Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/8b805ab5-d6c7-36f4-bc3d-0209dd59c81e.roa
File:                     8b805ab5-d6c7-36f4-bc3d-0209dd59c81e.roa (raw, json)
Hash identifier:          kdbv2eBb0QS3O3Kd4bktvMAQcmk8NRhnwdf5BunKSF0=
Subject key identifier:   B2:FD:89:32:44:E3:55:46:B5:DA:35:55:A3:5E:9C:FE:33:2F:2F:C4
Certificate issuer:       /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Certificate serial:       010D0C9F4328584CCBA74D565BA86E8AF6F2C100
Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/8b805ab5-d6c7-36f4-bc3d-0209dd59c81e.roa
Signing time:             Sun 08 Feb 2026 14:00:41 +0000
ROA not before:           Sun 08 Feb 2026 14:00:41 +0000
ROA not after:            Sat 09 May 2026 13:00:41 +0000
asID:                     13414
IP address blocks:        209.237.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:cb:a7:4d:56:5b:a8:6e:8a:f6:f2:c1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
        Validity
            Not Before: Feb  8 14:00:41 2026 GMT
            Not After : May  9 13:00:41 2026 GMT
        Subject: CN=f3de0973-5d1f-4a38-a2ff-06f06b6151d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:df:25:7d:0e:41:03:a5:73:eb:20:50:c5:f3:
                    5f:63:bd:70:3c:f4:3f:ef:d6:09:e5:80:2d:8a:78:
                    cc:78:e4:39:55:d0:57:4a:6b:d7:4c:ea:b5:db:85:
                    a6:06:c6:84:dd:c7:d0:a1:ef:04:13:73:bb:fb:ef:
                    87:38:a0:37:1b:dd:0c:12:5c:e8:9f:7f:30:ec:41:
                    4e:73:a2:94:25:fc:09:f1:a9:1f:b4:33:a3:8a:9a:
                    60:79:d1:6c:1a:f6:ca:cb:19:a3:03:cc:25:d9:dd:
                    6c:2f:6d:99:82:38:38:a2:a0:bd:4c:69:0a:be:21:
                    b1:bd:60:2b:06:0f:44:e4:37:ff:27:63:e7:1a:65:
                    d2:e5:85:1a:a5:ae:bb:91:d2:67:0d:d8:e7:e8:70:
                    cc:6c:ab:8b:8b:f0:3a:d1:0f:bd:9b:7d:96:d3:41:
                    69:73:b9:3f:2a:2e:1d:15:1e:f4:9c:68:da:a7:13:
                    82:22:10:6b:d7:ab:4b:39:ca:65:d6:41:39:75:92:
                    64:fa:54:b6:ff:5a:a2:6c:87:48:d8:aa:25:e7:29:
                    dc:c3:c8:8f:5f:41:26:58:84:34:26:03:fa:23:9a:
                    bb:e7:90:26:c4:c6:8d:6d:c2:53:2e:42:19:7a:32:
                    d1:c5:c3:4f:df:b6:9d:dc:a9:94:a5:a3:4d:ba:bc:
                    cf:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:FD:89:32:44:E3:55:46:B5:DA:35:55:A3:5E:9C:FE:33:2F:2F:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/8b805ab5-d6c7-36f4-bc3d-0209dd59c81e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl

            X509v3 Authority Key Identifier:
                keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.237.199.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:50:85:d1:0a:81:a9:17:20:09:c2:d0:d9:a2:c1:53:82:11:
         f5:a9:dd:ea:2c:b5:1c:a7:0d:0a:2d:60:a0:3e:0d:b0:87:ca:
         39:97:a7:f5:81:d6:b0:b1:ef:af:0c:76:81:3e:13:39:1d:eb:
         3a:0e:6d:64:2a:37:b7:1b:80:0a:6e:ff:4e:95:f3:a6:ef:05:
         c3:68:34:44:4b:2d:5f:4f:1c:7b:e7:12:29:5f:39:c9:66:c6:
         45:a7:ce:85:ce:70:18:28:7f:ff:94:dd:31:00:d6:1d:7a:7b:
         8a:74:36:e8:63:de:c5:05:11:71:16:44:3b:88:3e:17:58:a6:
         59:d2:87:38:78:1f:38:b5:dd:25:78:04:0f:99:1a:33:60:03:
         c1:af:73:5d:0d:99:20:9c:1c:2c:67:f3:6d:31:33:94:57:e4:
         06:b8:58:85:9b:fd:40:53:ab:7b:68:d6:ac:5b:0e:1d:38:55:
         71:b2:82:c7:87:13:04:d7:c2:29:bb:a0:58:c1:77:92:02:6d:
         14:16:7b:84:a7:f8:1c:80:b4:6c:23:40:35:b6:25:6f:f1:64:
         30:34:bd:84:37:a0:d2:4e:c9:2b:4d:de:fa:c0:42:9f:ab:6e:
         9e:72:41:3c:2d:ae:2c:0c:ae:4f:1f:65:07:34:65:25:3f:0c:
         84:d8:51:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:37:04 2026 by rpki-client