Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d8e25869-fb35-4b76-8053-1b6c51bd3c3f/97648492-9e8b-3c28-a0d8-ce456b1ffd6e.roa
File:                     97648492-9e8b-3c28-a0d8-ce456b1ffd6e.roa (raw, json)
Hash identifier:          buZkX3V2HVWwnyxFJtpwuYN5+MhZZbrZAgOLvBxRjXI=
Subject key identifier:   B5:D3:E5:27:16:98:35:A1:E7:55:93:BE:28:5C:5D:13:C5:27:55:BF
Certificate issuer:       /CN=d8e25869-fb35-4b76-8053-1b6c51bd3c3f
Certificate serial:       010D0C9F4328584CFEA31C1BB49B699EE64F7838
Authority key identifier: 55:C5:5C:0C:ED:45:D1:3D:8D:92:AE:1B:FA:AA:A8:17:CB:B9:D7:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d8e25869-fb35-4b76-8053-1b6c51bd3c3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d8e25869-fb35-4b76-8053-1b6c51bd3c3f/97648492-9e8b-3c28-a0d8-ce456b1ffd6e.roa
Signing time:             Thu 26 Feb 2026 20:18:36 +0000
ROA not before:           Thu 26 Feb 2026 20:18:36 +0000
ROA not after:            Wed 27 May 2026 19:18:36 +0000
asID:                     14618
IP address blocks:        208.88.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d8e25869-fb35-4b76-8053-1b6c51bd3c3f/d8e25869-fb35-4b76-8053-1b6c51bd3c3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d8e25869-fb35-4b76-8053-1b6c51bd3c3f/d8e25869-fb35-4b76-8053-1b6c51bd3c3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d8e25869-fb35-4b76-8053-1b6c51bd3c3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fe:a3:1c:1b:b4:9b:69:9e:e6:4f:78:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8e25869-fb35-4b76-8053-1b6c51bd3c3f
        Validity
            Not Before: Feb 26 20:18:36 2026 GMT
            Not After : May 27 19:18:36 2026 GMT
        Subject: CN=d34a9a6b-587c-4fec-8553-aa8afd372cb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ea:b7:49:13:78:1b:8a:43:e3:fe:67:b9:41:
                    29:7e:be:ec:11:7b:57:08:4d:84:cc:a3:4e:46:13:
                    9b:10:7d:b9:ea:e4:4f:c7:c0:43:eb:95:ea:2f:dc:
                    72:68:97:9b:34:73:3e:14:97:1b:72:fd:58:d8:aa:
                    28:10:be:d2:03:8f:9e:eb:da:6d:b4:aa:20:2b:7b:
                    72:20:75:ab:f0:c2:be:f6:2b:db:9a:48:c0:ee:f9:
                    ec:a9:c9:42:a2:9c:c6:bb:b9:fb:f4:5f:63:e7:29:
                    6d:d2:8f:78:75:68:ce:b7:b7:1c:8e:80:2e:72:fa:
                    62:b4:4b:4d:58:e4:cc:28:b3:63:d8:39:c2:cc:76:
                    a8:e5:9c:45:2e:c0:73:cd:2c:80:59:ee:e7:0e:a7:
                    7e:a1:c5:53:c6:53:c0:07:a5:a2:a3:28:a0:d0:51:
                    b8:ac:8d:6a:ca:df:57:38:b3:00:8a:03:ea:9a:30:
                    fa:f7:27:c3:55:1a:1d:9c:aa:fe:0c:a0:5c:a8:4a:
                    63:f1:57:eb:0b:c0:d1:8e:86:ca:b7:bc:c0:8c:e6:
                    3b:71:fd:10:bf:f5:20:35:d3:a3:2b:3a:66:d2:52:
                    ed:9a:21:f7:f4:bc:d2:08:7f:7d:c1:67:57:3f:82:
                    22:ea:a7:be:bc:a4:7d:de:76:ae:31:22:dd:18:b8:
                    81:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:D3:E5:27:16:98:35:A1:E7:55:93:BE:28:5C:5D:13:C5:27:55:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d8e25869-fb35-4b76-8053-1b6c51bd3c3f/97648492-9e8b-3c28-a0d8-ce456b1ffd6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d8e25869-fb35-4b76-8053-1b6c51bd3c3f/d8e25869-fb35-4b76-8053-1b6c51bd3c3f.crl

            X509v3 Authority Key Identifier:
                keyid:55:C5:5C:0C:ED:45:D1:3D:8D:92:AE:1B:FA:AA:A8:17:CB:B9:D7:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d8e25869-fb35-4b76-8053-1b6c51bd3c3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.88.98.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:c7:f5:63:a7:16:2b:bf:b0:1f:20:05:e9:23:0a:cb:d4:9e:
         66:f7:69:e7:48:e0:ba:bb:60:33:6d:43:21:9c:cc:fa:ec:c6:
         e0:f0:65:a2:d6:c9:e3:7d:1a:ed:8e:c2:da:9b:6b:37:c8:a4:
         45:39:6c:cf:ed:57:52:31:ac:80:69:2d:2a:c8:40:08:7b:00:
         69:24:0e:a2:bc:67:45:70:1b:ab:ec:4e:76:74:db:c5:d4:77:
         fe:c5:14:00:9d:8b:84:e2:94:72:60:1f:14:35:4f:96:cd:ac:
         5a:89:e6:72:a1:ea:f3:a8:a8:02:d3:ef:09:e4:ae:4c:65:90:
         65:b9:40:df:43:a7:90:66:b3:ac:d0:e4:08:73:f6:28:8b:ef:
         5b:9c:b5:50:a8:08:27:41:6a:72:c9:ea:f0:37:cb:8f:d7:13:
         44:9e:b7:f5:ba:5e:56:7c:39:2a:1a:98:7b:6e:ea:9c:2d:31:
         34:59:9b:ca:d5:4f:55:f0:e4:d7:9d:4b:a2:63:35:fc:5c:e9:
         7a:00:3f:a4:d7:e5:4e:05:dc:88:32:0f:45:cb:f5:7c:a3:e1:
         02:ff:77:f1:eb:3c:06:82:96:f6:65:05:b7:2c:6f:aa:1a:cc:
         b3:d8:45:03:17:d9:95:e2:88:cc:6c:52:a7:df:65:71:60:e5:
         c0:f9:b6:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:57:24 2026 by rpki-client