Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/e7e9a678-ff8b-3604-bde7-42c16df85d1c.roa
File:                     e7e9a678-ff8b-3604-bde7-42c16df85d1c.roa (raw, json)
Hash identifier:          SANx3vTD15ye8nfwln0Svc7BG9REbrFaciFMI6pj8Ls=
Subject key identifier:   14:23:CC:D0:F8:D2:AC:47:24:94:EF:DD:EE:CF:2D:3A:B1:E6:10:6A
Certificate issuer:       /CN=96aa12fd-20f6-4f37-aab7-a27391ae096e
Certificate serial:       010D0C9F4328584CF9B784CCD01EFA956E593000
Authority key identifier: 64:2E:31:9D:C5:17:1B:E0:F6:CD:30:94:51:D8:10:99:B1:1D:AE:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/e7e9a678-ff8b-3604-bde7-42c16df85d1c.roa
Signing time:             Wed 25 Feb 2026 02:00:32 +0000
ROA not before:           Wed 25 Feb 2026 02:00:32 +0000
ROA not after:            Tue 26 May 2026 01:00:32 +0000
asID:                     396982
IP address blocks:        199.47.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/96aa12fd-20f6-4f37-aab7-a27391ae096e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/96aa12fd-20f6-4f37-aab7-a27391ae096e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f9:b7:84:cc:d0:1e:fa:95:6e:59:30:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96aa12fd-20f6-4f37-aab7-a27391ae096e
        Validity
            Not Before: Feb 25 02:00:32 2026 GMT
            Not After : May 26 01:00:32 2026 GMT
        Subject: CN=06bd4f69-e0a8-4733-b8a4-bbc61da31176
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:f6:bf:96:6e:c4:02:5e:5a:10:85:a9:62:fe:
                    e0:55:31:b8:76:40:31:48:4b:0f:a4:23:25:90:79:
                    f5:0d:63:99:6c:49:fa:14:2a:0d:f0:80:3d:e3:78:
                    0d:56:3f:b3:f4:cd:c1:c6:b8:0b:67:43:a0:49:f9:
                    b8:a0:da:82:0b:85:4b:1c:37:2f:89:6b:d8:73:4f:
                    9c:82:d3:84:85:d6:f9:19:e4:8f:b0:d0:db:8a:4d:
                    73:7d:76:42:57:ce:76:66:17:2e:c5:ab:2b:85:f1:
                    4a:fe:50:cb:8f:84:4c:67:09:c7:d2:35:89:1f:13:
                    44:38:74:bf:8a:d7:de:f4:17:da:4d:b5:53:6b:de:
                    cf:9a:4e:de:a3:db:7f:ad:a3:c0:27:b9:44:6d:42:
                    29:d3:41:15:9b:35:ac:f6:e6:7c:45:73:5c:d4:78:
                    7f:31:29:7f:cb:f2:f8:3d:aa:24:aa:ac:12:ae:14:
                    8f:d8:39:99:b5:52:77:8d:93:7f:f2:59:14:a3:86:
                    86:30:f4:d8:97:bc:f1:2c:5c:27:4a:54:90:dd:b4:
                    b3:ab:c1:be:31:9b:a5:2e:d0:41:50:a8:73:95:e3:
                    47:57:fc:de:1e:05:4f:25:77:fa:c2:4a:8a:5e:a5:
                    49:af:a7:d3:d3:a4:04:21:f3:6b:f7:9e:fd:58:bc:
                    ec:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:23:CC:D0:F8:D2:AC:47:24:94:EF:DD:EE:CF:2D:3A:B1:E6:10:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/e7e9a678-ff8b-3604-bde7-42c16df85d1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/96aa12fd-20f6-4f37-aab7-a27391ae096e.crl

            X509v3 Authority Key Identifier:
                keyid:64:2E:31:9D:C5:17:1B:E0:F6:CD:30:94:51:D8:10:99:B1:1D:AE:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.47.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:62:4b:ee:4e:21:a9:1a:ca:5a:ae:de:0d:3e:94:52:e3:86:
         9c:dc:ec:41:a3:67:4e:c1:ff:ef:ac:44:6b:fb:26:5e:6f:5f:
         2c:9f:6f:e7:86:96:cb:dd:9c:82:33:7f:e5:82:02:14:9b:ab:
         0f:3c:80:a6:7d:7e:2a:44:57:70:3e:5e:fe:2d:93:9d:9e:08:
         96:d6:35:4f:95:93:58:03:72:b9:f5:8c:36:b4:94:25:c5:b6:
         4f:e4:ce:5c:ae:f0:90:5b:d2:1e:dc:9a:d2:21:09:6d:f9:00:
         04:85:5a:e6:84:e0:e8:99:e5:82:18:ad:d1:1a:7c:77:fc:e8:
         eb:dd:f7:db:b7:3b:ae:e0:75:3a:77:b9:c0:9b:69:92:ae:ff:
         b1:15:ed:49:60:3c:cc:51:bb:40:19:02:8f:2f:a8:f2:a3:a2:
         ca:42:03:ab:99:9a:9a:33:e6:a7:d8:80:bf:ba:a8:35:6a:8a:
         d7:90:dc:dc:9e:0b:a1:6e:3d:01:d8:a5:49:c8:70:6a:50:34:
         c7:3a:ec:24:b4:02:4d:57:9e:14:17:78:91:a4:ee:37:0c:73:
         7e:6a:99:c3:17:2c:4d:a9:be:89:b9:ea:28:79:4f:e5:f4:6b:
         47:19:45:9e:dd:8a:0e:50:7e:fc:25:36:fb:69:01:25:56:81:
         d5:56:fb:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:29:19 2026 by rpki-client