Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/9ba9ef6c-85e7-3b71-89e7-41b2bd314899.roa
File:                     9ba9ef6c-85e7-3b71-89e7-41b2bd314899.roa (raw, json)
Hash identifier:          lY2bBto5ynMIiZOhKtj5oIJt5+KixFLCaSK4G7ZU/30=
Subject key identifier:   E4:A8:CE:C1:B7:3C:AA:FE:68:64:32:05:B0:39:52:A9:FB:87:FB:EB
Certificate issuer:       /CN=6459964e-cb44-4be5-88da-03fac554e95c
Certificate serial:       010D0C9F4328584CEFF2460C73B155D840AAAC80
Authority key identifier: 2A:DE:EC:A4:72:AC:F1:D7:85:7E:C5:46:E2:2F:35:74:98:FA:0A:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/9ba9ef6c-85e7-3b71-89e7-41b2bd314899.roa
Signing time:             Sat 21 Feb 2026 14:00:41 +0000
ROA not before:           Sat 21 Feb 2026 14:00:41 +0000
ROA not after:            Fri 22 May 2026 13:00:41 +0000
asID:                     32771
IP address blocks:        199.247.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/6459964e-cb44-4be5-88da-03fac554e95c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/6459964e-cb44-4be5-88da-03fac554e95c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ef:f2:46:0c:73:b1:55:d8:40:aa:ac:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6459964e-cb44-4be5-88da-03fac554e95c
        Validity
            Not Before: Feb 21 14:00:41 2026 GMT
            Not After : May 22 13:00:41 2026 GMT
        Subject: CN=ec8eaadb-dc03-42c7-b57a-bbad8fc4e925
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:5d:83:2f:44:0e:39:62:1d:41:55:94:3f:46:
                    86:ce:37:be:4f:be:67:a1:bf:35:7d:e2:95:e1:e5:
                    87:26:fc:30:0c:b0:a5:34:04:4e:8d:f6:d4:bc:ef:
                    31:ca:91:4e:bb:71:19:42:bc:00:b4:ad:58:54:27:
                    b0:80:0d:3e:05:f2:12:35:d2:79:50:8f:6e:a4:b1:
                    e8:4a:16:67:bd:f2:5a:86:15:c7:b0:b9:41:16:37:
                    0c:fa:7f:97:85:a4:d3:ec:ba:f3:68:cc:09:05:27:
                    fe:e2:b1:76:db:d3:65:6d:e1:67:50:a4:c7:ba:44:
                    80:3d:ef:c7:67:90:c3:ea:54:4b:cf:03:42:5d:61:
                    02:ac:c3:5b:fc:51:f0:db:d8:3d:45:6f:bf:c2:aa:
                    6a:83:1d:25:85:98:c3:13:45:2d:d3:57:2f:b6:1a:
                    8e:1a:94:c4:e1:e4:15:f6:0a:4f:e5:80:8c:3b:17:
                    40:c4:9d:7f:d0:d1:c1:43:14:a8:36:fb:9e:de:0b:
                    7f:06:e3:f0:7a:81:b5:c0:1b:50:41:72:43:42:e9:
                    eb:a5:69:52:69:02:f5:ef:9a:0b:94:70:cf:80:e9:
                    af:5e:27:b1:4f:e1:1b:13:d2:e1:84:ec:54:bb:54:
                    fb:97:81:90:22:d7:0e:f8:63:79:c9:2d:cc:3e:e8:
                    44:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:A8:CE:C1:B7:3C:AA:FE:68:64:32:05:B0:39:52:A9:FB:87:FB:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/9ba9ef6c-85e7-3b71-89e7-41b2bd314899.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/6459964e-cb44-4be5-88da-03fac554e95c.crl

            X509v3 Authority Key Identifier:
                keyid:2A:DE:EC:A4:72:AC:F1:D7:85:7E:C5:46:E2:2F:35:74:98:FA:0A:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.247.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:16:00:eb:f6:32:9c:f8:51:88:41:a1:40:89:52:f8:d3:ef:
         a2:81:0b:bd:0f:37:53:e5:5e:9a:1c:d1:dd:41:d3:75:2d:f1:
         f4:29:a9:b8:d5:ad:a5:7c:6f:dc:52:a6:e4:36:3b:0b:cf:a2:
         68:16:f3:a9:8f:be:03:16:f9:e5:71:04:b6:ce:0a:96:bb:26:
         0e:03:11:e3:23:c5:e6:b8:f4:67:75:5e:5b:aa:89:b8:dc:06:
         38:a9:63:8d:b0:a9:a1:7e:67:85:5f:67:fa:28:b6:11:12:e4:
         27:66:2e:b5:99:b5:bc:20:f8:2f:7d:f6:fc:78:8e:92:73:81:
         1d:42:a8:27:24:b4:9d:52:1e:74:0f:f9:68:51:1c:7c:f4:6c:
         7d:1a:2a:b7:85:61:65:65:a2:ab:53:37:47:a0:d6:7e:32:f5:
         ae:f3:ca:69:56:c3:65:db:cf:0f:48:e0:90:57:25:cc:b4:16:
         c0:41:01:38:95:a5:81:1a:72:f0:a1:db:e8:b9:a2:23:0b:b5:
         47:4e:97:ff:c1:a1:bc:1b:27:fb:cc:8c:06:ca:11:dc:f5:c3:
         05:73:7e:d5:c4:c4:19:db:7e:97:94:57:99:40:53:58:bc:32:
         46:f0:71:1f:45:ee:97:52:08:86:80:12:f1:f9:1c:25:ef:bf:
         de:bc:c4:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:54:53 2026 by rpki-client