Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854/290cf5fd-1adb-3368-ac39-260194c932ba.roa
File:                     290cf5fd-1adb-3368-ac39-260194c932ba.roa (raw, json)
Hash identifier:          LxLDPnjHGY+eAmKIIAxxwn+tFXGy3+ltZK5Io3VhrQc=
Subject key identifier:   0D:BC:BB:23:25:76:7C:CD:48:99:14:CF:EC:23:0E:67:D3:62:8A:96
Certificate issuer:       /CN=2a71f00e-0200-48df-9cb4-008df9a4a854
Certificate serial:       010D0C9F4328584CD2A1E9DCA8EB80E591583400
Authority key identifier: 38:0D:64:C0:FC:18:06:FB:A2:13:99:2A:01:58:BD:19:46:77:76:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854/290cf5fd-1adb-3368-ac39-260194c932ba.roa
Signing time:             Wed 11 Feb 2026 02:00:32 +0000
ROA not before:           Wed 11 Feb 2026 02:00:32 +0000
ROA not after:            Tue 12 May 2026 01:00:32 +0000
asID:                     14639
IP address blocks:        199.230.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854/2a71f00e-0200-48df-9cb4-008df9a4a854.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854/2a71f00e-0200-48df-9cb4-008df9a4a854.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d2:a1:e9:dc:a8:eb:80:e5:91:58:34:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a71f00e-0200-48df-9cb4-008df9a4a854
        Validity
            Not Before: Feb 11 02:00:32 2026 GMT
            Not After : May 12 01:00:32 2026 GMT
        Subject: CN=fd89fbac-61e6-4733-94c9-2b1e39702205
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:3a:f7:0b:67:a7:1d:b4:16:e1:18:4a:d8:ac:
                    59:07:c1:ef:95:a9:61:cb:5e:d6:85:09:81:e2:f3:
                    89:90:94:f1:cd:f4:cb:30:ea:12:92:17:63:15:dd:
                    70:00:65:e8:da:c2:55:98:df:c5:ac:92:61:2d:8a:
                    98:27:7c:84:97:a4:fa:11:c0:44:df:e4:8f:d9:ae:
                    78:bf:21:51:b9:5f:47:2f:13:66:23:2d:30:1e:c2:
                    3b:6a:ec:66:29:f9:82:d6:f1:6e:32:16:79:c8:4a:
                    25:f7:99:ac:a8:67:7a:9d:93:b7:d9:25:96:7c:fa:
                    61:9a:15:50:40:ac:c4:26:12:d0:48:33:93:b4:8d:
                    13:d8:dc:20:3d:aa:c8:9c:5f:e1:c1:e4:c0:45:24:
                    b3:e5:01:ce:b1:7f:e2:87:d2:c2:6b:c9:e7:60:b9:
                    b7:ba:de:5f:5a:74:91:13:ca:54:37:ea:d2:1f:16:
                    ea:91:b1:22:3e:0c:38:f9:19:93:a6:c3:4a:d4:c0:
                    bd:e0:c1:32:d3:ae:76:8e:27:71:b4:9b:c4:e5:3e:
                    77:22:08:b5:81:90:9b:61:1d:ca:84:b8:23:d5:ae:
                    57:1c:b7:ec:96:7e:91:c1:51:7b:57:95:54:8c:f1:
                    98:d6:6b:f1:3d:0f:5d:a4:c1:e6:c8:d5:d9:2d:56:
                    81:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:BC:BB:23:25:76:7C:CD:48:99:14:CF:EC:23:0E:67:D3:62:8A:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854/290cf5fd-1adb-3368-ac39-260194c932ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854/2a71f00e-0200-48df-9cb4-008df9a4a854.crl

            X509v3 Authority Key Identifier:
                keyid:38:0D:64:C0:FC:18:06:FB:A2:13:99:2A:01:58:BD:19:46:77:76:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.230.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:fc:7b:3b:73:88:8a:25:2a:60:a9:22:24:7d:ca:93:38:bc:
         b4:56:ba:5b:e0:6c:e9:91:5c:58:e3:2a:e9:e3:4b:52:aa:f3:
         fd:da:bc:5b:8f:37:15:6c:60:6b:c3:b0:0a:5b:5d:53:e3:42:
         67:ca:fa:83:92:e2:92:47:e8:cf:30:62:9e:5b:17:e7:5c:18:
         d4:ea:a0:a7:c8:a1:ba:88:73:ea:61:e1:6a:aa:a3:be:c9:16:
         8f:b3:de:7e:a9:5b:98:28:a7:9a:97:51:13:76:97:12:d5:7c:
         fa:dc:a2:d9:2d:a8:7f:81:27:28:2b:90:35:92:62:44:2e:c3:
         dd:7a:c5:61:4a:98:a4:d1:5f:fb:26:7d:96:67:05:c2:fb:80:
         c3:b2:a8:88:16:cf:15:14:06:57:91:3d:bd:a2:ef:f3:6c:10:
         07:20:3e:56:59:ed:ad:6d:f4:e1:d3:c7:93:0d:62:ef:28:c0:
         ca:8d:ef:21:af:6e:eb:30:8b:64:75:28:28:35:04:8a:53:1a:
         13:ad:a2:55:34:47:4f:41:e3:b8:ae:64:c9:2f:ba:81:9a:e9:
         a3:fc:ac:ce:3f:71:a5:27:ca:2d:2b:25:4e:85:8f:c6:9d:0c:
         2f:f3:3b:cf:86:d0:98:32:6c:5a:88:43:b4:5b:d1:57:3c:3a:
         22:88:4d:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:44:42 2026 by rpki-client