Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/91294759-5da4-4acf-8f32-7c022824b443/7c4e8ce2-84f8-3ee8-a2a3-754e631b637b.roa
File:                     7c4e8ce2-84f8-3ee8-a2a3-754e631b637b.roa (raw, json)
Hash identifier:          pyWxch+Viq7H2LJnB22277u71e//A2k70fip1qF4Z4M=
Subject key identifier:   2A:67:11:6D:0A:BC:87:75:57:95:65:3F:E8:5D:0E:BE:A9:CA:3F:F5
Certificate issuer:       /CN=91294759-5da4-4acf-8f32-7c022824b443
Certificate serial:       010D0C9F4328584CEBC2334FE2E334AD8E474C00
Authority key identifier: 4A:E3:79:93:AC:D8:45:48:A9:B2:47:A7:78:3F:37:39:27:E0:0F:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/91294759-5da4-4acf-8f32-7c022824b443.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/91294759-5da4-4acf-8f32-7c022824b443/7c4e8ce2-84f8-3ee8-a2a3-754e631b637b.roa
Signing time:             Fri 20 Feb 2026 02:00:32 +0000
ROA not before:           Fri 20 Feb 2026 02:00:32 +0000
ROA not after:            Thu 21 May 2026 01:00:32 +0000
asID:                     3423
IP address blocks:        204.193.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/91294759-5da4-4acf-8f32-7c022824b443/91294759-5da4-4acf-8f32-7c022824b443.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/91294759-5da4-4acf-8f32-7c022824b443/91294759-5da4-4acf-8f32-7c022824b443.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/91294759-5da4-4acf-8f32-7c022824b443.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:eb:c2:33:4f:e2:e3:34:ad:8e:47:4c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91294759-5da4-4acf-8f32-7c022824b443
        Validity
            Not Before: Feb 20 02:00:32 2026 GMT
            Not After : May 21 01:00:32 2026 GMT
        Subject: CN=57f98e21-302a-47f9-8149-e56da67a5c5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:8c:f1:28:e8:d4:5c:58:6b:f5:d3:b2:10:65:
                    78:4d:43:35:09:85:65:d2:26:24:1d:20:ef:65:02:
                    69:6a:2f:5d:51:ca:ad:9d:ee:91:67:a1:9f:0e:b1:
                    49:8e:ec:08:de:b9:26:9d:1c:c0:0a:cf:1b:6c:49:
                    b6:cb:5d:e0:84:ed:12:4d:3b:dd:64:bb:85:e3:b5:
                    8e:37:21:c4:b8:d6:1f:2e:9b:c2:1b:3f:99:e9:20:
                    c9:d8:76:d2:be:e5:8c:01:37:7e:a5:73:ba:59:3e:
                    f0:0d:49:b9:17:99:8a:3c:22:3b:22:75:b2:c8:ee:
                    44:c5:91:ed:e5:67:e7:52:6a:d8:0a:01:c5:08:fb:
                    88:3e:0e:5b:fb:c9:e5:5e:b3:3f:72:ef:77:3c:95:
                    dc:15:54:f4:e9:3c:3e:eb:8d:9f:b4:76:2d:23:25:
                    af:33:91:c1:1f:b2:94:61:0c:4f:58:41:99:89:47:
                    c1:e4:1a:37:c4:36:5c:db:cb:09:12:9a:17:cd:ea:
                    7b:6e:d5:24:4b:0a:56:ef:60:18:8f:38:22:b2:18:
                    83:05:d4:09:af:85:a7:85:1b:dc:aa:9e:71:70:76:
                    30:85:c8:cb:de:88:67:7d:d1:01:3f:42:cb:ab:d0:
                    52:23:91:a6:99:9c:d2:2c:e7:55:04:9d:da:3c:5b:
                    8f:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:67:11:6D:0A:BC:87:75:57:95:65:3F:E8:5D:0E:BE:A9:CA:3F:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/91294759-5da4-4acf-8f32-7c022824b443/7c4e8ce2-84f8-3ee8-a2a3-754e631b637b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/91294759-5da4-4acf-8f32-7c022824b443/91294759-5da4-4acf-8f32-7c022824b443.crl

            X509v3 Authority Key Identifier:
                keyid:4A:E3:79:93:AC:D8:45:48:A9:B2:47:A7:78:3F:37:39:27:E0:0F:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/91294759-5da4-4acf-8f32-7c022824b443.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.193.231.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:4e:4c:1c:3d:30:31:d6:d4:6d:ae:6a:31:d0:82:3e:2e:6e:
         19:f4:f0:11:e1:3f:10:33:32:b9:ec:cb:60:40:38:a3:a7:78:
         a8:b7:1e:b6:1b:02:e2:f8:f6:c4:58:a8:fa:2d:58:01:00:f6:
         ee:33:0e:46:80:ff:d4:9b:24:df:36:29:76:b9:9a:29:50:c6:
         52:29:0d:80:a8:7d:f0:af:2e:5d:e0:05:d9:f3:32:36:c3:a7:
         82:22:9b:aa:21:34:7a:e7:7e:c2:d3:31:81:08:08:81:3e:74:
         20:21:ce:98:10:12:9d:e1:00:0c:1b:4f:bf:9e:b5:07:d9:ef:
         02:26:82:eb:40:87:96:be:78:d6:3c:bf:7c:ff:aa:f1:37:e2:
         5e:3e:65:04:12:2c:45:ff:f1:ce:0d:1f:c4:55:32:33:e2:23:
         cb:7c:15:6e:80:d2:2f:3c:7b:c9:50:03:26:91:17:3e:e9:a2:
         5a:09:20:7f:fd:94:64:aa:a9:04:7c:23:35:dd:1b:a2:2b:ac:
         cf:5f:fa:6c:fb:95:34:4a:25:00:35:71:55:3f:ac:1a:2a:47:
         de:4c:d1:58:f4:01:7f:71:b2:71:81:cd:11:b4:10:b2:23:92:
         91:b4:fa:04:5b:9a:18:68:14:cb:91:08:80:e8:e8:06:d3:c8:
         0b:49:2f:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:27:24 2026 by rpki-client