Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/cdaa2df5-c231-3499-8475-c51e6b98bc5d.roa
File:                     cdaa2df5-c231-3499-8475-c51e6b98bc5d.roa (raw, json)
Hash identifier:          SMk29fV6MyERzZ9JwSCepRyWeKUsvUlZIACSv0SiabI=
Subject key identifier:   16:66:90:9F:50:06:30:B7:4C:61:9D:B5:57:C5:C3:58:B0:62:66:B3
Certificate issuer:       /CN=05279918-f5b1-43f7-9748-95aa0c6469f3
Certificate serial:       010D0C9F4328584CCFD7321034050CE9B4BE5580
Authority key identifier: 72:01:F5:88:07:5E:64:C9:E9:00:F6:1F:3F:6B:AD:F0:DC:C2:CF:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/cdaa2df5-c231-3499-8475-c51e6b98bc5d.roa
Signing time:             Tue 10 Feb 2026 02:00:31 +0000
ROA not before:           Tue 10 Feb 2026 02:00:31 +0000
ROA not after:            Mon 11 May 2026 01:00:31 +0000
asID:                     812
IP address blocks:        24.137.48.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/05279918-f5b1-43f7-9748-95aa0c6469f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/05279918-f5b1-43f7-9748-95aa0c6469f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:cf:d7:32:10:34:05:0c:e9:b4:be:55:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05279918-f5b1-43f7-9748-95aa0c6469f3
        Validity
            Not Before: Feb 10 02:00:31 2026 GMT
            Not After : May 11 01:00:31 2026 GMT
        Subject: CN=15d621bf-c6db-4eee-a15c-d9c6deae6646
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:2d:a3:91:94:cd:41:bc:48:73:96:31:10:d0:
                    80:83:49:60:f1:99:ec:1c:66:78:07:d3:49:4b:8a:
                    e6:8f:0d:e3:94:53:93:40:f6:27:c4:33:cc:a1:fe:
                    3e:a0:d8:da:44:e8:d5:ef:5d:14:ea:b8:05:6c:7f:
                    bd:bd:55:21:3e:5c:e5:27:e4:21:49:1e:c9:eb:bb:
                    90:c4:c5:dd:df:97:a3:16:e8:23:b4:df:ed:f1:d3:
                    69:2f:90:c6:5b:dd:ca:02:6f:f8:2e:06:d1:ef:2b:
                    77:b1:4b:a8:ab:a0:08:76:bd:ba:7c:3d:d6:24:ed:
                    3d:8d:42:61:f4:cf:36:56:bd:51:0e:eb:b9:4c:34:
                    d4:77:c6:10:28:7e:88:b8:92:a2:38:43:f8:69:69:
                    aa:3f:7f:e9:40:ab:55:88:e7:b5:7a:30:34:e5:d3:
                    65:28:60:6d:58:81:60:56:62:90:cf:75:9a:3e:89:
                    e1:cd:22:7e:fb:2c:6a:f0:0b:57:df:80:39:f9:7c:
                    8f:13:96:3e:7e:ca:be:1f:b6:e5:2c:45:43:41:cc:
                    fe:67:de:ad:cb:74:79:c9:a8:10:71:a9:f3:c0:2e:
                    dc:ac:4c:b2:1f:3a:a8:61:f9:d4:2b:19:e4:3b:1d:
                    2a:75:e6:a8:de:a9:b5:f1:01:aa:fd:6d:33:a6:e1:
                    12:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:66:90:9F:50:06:30:B7:4C:61:9D:B5:57:C5:C3:58:B0:62:66:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/cdaa2df5-c231-3499-8475-c51e6b98bc5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/05279918-f5b1-43f7-9748-95aa0c6469f3.crl

            X509v3 Authority Key Identifier:
                keyid:72:01:F5:88:07:5E:64:C9:E9:00:F6:1F:3F:6B:AD:F0:DC:C2:CF:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.137.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ca:52:70:f0:c3:88:bd:d8:cc:4d:04:a7:84:6b:dc:1a:70:74:
         ba:c9:8e:5c:61:cf:1d:f7:e8:fd:e1:c3:dd:ab:65:fd:0c:d5:
         19:8c:03:ee:6e:13:86:1b:45:60:f6:60:71:46:0e:b0:d2:b7:
         64:97:1b:5f:14:81:89:d2:89:42:94:c0:31:7e:1d:d9:d0:91:
         52:92:08:1c:1d:f2:c1:3e:6b:40:1e:0e:76:eb:86:92:50:f8:
         6c:f3:7c:0c:cf:e8:cd:ea:b1:af:50:c2:0c:5c:d3:57:1c:28:
         3c:40:73:e5:d5:08:7a:36:67:6c:30:5c:23:7b:5d:62:a4:e1:
         5d:4a:b7:67:d9:ff:20:04:64:45:96:9d:00:f4:05:79:a8:84:
         2f:01:d7:ee:c5:5c:c6:cd:a6:bb:0a:e9:ec:36:7e:b9:29:dd:
         94:93:46:f9:73:39:f5:b5:ba:73:d9:37:e4:fc:9b:83:f1:cd:
         a3:fc:62:28:65:ce:9c:ff:5e:74:f9:0e:48:57:b9:0b:d0:42:
         f9:d4:5d:e2:32:74:22:6d:d6:f0:8f:ea:2a:98:6b:e2:9f:19:
         af:31:39:85:75:3c:97:2b:c0:6a:c9:7c:a0:05:5b:93:62:a1:
         8c:b8:e4:95:4a:42:c6:42:11:7a:8d:f4:b7:61:3f:75:4a:10:
         11:03:25:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:30:58 2026 by rpki-client