Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/87c25570-4629-3e86-92ae-ad1b08d37561.roa
File:                     87c25570-4629-3e86-92ae-ad1b08d37561.roa (raw, json)
Hash identifier:          3sXBIcpZNfo/UxzfDP6EhMCSkTrG/4FeYUsl0mqZimk=
Subject key identifier:   AE:07:F0:41:5D:B3:F0:3E:6B:9C:A3:70:74:CC:24:2B:5A:9A:9C:74
Certificate issuer:       /CN=f240d902-7ba3-4aec-b663-471f0fabfe37
Certificate serial:       010D0C9F4328584CBF172640964A51B6919187C0
Authority key identifier: E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/87c25570-4629-3e86-92ae-ad1b08d37561.roa
Signing time:             Wed 04 Feb 2026 02:00:31 +0000
ROA not before:           Wed 04 Feb 2026 02:00:31 +0000
ROA not after:            Tue 05 May 2026 01:00:31 +0000
asID:                     22808
IP address blocks:        206.48.244.0/24 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:bf:17:26:40:96:4a:51:b6:91:91:87:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f240d902-7ba3-4aec-b663-471f0fabfe37
        Validity
            Not Before: Feb  4 02:00:31 2026 GMT
            Not After : May  5 01:00:31 2026 GMT
        Subject: CN=958b006e-adc3-4ad5-a94c-8fd07b13f564
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:43:15:49:fb:35:71:a1:ee:50:d4:e0:96:86:
                    1e:1a:4a:63:fa:83:00:86:6c:bf:bb:e5:bf:00:41:
                    72:70:5d:80:d6:46:8a:b6:f7:cb:76:e0:ad:e5:36:
                    e1:0b:2f:36:ec:b8:9f:6e:a5:d5:18:d5:8e:c5:c4:
                    56:33:62:a8:d2:42:90:ac:df:18:e1:ab:65:28:26:
                    45:0f:28:7c:6e:be:c0:75:ad:5c:46:82:11:53:3a:
                    c2:a5:fd:af:8a:07:f8:c9:a8:88:66:45:5f:56:f5:
                    19:4e:b0:c9:9b:bc:5c:3d:43:25:9b:d2:17:d3:62:
                    71:e2:a8:a4:82:40:4b:36:64:e5:ae:f0:2a:c7:80:
                    a2:c6:93:52:76:79:05:30:4f:de:15:ff:8e:d0:a4:
                    c3:f5:9d:32:31:cf:74:d3:92:01:ee:31:ac:60:25:
                    d4:e3:78:11:a0:a7:73:1f:5b:3f:1e:72:93:cc:ff:
                    68:d0:ca:f3:ac:16:49:ec:15:60:0c:23:a3:01:a9:
                    78:45:f0:71:b2:fa:dc:77:28:90:05:e1:0d:00:42:
                    df:5c:a2:83:07:58:80:30:47:b1:2f:ae:e5:ba:ec:
                    d7:88:44:f1:6a:68:f9:ed:dc:12:d9:e9:63:12:9d:
                    9a:b8:58:5d:49:c8:eb:24:2a:8b:dc:6f:62:30:2d:
                    f9:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:07:F0:41:5D:B3:F0:3E:6B:9C:A3:70:74:CC:24:2B:5A:9A:9C:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/87c25570-4629-3e86-92ae-ad1b08d37561.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl

            X509v3 Authority Key Identifier:
                keyid:E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.48.244.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:bb:9c:b9:32:1e:e2:ed:bf:d3:0f:8b:27:3d:02:2f:a4:ec:
         c1:3c:ea:ca:ba:3e:5a:80:47:7b:07:d2:8d:9e:ad:84:d4:3c:
         a1:86:27:86:76:8e:57:f7:26:45:e4:20:b7:56:a3:7c:ce:25:
         e5:6b:d0:c4:08:99:cd:84:d5:c5:fa:96:71:fa:2e:53:f5:c0:
         61:1f:c0:b9:40:a8:5b:26:c0:09:7d:a5:14:dd:49:f9:d0:ec:
         26:6b:63:ce:3d:59:58:bb:5d:ef:b6:f1:a0:fc:fb:ef:9c:af:
         8e:f8:70:e8:bd:cf:d7:f0:9f:c9:c1:7e:68:e4:de:c3:fa:c9:
         9e:e7:40:22:0d:7e:90:6a:c7:47:32:b6:66:85:f6:99:b2:c3:
         76:40:af:9b:01:fb:cd:44:5d:11:42:48:4d:c2:6c:81:d3:98:
         e1:d4:90:a2:cc:e1:20:9e:89:22:8d:54:46:49:45:0f:fe:b7:
         94:dc:a6:b4:08:9e:e9:bf:aa:f3:b2:7d:a1:d2:7d:64:d7:96:
         2c:2e:61:5c:52:3b:ba:2d:74:72:29:b1:ce:4e:45:65:dd:a5:
         c4:c3:3c:f1:1d:44:9a:e3:4a:cb:a5:a7:f1:7b:9f:a3:86:4c:
         63:42:ef:26:38:be:aa:16:46:23:00:3c:57:f0:47:ad:85:1f:
         de:06:76:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:30:47 2026 by rpki-client