Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/dd6bcb4a-b00a-30d9-aee1-f1f87ebfcac8.roa
File:                     dd6bcb4a-b00a-30d9-aee1-f1f87ebfcac8.roa (raw, json)
Hash identifier:          Rem/j0sFxAeCUP3/7iAWh8iq1Ksn/D4SaOwQ62uBZdE=
Subject key identifier:   3D:F0:29:D2:2D:37:43:45:19:FB:CD:23:33:1E:4C:B4:F8:53:C2:07
Certificate issuer:       /CN=d5ebadbb-b63c-4e95-8e76-fd22cc861311
Certificate serial:       010D0C9F4328584CEA5CF11C97DD45FCA3ABF100
Authority key identifier: 0A:5D:E7:3A:9A:58:CA:C5:9D:F6:05:BC:E3:F2:1E:CC:23:F8:D7:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/dd6bcb4a-b00a-30d9-aee1-f1f87ebfcac8.roa
Signing time:             Thu 19 Feb 2026 14:00:40 +0000
ROA not before:           Thu 19 Feb 2026 14:00:40 +0000
ROA not after:            Wed 20 May 2026 13:00:40 +0000
asID:                     25697
IP address blocks:        209.151.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ea:5c:f1:1c:97:dd:45:fc:a3:ab:f1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5ebadbb-b63c-4e95-8e76-fd22cc861311
        Validity
            Not Before: Feb 19 14:00:40 2026 GMT
            Not After : May 20 13:00:40 2026 GMT
        Subject: CN=3a54a96c-f2e3-40c0-9718-096fdc0327b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:4e:5d:db:fb:8e:07:89:8b:88:21:c3:1c:ee:
                    36:4f:97:0f:43:ce:83:68:e0:6b:f1:3f:e3:c6:ba:
                    ea:30:fa:99:71:59:51:2a:80:18:8f:63:74:b6:2c:
                    9a:b7:47:0f:96:ab:c3:f4:44:ec:98:c9:93:53:cc:
                    0d:59:ac:80:b5:fe:6d:27:54:85:b3:09:2a:00:ed:
                    9f:9e:db:1e:3e:46:eb:62:34:d0:a3:22:ed:52:11:
                    55:90:c4:83:1a:10:64:6f:47:04:7c:c4:ce:c0:4c:
                    46:b0:5f:d7:89:3e:f0:6b:7c:b5:62:92:3a:f8:ef:
                    ab:b4:f8:38:0b:24:f5:cc:88:48:b8:09:91:82:42:
                    3f:17:22:ab:26:f4:6c:66:12:b8:61:b7:03:fd:be:
                    9f:e7:d5:0b:01:aa:02:12:cb:ea:fa:07:96:b5:d9:
                    cf:0c:6e:b6:7c:cf:51:3f:13:b5:ca:a8:13:11:10:
                    68:be:b6:f0:99:52:1c:77:b1:a9:86:a3:9e:ad:ee:
                    58:3d:c6:5b:78:ad:7f:b1:51:82:9a:13:14:00:32:
                    4d:75:3d:40:15:0a:b2:78:46:88:3c:a6:37:72:6c:
                    d3:d1:8e:0f:a7:85:2c:22:de:0a:27:1b:5b:8b:35:
                    61:6a:99:d8:e9:c3:11:4f:19:00:c8:d8:94:58:19:
                    76:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:F0:29:D2:2D:37:43:45:19:FB:CD:23:33:1E:4C:B4:F8:53:C2:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/dd6bcb4a-b00a-30d9-aee1-f1f87ebfcac8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.crl

            X509v3 Authority Key Identifier:
                keyid:0A:5D:E7:3A:9A:58:CA:C5:9D:F6:05:BC:E3:F2:1E:CC:23:F8:D7:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.151.158.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:69:97:67:3a:de:e7:84:73:de:a1:c3:7e:d3:95:0a:35:c1:
         92:69:a0:99:0f:da:78:de:39:ea:a0:d7:50:98:22:bf:d0:1e:
         85:92:55:26:aa:f6:32:ae:c2:a2:af:a2:17:bd:4a:ca:1c:1e:
         aa:64:c0:82:52:ec:01:6d:7e:6b:b4:25:68:47:e8:91:93:7f:
         ed:f9:52:79:3f:92:d6:d8:50:03:56:7c:2e:03:62:7d:f6:a0:
         26:69:48:e7:fc:06:7f:2e:92:13:95:90:da:b3:9b:34:9a:3c:
         20:ed:08:3d:40:03:d8:33:a6:f3:01:5e:e5:33:e6:aa:06:b3:
         ee:48:ed:47:de:f9:71:51:f0:c0:19:f5:e4:d2:57:02:3c:aa:
         78:34:78:c7:00:16:89:4c:ad:19:01:a3:40:e6:79:13:bd:77:
         df:aa:e7:fa:54:b7:cf:0b:0c:ee:f6:6b:7b:33:13:fa:37:df:
         de:2d:af:58:35:fe:f5:31:3b:8a:a8:59:d7:b0:25:a9:0f:45:
         8c:af:4a:d0:1f:bc:a8:28:36:3c:f8:1f:81:d3:40:75:9d:82:
         7b:e0:c5:e5:1a:6d:ee:8c:1a:46:b4:7f:58:9b:84:e7:d9:dc:
         1f:1c:41:67:15:53:5a:09:46:59:4f:1c:04:2e:06:2c:cc:ff:
         97:ea:32:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:40:48 2026 by rpki-client