Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1b7a8557-3cb9-4ce7-893c-58d0461737b6/98490eb5-6bd5-362d-96ec-3e9de815cf9a.roa
File:                     98490eb5-6bd5-362d-96ec-3e9de815cf9a.roa (raw, json)
Hash identifier:          rbTgpg/+wFKoJ03prbB9JpkrX9KOeEN4cQ4xcp+k1BM=
Subject key identifier:   43:6F:AD:C0:B4:D6:5F:7A:BA:E4:87:3D:95:76:33:15:01:C8:C2:4D
Certificate issuer:       /CN=1b7a8557-3cb9-4ce7-893c-58d0461737b6
Certificate serial:       010D0C9F4328584CC07C9D930B0FBE8357BA6680
Authority key identifier: B6:70:F5:94:2A:BE:82:DF:16:C2:21:1B:E0:91:50:7D:6A:78:CF:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1b7a8557-3cb9-4ce7-893c-58d0461737b6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1b7a8557-3cb9-4ce7-893c-58d0461737b6/98490eb5-6bd5-362d-96ec-3e9de815cf9a.roa
Signing time:             Wed 04 Feb 2026 14:00:39 +0000
ROA not before:           Wed 04 Feb 2026 14:00:39 +0000
ROA not after:            Tue 05 May 2026 13:00:39 +0000
asID:                     53684
IP address blocks:        67.209.224.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1b7a8557-3cb9-4ce7-893c-58d0461737b6/1b7a8557-3cb9-4ce7-893c-58d0461737b6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1b7a8557-3cb9-4ce7-893c-58d0461737b6/1b7a8557-3cb9-4ce7-893c-58d0461737b6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1b7a8557-3cb9-4ce7-893c-58d0461737b6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c0:7c:9d:93:0b:0f:be:83:57:ba:66:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b7a8557-3cb9-4ce7-893c-58d0461737b6
        Validity
            Not Before: Feb  4 14:00:39 2026 GMT
            Not After : May  5 13:00:39 2026 GMT
        Subject: CN=a12142e0-7b0c-4756-b5e0-9a00df3625bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:b6:6a:06:de:7e:97:d8:93:fa:4d:2d:11:99:
                    df:23:57:8d:a8:ca:1c:73:1c:9c:41:a3:87:03:11:
                    e2:88:62:59:0c:c2:fb:74:93:40:91:76:68:52:97:
                    34:5c:c0:21:38:42:49:2b:07:d9:6f:56:e3:b9:8b:
                    c9:5c:7b:a0:8b:df:76:41:53:38:74:98:97:95:d2:
                    b8:82:81:0e:db:c3:76:80:d6:ed:cd:83:e5:e0:ba:
                    44:80:64:19:d0:56:05:18:79:56:42:13:4f:e5:fc:
                    5a:08:fc:1d:3b:6a:d4:2b:bf:11:f4:11:c8:6b:5f:
                    47:30:c4:da:61:29:18:31:5b:cb:96:ef:47:90:14:
                    55:7d:ed:67:43:3c:df:98:20:9a:54:cb:7b:59:a7:
                    af:8f:ea:4b:af:1c:6c:25:04:2b:77:b2:88:48:3d:
                    dc:b5:92:40:4d:1b:4d:58:b3:67:37:1d:0e:fb:a5:
                    b6:ea:4a:37:48:32:15:c1:f7:6c:d8:4f:a4:95:1f:
                    97:dd:70:df:05:ee:0a:9e:8f:ad:a0:0e:2c:9c:a1:
                    16:c2:b3:18:98:32:e3:b8:65:29:72:38:1e:79:90:
                    ed:83:48:27:06:c2:4d:1c:0d:2d:25:56:71:43:f5:
                    94:24:8e:68:80:44:3f:0a:da:fb:b1:af:9a:44:44:
                    7f:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:6F:AD:C0:B4:D6:5F:7A:BA:E4:87:3D:95:76:33:15:01:C8:C2:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1b7a8557-3cb9-4ce7-893c-58d0461737b6/98490eb5-6bd5-362d-96ec-3e9de815cf9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1b7a8557-3cb9-4ce7-893c-58d0461737b6/1b7a8557-3cb9-4ce7-893c-58d0461737b6.crl

            X509v3 Authority Key Identifier:
                keyid:B6:70:F5:94:2A:BE:82:DF:16:C2:21:1B:E0:91:50:7D:6A:78:CF:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1b7a8557-3cb9-4ce7-893c-58d0461737b6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.209.224.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:58:da:f1:5c:6e:2f:41:be:e2:c5:cd:b8:f6:a9:c8:6f:52:
         24:aa:13:37:4d:d1:3e:f5:a0:77:1a:7b:81:54:cd:af:ed:ad:
         ec:0e:4a:99:fe:53:85:0a:92:bc:4b:82:9e:03:3b:bc:d8:4e:
         b2:37:14:9c:c4:ae:33:3b:b0:db:6e:e9:6f:a2:f7:78:d3:ee:
         26:7b:e1:8f:dd:bf:8e:b0:53:ac:e5:89:b9:52:5b:3a:2a:c0:
         50:a9:58:61:ca:19:1b:dc:3b:8e:ef:98:f1:6d:e5:5f:ac:65:
         70:3b:8e:99:bc:bc:29:66:31:f9:52:7c:c5:4f:04:c3:e8:93:
         9b:54:18:07:96:77:26:e9:e6:1a:22:59:b7:61:5b:a9:49:72:
         f6:78:a4:be:24:c3:d5:0c:1f:71:b5:d1:c9:fb:97:71:2c:5d:
         14:95:30:65:d6:02:c7:60:6b:6e:1a:11:26:fe:ce:38:ae:4c:
         bc:07:93:16:5b:a1:fd:aa:94:bb:00:ca:47:2f:f1:a2:e3:15:
         9c:39:28:3c:28:f4:8b:78:45:a3:64:02:ff:52:3f:4a:97:b2:
         9e:17:b1:98:5a:07:b6:a7:a9:3d:92:7a:29:fb:d1:59:2d:75:
         ad:ee:46:91:92:3b:0f:f9:14:fc:39:89:95:9a:30:5e:73:79:
         91:8b:15:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:43:44 2026 by rpki-client