E9:2B:C6:EE:F8:22:2F:01:D0:C2:8A:14:0E:1A:F2:53:EF:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/2ca309db-44e8-33c3-ad6d-fdcc886a2308.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.crl

            X509v3 Authority Key Identifier:
                keyid:39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.96.1.0/24
                IPv6:
                  2620:57:4001::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:2e:eb:70:8a:05:ea:bb:d7:f6:2f:ca:ba:a4:a4:93:86:99:
         65:1e:5b:3c:25:38:b9:7b:ac:c9:db:77:4b:eb:77:5e:55:c4:
         9c:19:6b:f0:c4:04:f8:4c:6d:bb:e0:10:5d:34:25:43:a0:95:
         ab:84:ad:0d:54:f4:c3:5b:2b:d7:79:46:77:63:1e:11:03:9b:
         d3:d0:c9:9f:bc:19:74:2b:33:49:00:7e:9d:5c:c8:45:82:84:
         cf:9d:66:07:2d:d8:fa:cf:8f:66:26:8b:3e:96:0e:0c:86:26:
         fc:10:08:7f:ee:7e:35:22:ac:3a:50:5b:97:fb:22:0f:41:fd:
         66:a1:49:94:0c:a3:3c:82:cb:ce:ea:ec:ae:8c:cc:8f:4d:41:
         e2:93:3a:03:4f:e3:a0:2c:74:9f:7c:6b:93:f0:7c:4c:59:64:
         4f:41:f4:97:e3:8c:eb:ca:91:69:9a:a9:d5:23:4f:b1:97:93:
         50:7d:84:56:5e:6d:4c:c3:93:b8:33:c5:ff:17:6c:15:c1:80:
         1c:87:6e:ef:56:14:70:ff:2e:48:13:b4:dd:6c:3c:f3:8d:6c:
         ab:09:b1:f0:0e:21:6f:00:13:81:94:b2:86:27:e8:f8:9a:8e:
         96:e0:88:85:15:bc:b7:50:15:32:f4:03:69:b6:1d:99:f3:ab:
         7f:99:fe:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:01:22 2026 by rpki-client