Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/1efaca2e-ecb7-3af2-a680-aa4cd24df633.roa
File:                     1efaca2e-ecb7-3af2-a680-aa4cd24df633.roa (raw, json)
Hash identifier:          Ao5P78SdlajHbR+PSkx4yhXmRFVDhhaCT5HH0g+vYGs=
Subject key identifier:   A3:DF:F6:36:37:F4:89:F3:7D:FC:2D:E5:45:56:AC:18:A7:BB:6B:D7
Certificate issuer:       /CN=b985122e-f2ff-4349-8e7b-d604ee2577f1
Certificate serial:       010D0C9F4328584CA061C831F6BB8ECF2FBA0E00
Authority key identifier: 32:43:E7:3C:F7:1B:05:DF:36:0A:46:4E:31:16:51:4B:87:61:26:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/1efaca2e-ecb7-3af2-a680-aa4cd24df633.roa
Signing time:             Sat 24 Jan 2026 02:00:31 +0000
ROA not before:           Sat 24 Jan 2026 02:00:31 +0000
ROA not after:            Fri 24 Apr 2026 01:00:31 +0000
asID:                     11052
IP address blocks:        199.249.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/b985122e-f2ff-4349-8e7b-d604ee2577f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/b985122e-f2ff-4349-8e7b-d604ee2577f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:a0:61:c8:31:f6:bb:8e:cf:2f:ba:0e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b985122e-f2ff-4349-8e7b-d604ee2577f1
        Validity
            Not Before: Jan 24 02:00:31 2026 GMT
            Not After : Apr 24 01:00:31 2026 GMT
        Subject: CN=247190b3-f643-4c1b-bbf0-b0c86b7dca02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:7b:fd:f5:8c:9a:85:fd:ae:ce:63:a7:2e:b2:
                    a1:bf:e2:ce:64:9e:30:09:0a:2c:e5:89:73:f8:b2:
                    9d:a6:8b:b9:ac:74:fd:93:54:81:f7:6f:6c:b6:91:
                    03:c7:20:72:78:e1:09:10:45:2b:34:ed:f2:5d:ac:
                    8b:be:01:b3:5a:a0:ca:00:b0:c6:bd:0d:30:cc:ec:
                    be:39:a7:ac:76:15:26:53:e2:61:0f:4d:0f:10:33:
                    c0:67:5e:01:b4:ac:8e:0d:47:77:f7:d5:04:cf:22:
                    ac:ec:99:02:ae:c4:26:82:e0:2b:42:5a:30:22:7c:
                    6d:d9:2e:a0:d1:c7:3a:a0:6c:1c:84:8d:7f:7c:e6:
                    82:9c:df:f3:61:a5:c1:65:fb:79:15:c0:cc:4d:6b:
                    f3:13:b3:20:bf:44:4c:34:30:97:ed:85:71:8b:71:
                    38:d8:47:f0:c5:16:ce:4c:21:d6:66:5e:53:df:7d:
                    94:9f:9b:bd:55:2e:74:01:b4:a3:26:ac:68:bc:bd:
                    ce:43:d9:48:28:6c:c8:65:8d:ce:0f:44:0f:d6:ef:
                    b2:5d:1c:34:13:19:ea:8a:f3:bd:f7:e0:22:c5:94:
                    01:76:59:b5:96:31:3b:b6:38:5b:53:61:fe:96:bf:
                    b9:4e:36:ba:d6:44:f3:d0:a9:34:68:96:c5:f5:5e:
                    d4:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:DF:F6:36:37:F4:89:F3:7D:FC:2D:E5:45:56:AC:18:A7:BB:6B:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/1efaca2e-ecb7-3af2-a680-aa4cd24df633.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/b985122e-f2ff-4349-8e7b-d604ee2577f1.crl

            X509v3 Authority Key Identifier:
                keyid:32:43:E7:3C:F7:1B:05:DF:36:0A:46:4E:31:16:51:4B:87:61:26:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.249.239.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:9d:e4:33:33:0e:2e:4b:49:73:e5:5c:ba:d5:95:3a:06:85:
         52:2f:4e:f4:4a:8c:b4:83:c7:a6:06:e2:72:9d:87:02:5f:a8:
         53:c9:c9:59:aa:67:17:1f:58:ac:c3:62:8a:e7:58:d2:61:e8:
         3c:d7:2f:86:da:f3:82:66:be:50:8d:ca:66:16:55:d7:8e:fb:
         4d:5e:76:bf:44:f8:18:1f:41:b0:fb:b8:d2:e8:18:f2:9a:d7:
         b9:0e:f0:51:71:a1:66:a4:29:88:c5:55:c5:61:3f:49:7a:0b:
         6d:cf:2e:12:2a:ac:42:ea:d9:aa:ba:9a:4c:ed:15:04:ed:67:
         8b:fc:ba:29:c8:84:b4:85:10:f7:c5:64:9b:8c:97:66:a6:c4:
         40:2b:cd:e8:02:7a:d0:8a:b5:70:23:c1:7b:60:0a:3c:64:df:
         22:e2:94:d7:dc:97:ce:32:d1:51:33:e5:aa:26:7e:52:9e:ed:
         7b:ca:e1:0c:56:be:13:21:3f:a4:4e:fd:13:70:e9:4c:61:9e:
         8b:e4:42:4a:39:21:d3:77:bc:87:6f:a7:85:32:6d:fb:54:7d:
         01:e7:73:9c:57:4c:c4:15:d2:5f:13:2c:68:f4:b6:d3:6f:01:
         fe:a8:72:6b:5f:7a:e7:25:81:f7:2d:53:09:2d:b5:c2:71:5e:
         01:98:b8:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:09:48 2026 by rpki-client