Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/51c58520-9aa1-397b-8d4c-2cf7dfb57659.roa
File:                     51c58520-9aa1-397b-8d4c-2cf7dfb57659.roa (raw, json)
Hash identifier:          6+8lVdVACCfKZfEbhS4G1mbAjr0ZKp78jLLgoHm8TzQ=
Subject key identifier:   CB:3D:F1:E9:7B:A2:C2:CF:BD:38:07:65:49:43:9F:74:64:D1:42:0B
Certificate issuer:       /CN=dc598c19-9d8e-4650-abce-c34c5146591f
Certificate serial:       010D0C9F4328584CDF3275D27FD117F7CD979E80
Authority key identifier: 64:9C:48:23:F8:20:35:C3:39:FD:F0:C6:5A:BD:D0:46:CD:81:FA:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/51c58520-9aa1-397b-8d4c-2cf7dfb57659.roa
Signing time:             Sun 15 Feb 2026 14:00:41 +0000
ROA not before:           Sun 15 Feb 2026 14:00:41 +0000
ROA not after:            Sat 16 May 2026 13:00:41 +0000
asID:                     11325
IP address blocks:        172.85.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/dc598c19-9d8e-4650-abce-c34c5146591f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/dc598c19-9d8e-4650-abce-c34c5146591f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:df:32:75:d2:7f:d1:17:f7:cd:97:9e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc598c19-9d8e-4650-abce-c34c5146591f
        Validity
            Not Before: Feb 15 14:00:41 2026 GMT
            Not After : May 16 13:00:41 2026 GMT
        Subject: CN=5ba4c3e5-d212-4d1a-be0d-d7cebf836943
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:69:92:7a:5b:2e:85:9b:62:15:5e:11:27:76:
                    8e:76:3c:d7:fe:60:bf:77:f9:8f:7d:10:f1:12:48:
                    8a:c1:b9:ad:c4:33:c4:17:8c:b8:75:2d:d6:7d:0b:
                    59:b6:c8:cb:9a:95:1f:92:0f:b5:b4:bc:40:b3:f1:
                    87:39:a1:f2:38:6e:e2:0c:2e:da:8c:7c:40:a7:2d:
                    33:5f:d0:95:1b:bb:0d:f5:48:4c:ea:5c:c0:1f:dd:
                    dc:31:a6:d2:95:a5:aa:ea:e7:c7:21:85:bf:9a:96:
                    af:36:5a:40:79:9a:d7:34:83:d6:c3:b3:4e:d7:0b:
                    ec:67:fe:60:17:73:8f:3c:9c:e4:4d:d3:94:07:f5:
                    aa:2f:76:02:0f:18:38:86:69:cc:0b:f6:e8:de:e0:
                    6c:af:f2:ca:da:43:5f:5d:44:12:c7:af:46:8d:e8:
                    71:92:18:46:db:12:58:e3:20:a3:04:fc:78:77:a9:
                    43:fd:1a:82:7a:3e:bd:3c:5b:44:eb:3c:10:b2:8a:
                    b2:bb:de:fc:71:90:2f:16:ed:5d:3e:37:a0:77:67:
                    e7:28:a0:8e:92:a3:9f:d6:d3:66:1f:6b:14:9e:47:
                    e2:d7:55:95:d9:2e:9f:ef:a2:4f:a8:66:57:d6:8e:
                    dc:09:eb:73:36:0f:77:49:99:a7:86:22:b7:fa:1e:
                    ce:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:3D:F1:E9:7B:A2:C2:CF:BD:38:07:65:49:43:9F:74:64:D1:42:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/51c58520-9aa1-397b-8d4c-2cf7dfb57659.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/dc598c19-9d8e-4650-abce-c34c5146591f.crl

            X509v3 Authority Key Identifier:
                keyid:64:9C:48:23:F8:20:35:C3:39:FD:F0:C6:5A:BD:D0:46:CD:81:FA:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.85.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:b4:89:fe:f8:83:a0:f2:94:42:c3:20:80:c1:b3:bc:b6:31:
         56:d0:d4:f3:85:6b:90:b8:8e:80:fb:ba:a2:6f:b9:22:e1:7f:
         c4:76:03:f7:62:21:0e:92:c8:a5:8e:f1:a0:23:67:b3:51:de:
         a3:6e:d4:e7:39:33:d1:13:22:8d:74:46:58:69:97:35:4b:9d:
         ea:d5:6d:ef:45:50:6d:95:3d:1e:af:d9:2b:52:ed:76:bb:12:
         1c:b5:32:ac:9f:ae:6d:c2:d0:3a:2d:31:3c:5c:01:34:dc:e8:
         27:15:a0:91:96:90:29:dd:94:86:98:f8:5c:b2:fe:5f:6c:82:
         65:5c:ab:d0:77:94:b9:a1:5a:7f:fa:bd:b2:34:7f:55:b6:93:
         da:29:01:f2:52:e6:00:bd:87:3a:26:3c:6b:7e:a2:2a:7a:df:
         f3:4f:8f:e5:86:20:f7:f4:4f:fa:be:7d:04:d7:1f:3c:b9:e8:
         18:03:a8:86:aa:95:66:dd:6e:e6:84:73:24:45:81:57:a9:81:
         83:39:e6:af:42:1e:bb:0f:5e:12:cb:39:13:9a:9f:24:d3:93:
         94:70:b6:ef:fa:3f:67:39:f1:db:90:bf:54:f8:49:86:0a:f7:
         98:1a:34:51:49:41:a0:8e:47:1c:6e:13:e0:f1:65:f0:25:43:
         66:15:40:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:17:27 2026 by rpki-client