Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/51ac73f3-6872-38f4-970c-00e60be23056.roa
File:                     51ac73f3-6872-38f4-970c-00e60be23056.roa (raw, json)
Hash identifier:          uTV5CKXS9m9W+1ymBPiI0nUj7JaPWOd8nIZS8c+X7Qg=
Subject key identifier:   95:EF:F2:30:69:DF:60:87:F1:02:5C:10:5C:23:DB:E5:92:9E:47:09
Certificate issuer:       /CN=e02d82fe-95a7-4e09-9a2a-be1e154ba38d
Certificate serial:       010D0C9F4328584CF8524BE7806ABBCD9F71E0C0
Authority key identifier: A4:C5:B7:53:0A:F7:6C:A4:E1:F7:C3:04:23:AB:D8:5B:05:70:84:6C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/51ac73f3-6872-38f4-970c-00e60be23056.roa
Signing time:             Tue 24 Feb 2026 14:00:41 +0000
ROA not before:           Tue 24 Feb 2026 14:00:41 +0000
ROA not after:            Mon 25 May 2026 13:00:41 +0000
asID:                     399244
IP address blocks:        170.205.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f8:52:4b:e7:80:6a:bb:cd:9f:71:e0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e02d82fe-95a7-4e09-9a2a-be1e154ba38d
        Validity
            Not Before: Feb 24 14:00:41 2026 GMT
            Not After : May 25 13:00:41 2026 GMT
        Subject: CN=ac063b58-c17c-4133-b1c8-f41e34d70f2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a1:8a:b2:fe:53:bc:6f:95:a5:ea:da:2d:35:
                    e1:d8:2c:56:4f:b0:06:af:2d:a9:f6:8f:44:50:1c:
                    01:84:b3:85:2e:54:15:f7:e9:12:0b:eb:39:ad:e8:
                    56:f4:2d:e6:4d:88:39:02:da:7b:f2:3b:fa:7a:f6:
                    99:52:21:ff:dc:ef:fc:34:d7:f8:97:e9:1a:ee:ef:
                    92:b5:e1:d2:12:ea:6d:b3:18:4e:a7:4e:06:28:b4:
                    c6:0f:6f:c5:d9:d1:25:95:6b:30:4d:5d:f9:0b:c7:
                    09:5a:03:10:7c:69:f0:16:29:43:72:3c:d7:73:0e:
                    87:16:63:11:d1:51:b8:12:bb:45:91:3b:d2:50:6a:
                    76:30:2f:04:6f:ae:b7:e6:68:74:7c:19:58:ed:2e:
                    c5:78:90:88:e4:c2:aa:7c:fa:8a:cb:c4:19:db:4c:
                    41:97:26:40:c0:a7:1e:86:f5:d1:bb:48:e4:74:05:
                    d3:2e:0f:79:5f:31:a5:32:54:8d:f5:8f:5b:65:09:
                    b4:94:36:01:34:33:35:cc:2b:76:f5:86:65:2c:61:
                    4b:6a:e2:50:4d:82:d0:05:f3:62:d3:de:ec:e7:f0:
                    35:12:f5:36:84:61:94:33:15:84:16:64:0d:d1:27:
                    75:dc:31:11:4c:1b:c0:ba:d4:f4:68:60:76:04:34:
                    dd:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:EF:F2:30:69:DF:60:87:F1:02:5C:10:5C:23:DB:E5:92:9E:47:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/51ac73f3-6872-38f4-970c-00e60be23056.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.crl

            X509v3 Authority Key Identifier:
                keyid:A4:C5:B7:53:0A:F7:6C:A4:E1:F7:C3:04:23:AB:D8:5B:05:70:84:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.205.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:b4:42:2b:4c:f3:22:89:02:76:ac:08:49:9f:f3:2f:5a:a9:
         01:2a:65:5f:40:d1:90:61:90:73:8a:c0:1d:c8:d9:de:e3:6d:
         56:d1:c7:17:b8:9c:fe:cd:d5:02:b8:4a:64:54:b8:fe:29:13:
         90:f1:48:50:fc:c2:20:c6:68:ee:77:ed:4e:0b:ae:bd:36:e9:
         67:63:48:65:61:83:b5:6e:f3:18:5c:36:3d:ce:50:46:df:eb:
         cc:b9:26:82:c4:19:b5:c1:8d:f9:3c:b3:5c:10:2e:4e:35:71:
         e2:2b:1b:5f:9e:2b:1c:b9:e7:4b:13:b6:8a:81:0f:84:04:2a:
         a9:ee:2d:6d:24:54:93:12:7e:d3:9f:fc:8c:b8:e9:6c:17:dc:
         ad:d6:de:f7:51:c8:ce:a0:a8:dc:63:9e:dc:44:03:bf:a5:0a:
         55:e2:08:e3:1a:d9:c3:c9:37:74:8a:b3:e4:1b:b5:6d:9c:af:
         0f:48:9f:6b:25:90:11:61:93:2f:01:4b:25:73:7a:be:c3:f9:
         72:c9:ae:3e:0e:99:ee:d6:d9:16:10:37:ec:85:90:77:53:28:
         dd:99:30:db:1e:d6:c5:67:28:8a:97:83:82:16:9a:de:1e:ee:
         25:32:4c:17:2d:15:1b:d3:60:bc:93:4b:68:0b:f9:32:75:bc:
         e7:36:3e:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:44:43 2026 by rpki-client