Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/2a799575-489a-377f-8d63-903f7e71c982.roa
File:                     2a799575-489a-377f-8d63-903f7e71c982.roa (raw, json)
Hash identifier:          s/5dvAxeyP9kpps43IEwrCIbAi1kSeS1kwv8i4ZLSvo=
Subject key identifier:   33:51:D5:A1:2E:C9:96:99:33:7F:A7:32:40:EC:DE:DA:61:F3:E8:45
Certificate issuer:       /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial:       010D0C9F4328584CF157749C4D2FD6B224549840
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/2a799575-489a-377f-8d63-903f7e71c982.roa
Signing time:             Sun 22 Feb 2026 02:00:32 +0000
ROA not before:           Sun 22 Feb 2026 02:00:32 +0000
ROA not after:            Sat 23 May 2026 01:00:32 +0000
asID:                     30336
IP address blocks:        207.96.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f1:57:74:9c:4d:2f:d6:b2:24:54:98:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
        Validity
            Not Before: Feb 22 02:00:32 2026 GMT
            Not After : May 23 01:00:32 2026 GMT
        Subject: CN=5c1225eb-d03e-43e2-9ab3-9767729122e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:95:4b:e1:0a:ca:95:6e:7e:4f:9f:70:9f:77:
                    c9:04:d1:b8:03:e2:c7:d6:a8:61:03:74:bb:bc:30:
                    93:b1:51:8a:10:39:97:19:d1:d0:ad:5c:38:89:96:
                    b8:50:74:a5:3a:49:6e:d3:a6:9f:9f:b4:a8:3b:d9:
                    16:8c:0b:98:ef:87:77:50:34:d5:e1:2f:36:90:ad:
                    0a:77:92:08:fb:82:ad:3e:bf:7a:b5:fb:26:e2:d1:
                    20:91:fe:33:ae:bd:67:9b:4b:d4:bf:f6:69:95:61:
                    cc:c1:f9:0f:81:c9:08:18:49:2b:3e:9b:9b:25:62:
                    24:26:8c:2e:e8:2a:49:34:9d:02:3f:47:f9:77:cb:
                    58:aa:3e:b6:26:bd:b3:fa:33:fd:0b:bc:9b:57:22:
                    83:0b:f0:1d:63:bf:1c:ec:7a:b2:0c:aa:25:50:76:
                    09:93:d1:fa:f7:3a:35:4c:bc:a2:0b:12:fc:a6:b2:
                    0e:a2:e4:45:e6:eb:c1:8a:5d:d5:e6:de:30:8d:f2:
                    49:99:e1:84:57:08:9c:61:4a:e0:85:e2:f2:ea:6c:
                    c0:0d:42:e4:ee:d9:1b:c2:7d:0a:39:bc:21:b0:c5:
                    79:cd:02:d8:98:86:69:50:c2:03:22:99:9a:9a:06:
                    21:4d:bf:29:de:e0:a3:71:91:ec:09:2c:6e:e0:a1:
                    5b:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:51:D5:A1:2E:C9:96:99:33:7F:A7:32:40:EC:DE:DA:61:F3:E8:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/2a799575-489a-377f-8d63-903f7e71c982.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl

            X509v3 Authority Key Identifier:
                keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.96.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:79:7a:83:ab:fc:cd:2d:f7:3a:64:05:95:9b:ae:61:13:c9:
         60:6a:13:7b:86:29:12:83:d6:78:42:e8:6a:90:ac:d0:32:d9:
         06:f4:05:55:f3:19:f4:fe:6a:8c:a4:1b:96:26:0e:4b:e2:1b:
         c7:3f:5f:74:aa:74:a7:24:c2:ff:81:c5:d0:03:8c:e9:30:f8:
         10:1c:a1:1a:6a:94:b7:91:0c:54:ad:12:83:e6:33:ee:13:2e:
         74:82:d6:e7:23:bb:81:7d:18:29:10:fc:0e:a9:bf:81:64:e4:
         3c:7b:2e:88:bf:6b:de:09:ac:ed:f3:a9:18:09:e9:1f:b7:b2:
         0f:1c:1a:55:c3:ed:2c:73:84:3f:6b:77:d5:c7:5d:30:7d:8a:
         27:3f:40:32:94:3c:a9:d2:d0:33:be:45:78:f8:bf:3a:f9:40:
         ac:e5:5e:97:0c:fc:61:c0:53:f8:e5:e7:0d:d0:2c:02:09:40:
         a2:0e:e1:63:30:63:21:46:b2:73:bd:76:89:d8:84:ce:99:bc:
         b6:d3:f5:77:d7:34:2a:93:8f:5d:10:08:8e:29:eb:55:27:68:
         12:69:8f:f4:db:65:27:cd:c1:58:bf:53:27:3c:21:55:38:5d:
         12:65:35:de:5a:0d:5d:d9:1b:56:6b:79:91:bb:2b:b7:4a:9a:
         e2:23:2b:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:56:30 2026 by rpki-client