Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/058c6480-5741-3c15-a589-1a57a6d4e88c.roa
File:                     058c6480-5741-3c15-a589-1a57a6d4e88c.roa (raw, json)
Hash identifier:          cgDrndKFQHjoXQOgKa971IJfCj5Blrur7zm44yFSQB8=
Subject key identifier:   E9:42:0A:86:AF:1B:FB:3A:BA:1D:31:06:A8:6F:D7:C4:F6:55:CE:BC
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584D012DEC8CC097A8B8AA3E0F40
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/058c6480-5741-3c15-a589-1a57a6d4e88c.roa
Signing time:             Fri 27 Feb 2026 18:09:55 +0000
ROA not before:           Fri 27 Feb 2026 18:09:55 +0000
ROA not after:            Thu 28 May 2026 17:09:55 +0000
asID:                     10753
IP address blocks:        168.93.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:01:2d:ec:8c:c0:97:a8:b8:aa:3e:0f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Feb 27 18:09:55 2026 GMT
            Not After : May 28 17:09:55 2026 GMT
        Subject: CN=2560e2cd-ec8d-487c-b6b3-0af408da70ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:47:4b:09:d8:dc:bb:da:16:23:f6:fe:e4:96:
                    0f:5a:fa:be:39:da:7d:bf:fa:81:5a:76:e6:24:5c:
                    01:15:55:92:ec:b0:65:8c:a5:f3:e0:69:24:04:d6:
                    91:c9:84:80:39:0a:30:1e:fc:1e:a8:ef:3d:46:92:
                    bb:a9:40:02:78:f7:42:59:00:61:f8:58:43:14:96:
                    80:05:2b:a3:fb:89:52:7a:7e:73:74:8f:da:29:0a:
                    60:28:58:73:4a:ff:75:a0:05:3d:88:16:fa:c2:8d:
                    99:03:21:c2:bb:9c:65:93:af:70:50:41:ef:c2:6a:
                    d0:79:03:de:4f:6b:e1:84:1e:ef:08:a2:45:33:ea:
                    29:08:84:72:57:16:ee:9a:7e:b6:bf:09:84:c5:e3:
                    06:c9:f5:66:65:e8:84:eb:97:63:5f:31:c5:c8:2b:
                    70:fe:a3:88:ec:b2:f5:ed:54:f8:b8:57:ae:11:6a:
                    fe:d4:f1:d8:95:1c:fd:c7:62:c3:35:33:38:fa:08:
                    44:11:5e:6c:72:ee:29:38:e4:fc:fb:28:d1:ea:9e:
                    e5:86:9b:16:6b:c6:3d:7d:d8:1f:d7:3c:63:9d:7e:
                    75:af:7a:0e:67:89:fa:20:c3:f3:fe:3c:74:64:af:
                    09:db:ff:a0:c5:1a:c8:43:30:4d:16:e2:d3:20:41:
                    83:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:42:0A:86:AF:1B:FB:3A:BA:1D:31:06:A8:6F:D7:C4:F6:55:CE:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/058c6480-5741-3c15-a589-1a57a6d4e88c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.93.201.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:91:08:1a:07:7d:94:30:63:b0:55:7a:81:e1:cb:95:d5:fc:
         e0:5d:25:87:de:d9:7f:b3:a4:21:13:9b:5c:1d:f4:e5:fe:22:
         a7:c3:72:f7:19:fa:ec:1a:94:41:0e:ac:b5:92:84:1a:93:c0:
         ae:ed:f8:4b:45:bd:2b:af:ca:b0:ff:99:6c:fc:07:a3:b0:25:
         a5:62:89:78:f5:55:84:99:19:41:5b:26:d5:11:a8:08:97:40:
         0a:16:18:64:b2:54:49:8d:58:d9:10:54:1f:3f:3b:44:fb:c2:
         69:f0:5a:22:2a:18:60:dc:e8:c4:ad:f2:88:61:52:64:25:b1:
         39:e3:38:b1:bf:f3:53:99:67:0a:1b:1c:ac:83:4c:b7:c0:d5:
         71:d0:94:a8:dc:f9:ed:7f:e4:07:d3:ef:ca:c8:d7:ee:39:fa:
         61:c1:32:e4:58:7d:37:13:34:b2:66:6f:70:03:96:97:fe:ec:
         89:3a:14:ad:8c:d9:c0:7b:22:64:87:30:f3:01:5b:03:89:a3:
         bd:e1:78:1a:92:62:45:e8:25:c2:4e:fb:1e:bd:8c:b7:fb:82:
         1d:e7:83:7f:52:81:8b:39:f6:5c:2c:83:f6:d1:04:1c:4b:0f:
         6f:e5:a1:33:e2:15:0a:87:e4:92:20:be:87:32:66:cd:54:80:
         65:63:94:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:17:40 2026 by rpki-client