Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/1439153d-c93d-3515-adae-1d4468d668f3.roa
File:                     1439153d-c93d-3515-adae-1d4468d668f3.roa (raw, json)
Hash identifier:          CcjiwlDgWrkQ3+mLYfULABBfqesMfEDmaqyacYYYRKQ=
Subject key identifier:   56:2A:D0:69:C2:7F:A7:2A:BA:59:A8:65:3C:8E:95:A8:27:73:1A:A8
Certificate issuer:       /CN=d65fef8f-4cd2-4778-9158-f56f30242812
Certificate serial:       010D0C9F4328584D00B252DF2DE0550A8F3B4380
Authority key identifier: 7F:98:50:05:90:5B:E3:9C:96:CB:3B:02:50:E6:37:B4:02:B3:49:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/1439153d-c93d-3515-adae-1d4468d668f3.roa
Signing time:             Fri 27 Feb 2026 14:00:40 +0000
ROA not before:           Fri 27 Feb 2026 14:00:40 +0000
ROA not after:            Thu 28 May 2026 13:00:40 +0000
asID:                     2734
IP address blocks:        208.64.254.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:00:b2:52:df:2d:e0:55:0a:8f:3b:43:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d65fef8f-4cd2-4778-9158-f56f30242812
        Validity
            Not Before: Feb 27 14:00:40 2026 GMT
            Not After : May 28 13:00:40 2026 GMT
        Subject: CN=2eeec96c-1660-4d68-b98c-67e9cb13ab34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:0a:c0:3c:5f:88:2e:58:c1:a4:65:4b:52:74:
                    11:14:15:41:c2:06:79:c0:e1:59:a9:87:0c:e2:b5:
                    94:af:27:0c:1f:20:83:b1:80:18:c5:71:2b:b3:10:
                    98:5d:a6:64:5b:aa:61:ba:e4:a0:f5:66:58:fd:c4:
                    3e:9a:53:b2:6f:75:cc:06:81:9e:78:4a:a6:15:ed:
                    65:04:a4:5c:b2:ad:2b:c1:f6:18:90:d4:8e:95:bf:
                    b4:d1:8d:f4:93:d4:65:0a:ce:76:35:64:53:5f:52:
                    83:cf:40:43:70:43:fa:af:0e:7b:7f:88:b1:1a:f4:
                    4d:d1:50:65:65:4b:60:20:ee:17:26:e4:11:d0:85:
                    f0:e6:24:1c:02:a3:82:d4:b0:dc:8b:e3:c8:51:2c:
                    ba:a6:10:77:26:2c:3a:be:14:b4:c7:68:87:c9:e7:
                    e5:84:67:ab:de:b6:4e:96:a4:02:09:3c:04:90:eb:
                    b9:50:6d:e8:e0:b5:e8:22:82:69:db:62:bb:4b:17:
                    db:2e:d2:06:4c:93:d5:d0:f7:91:17:57:53:31:41:
                    95:67:2f:2b:ee:ce:00:e5:2f:b3:e4:51:58:da:ff:
                    60:3a:49:a1:5c:6c:41:12:9d:47:64:8d:93:4c:33:
                    78:4d:d7:35:c9:41:8a:21:c8:38:1f:61:9c:d0:d9:
                    33:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:2A:D0:69:C2:7F:A7:2A:BA:59:A8:65:3C:8E:95:A8:27:73:1A:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/1439153d-c93d-3515-adae-1d4468d668f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.crl

            X509v3 Authority Key Identifier:
                keyid:7F:98:50:05:90:5B:E3:9C:96:CB:3B:02:50:E6:37:B4:02:B3:49:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.64.254.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:60:3b:e6:b8:4a:04:e6:90:5c:ea:0a:8b:ff:fe:46:a0:25:
         80:91:b1:87:d3:ec:ea:4f:ac:46:35:46:29:c3:35:06:8c:40:
         09:fd:8f:f8:bb:25:37:66:4d:d3:98:ba:24:1a:2e:58:b6:c8:
         b2:7f:3a:95:d8:d1:10:d4:06:d2:f4:3e:e9:47:2d:93:75:de:
         8f:1b:67:dc:5f:77:f8:40:b3:fb:d1:84:37:15:6a:91:48:b9:
         56:1b:73:34:33:47:59:04:49:9e:89:73:d2:e8:5e:e5:fd:40:
         fa:69:92:8b:77:5b:b0:44:4b:51:23:b7:93:a5:09:85:5c:28:
         3f:10:8b:5c:fb:65:47:67:1a:76:f2:17:b4:13:df:94:f3:9e:
         92:d2:ee:31:b0:3a:4f:31:ef:61:29:b5:2b:5a:af:f6:92:1f:
         2c:a8:58:d1:f4:21:70:3f:ca:f7:8d:0d:be:c3:57:46:d8:77:
         a8:df:58:66:11:ca:ea:3d:e6:09:43:7b:ff:2f:ee:68:a1:5c:
         7c:c9:89:96:30:00:23:ee:df:ca:89:1a:2b:0e:fc:89:f4:99:
         5e:7f:f1:e5:d1:1b:6f:14:ee:51:b5:ba:86:45:5e:6e:30:29:
         d5:0e:97:e0:d5:41:c6:48:2b:eb:00:4a:22:26:ef:80:13:0d:
         e3:0d:2f:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:49:51 2026 by rpki-client