Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5/9ff30824-1084-32e9-aa19-53c49b5db5a4.roa
File:                     9ff30824-1084-32e9-aa19-53c49b5db5a4.roa (raw, json)
Hash identifier:          Zayigo/KjL2j//+fDm94SKdmntTAZ1S9z708D/oxIPs=
Subject key identifier:   C0:FC:7A:6B:4C:9C:C1:26:51:56:91:61:67:C0:E2:C0:8B:B0:E0:C6
Certificate issuer:       /CN=bc3951ec-0f8a-49d2-bec7-41a9657e87f5
Certificate serial:       010D0C9F4328584CEFF242C2052DE60129ECCB80
Authority key identifier: 00:96:DD:99:13:E4:C1:00:CA:66:7C:56:A6:9F:2F:41:B9:D4:5C:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5/9ff30824-1084-32e9-aa19-53c49b5db5a4.roa
Signing time:             Sat 21 Feb 2026 14:00:41 +0000
ROA not before:           Sat 21 Feb 2026 14:00:41 +0000
ROA not after:            Fri 22 May 2026 13:00:41 +0000
asID:                     2902
IP address blocks:        198.59.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ef:f2:42:c2:05:2d:e6:01:29:ec:cb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc3951ec-0f8a-49d2-bec7-41a9657e87f5
        Validity
            Not Before: Feb 21 14:00:41 2026 GMT
            Not After : May 22 13:00:41 2026 GMT
        Subject: CN=f91619d7-28c8-4a40-8936-79dc6f376983
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:4e:78:2c:05:12:97:32:49:00:70:66:bc:88:
                    c3:aa:d8:0d:c5:76:80:9d:9b:84:ed:51:08:a3:ca:
                    bb:2d:a5:59:18:cb:3d:59:88:ff:17:1b:b2:4a:f2:
                    87:6f:07:c1:b7:10:ce:91:d4:8a:13:5d:dc:f5:1d:
                    58:29:d5:3b:99:95:b2:67:55:27:88:8d:ac:b1:6f:
                    bc:37:1b:7b:6a:b5:64:e4:e7:c7:e7:cb:9e:bb:7e:
                    dc:1a:ab:57:68:3d:ac:ba:c7:55:12:09:a6:19:d2:
                    eb:e7:7d:78:e8:18:08:26:94:21:37:f0:e0:da:f2:
                    71:49:54:b3:53:21:26:18:17:57:2b:7a:02:ab:5c:
                    39:61:9b:b7:f4:ce:d9:5a:46:00:3e:40:fa:c2:f4:
                    50:16:5f:8c:cb:38:94:48:c2:23:1b:5f:db:14:34:
                    ee:b0:2a:97:3e:19:61:7c:12:79:3a:e4:2d:9c:83:
                    5b:35:a8:09:e6:a5:6d:3b:cf:76:1d:47:e6:98:f8:
                    3b:fb:c7:6c:ad:17:c0:fb:f1:3a:ae:95:d9:b6:54:
                    1e:8e:6d:b8:2c:97:dd:9e:ed:5a:20:c5:1f:1c:7f:
                    e3:eb:63:da:84:57:b3:09:dc:f6:eb:6a:7a:4e:b5:
                    c4:91:bb:e7:90:74:eb:a2:06:42:90:3e:d3:ac:d6:
                    a1:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:FC:7A:6B:4C:9C:C1:26:51:56:91:61:67:C0:E2:C0:8B:B0:E0:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5/9ff30824-1084-32e9-aa19-53c49b5db5a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.crl

            X509v3 Authority Key Identifier:
                keyid:00:96:DD:99:13:E4:C1:00:CA:66:7C:56:A6:9F:2F:41:B9:D4:5C:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.59.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:8f:0a:06:26:11:47:12:a7:ba:a6:e6:75:36:10:6a:59:13:
         2d:b2:ce:eb:28:fc:cc:8e:7b:97:03:3f:27:90:1d:8b:18:94:
         cc:5c:b6:c8:d9:e2:79:b3:2f:9e:87:2c:b6:5c:7e:e2:af:90:
         a4:a3:73:67:24:b2:de:6d:a1:d1:0f:3f:f0:bf:e4:be:b5:7c:
         fb:ab:0d:5e:ab:b4:be:11:d2:b5:4e:5a:26:8b:79:32:e9:40:
         9d:9b:5e:c4:8a:bf:5a:ea:f3:77:d6:17:26:da:8e:ca:65:fc:
         75:11:21:ed:fe:d5:62:75:0c:f0:3b:f0:ea:4c:1e:14:a8:4f:
         95:2b:5d:29:5c:4b:34:5b:3e:6f:d4:64:50:e5:b7:15:df:2e:
         7d:c9:f6:e8:ac:b7:44:78:44:1f:04:58:f8:9d:98:d9:af:9a:
         8d:03:5f:f9:19:60:09:90:9a:8e:ed:6b:d8:64:6b:21:a6:6e:
         61:8c:db:bf:d5:3a:39:0f:0e:b2:78:70:7c:0c:bb:d4:d2:5f:
         29:e9:54:f4:b7:37:76:69:1f:1d:07:94:b4:b0:31:45:98:ab:
         59:7b:fc:54:e6:b8:36:21:1f:66:29:4c:ca:b6:bf:f0:31:8f:
         d9:4e:0b:25:f0:53:fd:57:2d:9f:b6:a7:9f:04:28:df:99:03:
         87:50:27:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:07:16 2026 by rpki-client