Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/961c0ec8-64a9-4c51-bd77-b28e693a3e72/fecbc3e5-eb38-3917-95ee-4c2cea46e5a9.roa
File:                     fecbc3e5-eb38-3917-95ee-4c2cea46e5a9.roa (raw, json)
Hash identifier:          k+s5xt+kMcVF3XdJKUIrtPKcOwZcrvC6dQc6pTCbNjY=
Subject key identifier:   5B:4F:6D:75:51:61:23:B4:1C:10:16:92:50:CE:5F:9B:38:12:A5:59
Certificate issuer:       /CN=961c0ec8-64a9-4c51-bd77-b28e693a3e72
Certificate serial:       010D0C9F4328584CF6ECD1C7571FB3EBD9BCE780
Authority key identifier: 82:BF:ED:26:2E:57:57:94:13:DD:8B:CC:57:34:53:D8:46:CD:82:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/961c0ec8-64a9-4c51-bd77-b28e693a3e72.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/961c0ec8-64a9-4c51-bd77-b28e693a3e72/fecbc3e5-eb38-3917-95ee-4c2cea46e5a9.roa
Signing time:             Tue 24 Feb 2026 02:00:31 +0000
ROA not before:           Tue 24 Feb 2026 02:00:31 +0000
ROA not after:            Mon 25 May 2026 01:00:31 +0000
asID:                     18108
IP address blocks:        216.14.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/961c0ec8-64a9-4c51-bd77-b28e693a3e72/961c0ec8-64a9-4c51-bd77-b28e693a3e72.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/961c0ec8-64a9-4c51-bd77-b28e693a3e72/961c0ec8-64a9-4c51-bd77-b28e693a3e72.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/961c0ec8-64a9-4c51-bd77-b28e693a3e72.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f6:ec:d1:c7:57:1f:b3:eb:d9:bc:e7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=961c0ec8-64a9-4c51-bd77-b28e693a3e72
        Validity
            Not Before: Feb 24 02:00:31 2026 GMT
            Not After : May 25 01:00:31 2026 GMT
        Subject: CN=b16ccc27-665f-44a1-911f-ec7703ae65e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:51:c5:56:81:3b:ad:3b:ab:27:8b:e6:b5:94:
                    01:04:c5:a8:13:2c:b5:a2:16:74:b9:af:84:df:a5:
                    9a:8d:f7:7c:25:1b:17:70:8c:a8:a5:24:1c:5a:6d:
                    63:aa:e8:3b:33:4a:cc:42:dd:69:af:47:86:96:cf:
                    26:04:1c:f6:db:44:7f:4d:d8:b5:87:4c:1b:d6:50:
                    5b:85:d8:aa:31:be:d5:e3:60:e6:54:8f:54:0e:67:
                    5b:9e:16:0b:76:79:13:dd:a9:15:fa:c7:12:bd:c3:
                    aa:90:9d:c6:7a:b5:17:72:4b:f8:84:d2:71:c6:7b:
                    49:c8:d8:e4:c0:5f:32:f6:d6:ca:e5:76:c2:df:7b:
                    28:2c:ae:b6:93:22:be:db:8d:e9:27:5c:9f:47:1b:
                    5a:bd:8d:23:fa:79:3b:ca:7f:cd:dc:d4:4a:91:f3:
                    30:0f:94:96:ef:61:89:c4:a1:be:e0:d7:ac:00:22:
                    e8:7b:f5:e3:b8:0b:fc:51:15:3d:c4:7d:10:6b:36:
                    22:10:5b:d7:2d:d0:2c:16:e0:62:99:39:1d:03:2a:
                    d6:70:53:e7:d2:46:eb:2d:93:53:5a:13:2e:4d:ef:
                    9d:6c:ab:b3:67:f9:50:0a:5e:26:4d:b8:c0:c7:60:
                    f2:05:32:5b:59:ab:9b:67:f7:bf:88:41:fc:ae:8d:
                    43:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:4F:6D:75:51:61:23:B4:1C:10:16:92:50:CE:5F:9B:38:12:A5:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/961c0ec8-64a9-4c51-bd77-b28e693a3e72/fecbc3e5-eb38-3917-95ee-4c2cea46e5a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/961c0ec8-64a9-4c51-bd77-b28e693a3e72/961c0ec8-64a9-4c51-bd77-b28e693a3e72.crl

            X509v3 Authority Key Identifier:
                keyid:82:BF:ED:26:2E:57:57:94:13:DD:8B:CC:57:34:53:D8:46:CD:82:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/961c0ec8-64a9-4c51-bd77-b28e693a3e72.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.14.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:e3:8c:50:66:fb:bf:26:64:50:9f:1e:1d:91:ac:63:a9:cf:
         6a:c3:e0:55:a1:da:f4:1a:53:f1:19:5a:aa:5e:86:2a:0a:24:
         ac:46:d6:ed:d5:33:ed:8c:2e:20:2d:66:1e:08:72:5b:94:be:
         9c:27:df:48:71:ea:b0:ce:ee:40:b6:19:d1:37:57:60:8f:a1:
         f5:bb:c6:67:1a:6d:41:4f:db:51:18:f2:43:bb:b4:30:4e:0f:
         80:de:e0:a8:91:fb:d6:35:8b:e1:06:9c:15:7c:72:f0:25:48:
         80:cd:74:3c:bc:0a:37:0d:23:f0:11:2d:ef:5c:cc:dc:74:5e:
         3e:a1:19:f4:d8:74:3a:ca:d8:d6:d0:67:04:ee:6a:e2:81:4e:
         12:80:16:d5:2c:6b:e6:71:14:94:a1:63:44:0c:c3:dc:bb:a3:
         07:27:47:80:99:a0:91:6c:14:0d:30:16:8d:f8:f1:39:70:b8:
         2e:85:8c:51:8b:3e:d4:46:b3:7d:d5:93:7d:f3:0c:ab:61:76:
         b1:a2:55:b3:12:c7:40:51:e1:88:d5:21:c0:ec:a9:23:a5:09:
         e0:d8:7b:48:9e:b7:81:f2:62:8d:e6:ff:60:29:b8:9c:c6:db:
         12:f5:c8:83:81:9e:7d:3c:6f:d3:b9:d2:d4:3e:96:d6:a3:a6:
         61:3a:cc:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:05:56 2026 by rpki-client