Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/03baa8fd-afd0-3579-9b8f-a1a45a07f5ea.roa
File:                     03baa8fd-afd0-3579-9b8f-a1a45a07f5ea.roa (raw, json)
Hash identifier:          pVqvBpAHOOYUOx5LSPciFkK3eDSUOcKoYu3oDCkx2XU=
Subject key identifier:   93:F9:17:D5:47:14:56:77:9B:97:B9:EC:06:0F:96:78:71:8E:FF:47
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584CF878DAB0C20A9B5D1B0DDB9C
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/03baa8fd-afd0-3579-9b8f-a1a45a07f5ea.roa
Signing time:             Tue 24 Feb 2026 15:18:37 +0000
ROA not before:           Tue 24 Feb 2026 15:18:37 +0000
ROA not after:            Mon 25 May 2026 14:18:37 +0000
asID:                     36626
IP address blocks:        209.112.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f8:78:da:b0:c2:0a:9b:5d:1b:0d:db:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Feb 24 15:18:37 2026 GMT
            Not After : May 25 14:18:37 2026 GMT
        Subject: CN=89f7fe77-e468-4393-92cb-5824cbf2a80c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:10:17:c6:1d:c6:1d:d6:d1:bf:19:5b:6d:2c:
                    5d:4f:15:3b:3f:b8:d1:6d:2f:8a:4d:64:15:83:58:
                    2f:33:fb:21:02:dd:1c:88:b4:45:6f:f4:61:c7:27:
                    e8:93:6a:b7:39:ed:43:b9:ab:04:14:e9:34:56:c7:
                    96:14:97:7e:2d:43:84:55:d2:64:f5:39:e9:52:b0:
                    18:f7:89:79:da:3a:27:8b:5d:cb:38:ce:de:70:6e:
                    f7:42:82:35:cb:86:1a:3d:52:9b:85:1d:5a:49:20:
                    45:c1:29:c3:c7:e2:2f:c3:6b:ff:20:6b:da:5c:11:
                    99:b1:c3:b3:3c:ee:29:c5:ea:28:8d:59:02:a2:db:
                    24:fc:81:79:a8:9f:f4:18:40:10:f7:9d:09:19:eb:
                    f2:6e:56:90:9b:79:eb:84:0c:7e:53:40:6c:3e:4d:
                    10:25:fd:48:5f:90:73:9d:36:95:4d:f3:7d:02:3a:
                    27:9f:06:58:6d:5f:1a:92:33:91:89:82:60:36:bc:
                    03:7e:53:3d:91:74:07:66:e9:52:20:60:01:a0:ac:
                    45:f3:c4:ff:4c:0a:87:3e:c1:ec:22:39:fc:0e:3f:
                    88:97:12:7e:e0:2f:31:67:fc:d2:64:36:2b:a4:36:
                    49:19:81:ea:bd:32:d9:d8:7e:bd:f6:a4:96:87:79:
                    a0:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:F9:17:D5:47:14:56:77:9B:97:B9:EC:06:0F:96:78:71:8E:FF:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/03baa8fd-afd0-3579-9b8f-a1a45a07f5ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.112.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:99:c6:70:87:16:ea:72:1e:a6:19:b4:d5:28:39:a8:be:cc:
         4e:0a:77:66:47:95:0a:23:e6:d7:12:8b:2e:6c:9e:d0:20:64:
         78:15:28:ec:a4:31:07:16:c9:c2:90:db:92:59:c7:8d:6d:a8:
         48:90:46:20:53:cf:32:b9:13:a1:9b:4e:4a:42:0c:76:24:f0:
         88:fd:0b:ed:e9:61:7d:ad:b6:10:34:56:42:5a:91:eb:cb:59:
         38:3a:cd:7f:a5:58:3b:57:d4:43:7e:d4:71:1d:54:36:ae:d4:
         65:1a:c1:54:13:45:a2:0e:37:f9:48:cd:57:5e:30:60:a5:64:
         3c:9a:8a:12:4f:c4:dd:c8:86:8c:e2:4e:0b:6e:70:49:a8:fb:
         f6:56:ac:53:59:42:54:04:95:3f:ed:84:05:53:98:cc:8b:04:
         ee:fa:b1:5f:1f:fd:30:1c:11:0e:ee:11:e3:75:fb:bc:8e:e3:
         5e:9d:e0:b2:a9:50:c3:52:18:bb:70:a2:b2:f8:53:d6:3b:66:
         47:d4:a8:53:9f:3a:0b:98:87:2b:7f:79:31:b0:d8:ff:67:26:
         c9:14:16:86:ea:31:69:41:f9:70:86:a9:3e:4d:18:ea:49:e5:
         fe:42:4a:2b:fe:13:bd:3c:23:59:0f:f0:ae:37:01:16:9e:ab:
         f0:14:66:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:10:29 2026 by rpki-client