Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/5e820769-a2e1-37f9-ba8b-ea8c7cf743fe.roa
File:                     5e820769-a2e1-37f9-ba8b-ea8c7cf743fe.roa (raw, json)
Hash identifier:          bFlJYSHfpakb6ton4inLkLm6/ANM5rs16xVo8+vwldw=
Subject key identifier:   E2:B2:4E:D9:DF:94:0A:68:F9:7C:01:C4:9B:22:9F:18:13:0F:AE:53
Certificate issuer:       /CN=249140ca-277e-4871-a100-451d066d1c5b
Certificate serial:       010D0C9F4328584CEBC22EAFE7D2BB0E6CDE2460
Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/5e820769-a2e1-37f9-ba8b-ea8c7cf743fe.roa
Signing time:             Fri 20 Feb 2026 02:00:32 +0000
ROA not before:           Fri 20 Feb 2026 02:00:32 +0000
ROA not after:            Thu 21 May 2026 01:00:32 +0000
asID:                     6391
IP address blocks:        97.107.176.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:eb:c2:2e:af:e7:d2:bb:0e:6c:de:24:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b
        Validity
            Not Before: Feb 20 02:00:32 2026 GMT
            Not After : May 21 01:00:32 2026 GMT
        Subject: CN=ae964a21-5e0b-4bae-a345-5b6b0880ccc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:8e:56:e7:ec:9c:d2:50:46:ad:e6:e5:05:69:
                    d4:ee:86:30:de:ca:80:78:d1:f6:b5:17:ac:86:15:
                    84:ab:6a:d1:e7:a9:a4:00:98:19:a5:bb:68:2a:89:
                    45:f4:7a:a3:0d:22:69:09:4b:79:35:9e:36:6f:2c:
                    fe:64:18:d2:a5:9b:a2:ed:4d:a4:63:10:a6:21:0b:
                    77:7e:e3:ec:29:aa:80:82:26:b0:ec:ef:36:80:b1:
                    26:7e:d2:f0:82:2a:2f:3f:4e:c9:a9:22:47:72:79:
                    5d:33:2c:40:05:1b:ec:14:0e:c9:ad:e8:55:50:c1:
                    5c:85:1c:86:34:27:aa:a6:bb:ff:3a:26:f7:38:b3:
                    8d:82:4e:ca:26:ae:a5:bb:b6:b3:a5:cd:39:4b:1e:
                    f2:4c:4a:f7:b3:c4:47:f4:ee:04:39:1c:21:68:fd:
                    fb:dd:ef:9e:ad:28:62:aa:5e:96:de:fe:3f:ac:cc:
                    fe:2d:5d:f1:82:ef:db:bd:38:de:13:b1:00:11:63:
                    e1:ae:5c:a3:b9:47:02:4e:2e:25:46:72:62:1a:f1:
                    d0:0b:c5:cd:b6:2e:b4:b7:46:2c:c1:a9:6b:1c:54:
                    62:b0:df:a8:06:af:8d:3b:07:d9:cc:02:67:3e:a3:
                    9a:cc:c2:db:97:3d:50:2c:52:36:34:78:db:dc:c0:
                    38:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:B2:4E:D9:DF:94:0A:68:F9:7C:01:C4:9B:22:9F:18:13:0F:AE:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/5e820769-a2e1-37f9-ba8b-ea8c7cf743fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl

            X509v3 Authority Key Identifier:
                keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.107.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:32:f4:c4:85:77:40:32:f2:db:d4:1d:92:c5:52:fa:32:14:
         56:27:2b:ae:a1:ed:ed:08:43:00:0d:c6:09:9a:a2:8e:3f:89:
         c4:a3:64:8a:24:9d:9d:23:e2:31:17:7c:fe:2f:5d:fe:cb:3c:
         eb:fd:fb:fc:ba:22:c6:be:15:29:ce:91:aa:18:d8:51:67:4a:
         65:cf:04:f1:d2:3c:ee:57:96:fb:f6:6f:8f:56:91:fa:b8:d9:
         e4:c4:9e:3a:ec:de:d2:9d:18:58:76:4d:d4:fe:c9:83:02:87:
         c7:a2:bb:72:74:ff:1b:3a:e8:6a:72:f4:e5:91:3b:16:83:f7:
         85:43:88:70:f1:29:17:55:5d:5c:39:73:c9:fe:9f:93:4b:80:
         87:51:ba:f6:3b:5e:60:80:29:e2:90:28:75:0e:22:90:9e:50:
         87:ab:d2:f4:6a:91:19:b9:5a:c8:a1:d5:99:62:de:be:cc:fa:
         21:3b:3b:64:b6:92:97:bc:28:33:30:33:4a:32:0e:9c:2a:3f:
         90:f2:0b:3e:00:16:fd:56:e1:dc:63:e7:70:5e:ce:24:95:97:
         5d:94:3e:8e:26:17:f6:3f:36:4c:1a:4d:d9:60:64:d9:ac:d6:
         7c:90:10:10:01:b8:33:94:43:fd:06:c3:1e:10:e5:08:cf:d0:
         ba:21:5b:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:41:44 2026 by rpki-client