Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/fe25f1e7-0375-39d5-8b39-0c584de0d8cf.roa
File:                     fe25f1e7-0375-39d5-8b39-0c584de0d8cf.roa (raw, json)
Hash identifier:          IRziFJOQXsGmtd+MBLX2YXL1v57XQqzOlJuPZnnLGnU=
Subject key identifier:   5B:3A:38:3F:D3:1E:C0:DA:7E:8B:2C:F0:70:A5:26:80:2B:00:BE:51
Certificate issuer:       /CN=73c8aa7b-fac7-4435-95df-f01200da47d9
Certificate serial:       010D0C9F4328584CCFD7416FCFA117E8CA5557A0
Authority key identifier: E3:BF:70:21:DC:44:59:AF:5C:63:F9:78:44:66:37:C6:0A:5D:B3:1C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/fe25f1e7-0375-39d5-8b39-0c584de0d8cf.roa
Signing time:             Tue 10 Feb 2026 02:00:31 +0000
ROA not before:           Tue 10 Feb 2026 02:00:31 +0000
ROA not after:            Mon 11 May 2026 01:00:31 +0000
asID:                     16509
IP address blocks:        199.66.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:cf:d7:41:6f:cf:a1:17:e8:ca:55:57:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c8aa7b-fac7-4435-95df-f01200da47d9
        Validity
            Not Before: Feb 10 02:00:31 2026 GMT
            Not After : May 11 01:00:31 2026 GMT
        Subject: CN=2c5fc246-4ee5-4794-a216-e00f17843f1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:35:e6:89:84:e5:26:c3:67:4d:65:21:4e:fb:
                    a3:96:45:60:5c:60:36:7f:e1:63:aa:71:4d:7f:10:
                    ab:ed:60:4c:35:5f:08:1b:26:29:f8:2e:99:af:02:
                    a1:f5:8e:7a:ee:fc:8d:f3:77:2f:d2:eb:dc:d8:52:
                    65:34:e2:96:14:e6:43:92:18:d7:ef:1a:0f:9e:5c:
                    f6:ba:ff:41:5f:1a:70:0e:a4:6e:db:48:aa:df:41:
                    c8:fd:e5:87:a3:85:4a:b2:a3:08:d2:6b:83:32:1c:
                    3f:a6:1b:42:e4:fd:68:8f:76:8c:5a:e9:a5:10:f9:
                    f7:92:75:1e:ff:1f:8e:82:3d:18:af:57:22:bf:a4:
                    5b:24:05:a6:d7:c3:ed:5f:4e:2f:19:17:f0:e4:80:
                    05:b2:a7:73:0c:60:77:d2:4f:45:0b:ec:10:ab:aa:
                    26:a3:60:10:82:b9:56:99:58:e4:35:9e:d6:c6:a0:
                    0b:c0:17:74:19:f2:79:f5:e9:40:4b:b0:be:60:95:
                    49:8d:59:61:62:c4:f3:94:48:9f:40:58:69:44:e9:
                    d1:86:f8:ec:65:9e:0f:1e:6f:1b:35:dc:e5:39:20:
                    6a:ef:ff:52:84:85:40:43:4c:df:e8:7a:b6:1d:2a:
                    ae:a3:2a:10:f6:e3:14:4a:9e:43:41:5b:2b:75:5d:
                    c0:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:3A:38:3F:D3:1E:C0:DA:7E:8B:2C:F0:70:A5:26:80:2B:00:BE:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/fe25f1e7-0375-39d5-8b39-0c584de0d8cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.crl

            X509v3 Authority Key Identifier:
                keyid:E3:BF:70:21:DC:44:59:AF:5C:63:F9:78:44:66:37:C6:0A:5D:B3:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.66.191.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:de:da:e2:aa:09:c5:5c:b7:88:17:28:97:38:3c:ac:4f:cd:
         4b:14:5b:a8:b3:69:3a:2e:a8:53:c1:f4:a7:21:0a:05:77:13:
         bd:8c:9f:f6:39:b3:81:74:4a:20:79:2e:bb:3b:6f:6a:30:c4:
         b1:dc:76:56:dc:61:66:69:47:36:1a:14:51:d9:b5:22:f0:cf:
         22:ce:20:d9:22:4c:d0:68:c5:67:ed:f0:4e:3a:23:71:84:21:
         24:b2:e2:df:c2:ce:c3:c8:7d:8d:56:c4:17:4a:e3:21:b5:e1:
         0f:6d:69:66:28:20:f5:73:48:ec:c9:ca:3f:16:8d:76:4a:29:
         4c:47:a8:56:68:1f:65:a0:92:00:28:68:10:60:60:10:67:0f:
         96:6b:c4:c2:aa:35:5e:bc:5b:8b:e5:3b:3b:46:9a:80:03:a7:
         f2:85:34:8f:e3:45:32:df:a5:ac:1b:f5:9e:da:df:fd:35:fb:
         6a:32:80:ef:16:f3:f5:50:43:53:e6:99:53:8b:34:f5:ad:28:
         bd:88:5e:95:b6:33:1c:a4:b8:16:90:0f:b2:3a:a8:a8:4d:f6:
         af:de:44:55:88:5d:96:cc:ae:d3:41:5c:10:6c:73:ab:42:14:
         7f:3d:e3:dd:cc:c4:56:69:84:32:b8:6e:a2:ec:6a:48:d8:d3:
         eb:7f:58:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:58:34 2026 by rpki-client