Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/e3abeb99-347c-37be-89ea-532035306a14.roa
File:                     e3abeb99-347c-37be-89ea-532035306a14.roa (raw, json)
Hash identifier:          qAsYz5OD8DolTcfC6eDE9CnHqvJhvZm92Fx5l5dXV5E=
Subject key identifier:   D4:1F:AA:1A:FD:EC:24:49:76:C9:DC:F0:B6:E8:D3:2F:AD:F2:2C:DB
Certificate issuer:       /CN=05279918-f5b1-43f7-9748-95aa0c6469f3
Certificate serial:       010D0C9F4328584CE36225AC09A2E9A191ABEF40
Authority key identifier: 72:01:F5:88:07:5E:64:C9:E9:00:F6:1F:3F:6B:AD:F0:DC:C2:CF:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/e3abeb99-347c-37be-89ea-532035306a14.roa
Signing time:             Tue 17 Feb 2026 02:00:31 +0000
ROA not before:           Tue 17 Feb 2026 02:00:31 +0000
ROA not after:            Mon 18 May 2026 01:00:31 +0000
asID:                     16509
IP address blocks:        99.210.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/05279918-f5b1-43f7-9748-95aa0c6469f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/05279918-f5b1-43f7-9748-95aa0c6469f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e3:62:25:ac:09:a2:e9:a1:91:ab:ef:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05279918-f5b1-43f7-9748-95aa0c6469f3
        Validity
            Not Before: Feb 17 02:00:31 2026 GMT
            Not After : May 18 01:00:31 2026 GMT
        Subject: CN=ade81625-4296-4f27-b6f0-50673a6aeb8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:f7:cb:e9:ad:99:bd:0e:a4:53:ed:75:e0:20:
                    5b:63:94:3a:e5:31:fc:a0:c4:53:df:83:f1:91:6e:
                    cb:70:17:46:c4:ac:40:c5:8d:a5:7f:95:e2:47:b6:
                    09:0b:d0:89:d8:74:33:82:47:08:4d:07:1e:92:d0:
                    e9:a2:7f:8c:bd:75:4c:af:9f:1f:b1:b0:9a:b4:a9:
                    51:bf:c5:bd:13:f5:1f:22:f3:fc:41:d4:aa:f1:20:
                    3f:f7:1b:e1:b3:62:92:37:bd:0e:dc:e0:7e:8e:e1:
                    85:ff:cd:00:8c:2e:a2:5e:da:bd:a2:ff:da:8b:f6:
                    78:db:32:de:82:ba:f3:7e:cf:12:a1:ea:25:fb:50:
                    1b:8e:b5:30:b7:9d:ad:62:1a:14:62:07:35:af:6e:
                    38:90:8f:ac:ca:52:63:0f:8a:2f:76:b6:0d:dd:aa:
                    8e:cd:d1:2d:51:11:1f:8e:4b:94:53:3e:0d:e8:85:
                    a2:b5:08:c9:3d:74:81:23:48:dc:a9:db:e4:4f:e0:
                    c6:cf:99:43:3d:b4:03:fb:fe:06:9b:35:a3:67:be:
                    ba:29:dc:43:24:20:bd:01:0a:8e:89:6a:9f:fc:fc:
                    80:74:24:ab:0a:81:dd:5f:92:7c:05:8e:3c:d1:5a:
                    6d:26:d5:bb:ac:82:93:d6:16:76:b9:12:32:85:c9:
                    9b:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:1F:AA:1A:FD:EC:24:49:76:C9:DC:F0:B6:E8:D3:2F:AD:F2:2C:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/e3abeb99-347c-37be-89ea-532035306a14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/05279918-f5b1-43f7-9748-95aa0c6469f3.crl

            X509v3 Authority Key Identifier:
                keyid:72:01:F5:88:07:5E:64:C9:E9:00:F6:1F:3F:6B:AD:F0:DC:C2:CF:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.210.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:b7:15:96:af:a3:16:b4:fd:69:43:13:e4:8f:71:91:94:18:
         77:84:39:c6:aa:d9:77:dc:51:63:cd:6b:5f:f6:84:a7:cb:b4:
         3f:f4:e9:43:e0:4e:69:b1:db:49:6e:ae:ee:8d:0a:43:b6:96:
         57:80:80:0c:07:78:ee:44:a9:a7:86:6b:9b:bc:07:7d:f5:61:
         e7:fe:bc:bc:fc:55:b1:0d:29:cf:42:87:d1:42:d1:6a:36:37:
         38:65:79:84:9c:99:a0:48:e6:54:6a:32:f9:2a:ab:50:2d:11:
         a3:83:8b:6d:7c:80:08:0f:92:98:2b:df:92:f3:34:af:35:67:
         9f:79:bc:1e:ce:e8:22:c1:4a:39:ba:7a:73:a1:61:55:e7:b5:
         2d:3f:5c:39:24:b1:a4:66:b1:5d:46:20:52:0f:2d:3b:f3:dc:
         8e:07:d9:19:76:25:51:b6:62:3e:66:91:93:62:f6:e8:a8:2d:
         b2:a5:49:54:6c:4e:ec:92:6d:1a:f8:7c:e5:39:9b:80:b6:93:
         4d:eb:db:eb:f1:ee:0b:e6:26:43:c4:77:da:4a:77:df:36:43:
         86:27:5f:ed:14:19:76:9b:45:da:3c:84:ab:5a:bc:8a:3d:f4:
         7a:ba:95:55:6b:86:60:eb:5f:8f:b8:72:0a:73:fb:e1:8b:13:
         04:f0:4c:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:57:47 2026 by rpki-client