Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/13b686eb-676e-32c3-9236-13a6e2f875c4.roa
File:                     13b686eb-676e-32c3-9236-13a6e2f875c4.roa (raw, json)
Hash identifier:          zM5K74IEZk5vh8tasKRPyDXAXkna39+0MH3HgdZKCnM=
Subject key identifier:   92:2A:D5:3C:8A:E2:AD:5C:9E:26:13:BC:42:DE:FA:9E:34:91:E9:D0
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584CF878D6F6B63E73C543536E80
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/13b686eb-676e-32c3-9236-13a6e2f875c4.roa
Signing time:             Tue 24 Feb 2026 15:18:35 +0000
ROA not before:           Tue 24 Feb 2026 15:18:35 +0000
ROA not after:            Mon 25 May 2026 14:18:35 +0000
asID:                     396576
IP address blocks:        209.112.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f8:78:d6:f6:b6:3e:73:c5:43:53:6e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Feb 24 15:18:35 2026 GMT
            Not After : May 25 14:18:35 2026 GMT
        Subject: CN=b8e8d72f-fcd0-45cd-96c4-759ddee24329
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:8e:be:f6:ed:7e:dc:15:7d:e9:d8:86:41:9a:
                    da:17:5c:04:1a:85:64:0f:81:c0:0d:82:ee:ca:08:
                    1e:97:b6:ab:6c:9a:c7:3f:66:3a:36:e5:1a:99:52:
                    9b:fe:ca:52:c0:22:e9:66:38:01:e6:63:32:ed:2f:
                    0e:d9:ef:ef:e2:78:19:6f:37:8e:b0:75:3d:99:67:
                    e0:2d:1a:55:a7:5b:7d:03:e9:50:c4:3f:83:89:b3:
                    1e:d1:0a:8d:c0:9f:e6:aa:af:27:f2:24:a8:e5:dd:
                    38:39:2a:5e:0d:2b:56:b6:3b:e6:53:4d:2a:d6:36:
                    74:8d:87:91:6c:50:aa:6c:f9:58:02:1a:8f:70:ed:
                    37:32:d1:15:84:09:17:10:ac:cf:d4:88:8b:6d:f0:
                    cb:db:c5:bd:c7:21:a4:69:fe:7b:ae:98:e1:d3:43:
                    cb:fe:05:5a:75:28:79:be:6e:43:8c:19:4f:43:71:
                    85:6a:5d:7f:99:55:51:bc:e1:9f:5a:66:b4:60:bc:
                    6c:19:3d:86:72:ad:c7:7b:bb:72:2c:1e:dd:c1:2b:
                    8d:e9:11:ba:fa:8a:78:aa:68:a1:9d:8a:dd:48:31:
                    f2:91:00:90:1e:40:0f:98:45:e8:f2:af:93:ba:03:
                    14:be:76:56:c8:4e:11:0b:c6:4d:51:6c:f8:93:f0:
                    d8:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:2A:D5:3C:8A:E2:AD:5C:9E:26:13:BC:42:DE:FA:9E:34:91:E9:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/13b686eb-676e-32c3-9236-13a6e2f875c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.112.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:6f:d1:76:37:fb:ac:9f:f1:d0:fa:ed:10:a0:e5:e5:90:c1:
         2c:e0:39:4c:e3:c9:9b:f0:31:6c:20:c4:3d:d8:08:69:ff:2a:
         ab:4a:e1:53:92:24:28:42:74:2a:fd:b9:df:46:ed:c5:10:89:
         5b:7d:dc:11:77:b7:ec:d7:96:2d:3e:f4:28:7f:01:b5:6f:46:
         e8:24:09:da:ee:19:ee:a9:a1:ed:47:3c:0b:fe:78:2b:d5:26:
         a1:b9:26:c2:7f:95:2b:0e:64:ac:58:fb:78:6c:d2:70:01:02:
         ac:aa:78:76:43:a3:13:33:ad:2b:c6:3e:8e:4f:7d:b3:11:c8:
         22:ee:ea:78:f3:9e:e0:8d:67:89:45:63:c7:a0:5b:bf:ac:d7:
         de:79:04:d7:19:d9:3b:64:c2:e2:6c:4e:be:b8:20:9c:6f:e9:
         d1:f4:fc:da:95:29:da:9e:04:f2:1c:ae:22:ae:34:e0:4f:b5:
         a6:f0:97:40:65:f4:9f:63:89:54:1c:37:77:d8:0b:a2:e9:b7:
         fb:2a:9c:25:4a:36:a6:e0:37:b1:71:78:ab:99:a9:64:63:6e:
         a7:a9:e9:70:db:51:43:8c:84:e9:58:7f:7b:fb:c1:a1:b4:78:
         ca:9d:53:88:39:66:f6:1e:94:22:38:12:ef:40:d7:dd:de:2e:
         2c:7c:9f:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:53:18 2026 by rpki-client