Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/7d5e385a-2e24-3deb-ad85-ed9ad58a023c.roa
File:                     7d5e385a-2e24-3deb-ad85-ed9ad58a023c.roa (raw, json)
Hash identifier:          pdTGI+WaKw2egn5mktT/0bExwnxcGFzIapPwzI/vguo=
Subject key identifier:   71:1C:B5:8E:A7:41:25:DA:8B:32:BD:E6:A2:51:B9:A7:55:78:0E:47
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584CEA5CF36358AF4E7BADD4C680
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/7d5e385a-2e24-3deb-ad85-ed9ad58a023c.roa
Signing time:             Thu 19 Feb 2026 14:00:40 +0000
ROA not before:           Thu 19 Feb 2026 14:00:40 +0000
ROA not after:            Wed 20 May 2026 13:00:40 +0000
asID:                     21
IP address blocks:        128.1.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ea:5c:f3:63:58:af:4e:7b:ad:d4:c6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Feb 19 14:00:40 2026 GMT
            Not After : May 20 13:00:40 2026 GMT
        Subject: CN=9a9a86eb-e9ab-4766-96a3-4333bf8a1f19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:18:e4:68:10:1b:b5:76:56:43:9c:9c:07:4b:
                    d0:01:3c:ea:d2:ec:87:99:d8:7c:18:6f:f2:34:66:
                    20:73:68:74:cf:25:14:71:d7:70:3e:39:15:94:54:
                    60:fa:cd:92:bd:a2:7b:4e:2b:ae:c7:03:47:99:56:
                    dd:85:b9:fc:24:b8:bb:be:50:83:c1:84:6c:9b:9c:
                    75:b2:66:fe:71:99:9a:39:50:a4:da:84:c6:3d:46:
                    f1:ff:1f:78:93:31:69:14:2b:d7:87:ab:e4:71:ac:
                    1c:82:cf:ad:66:c7:b0:38:b3:cd:f6:77:10:3f:e9:
                    01:56:10:d6:b9:cb:92:84:0c:c5:45:84:2a:62:71:
                    c6:c4:78:fc:e1:c3:67:8c:bd:6c:99:72:f6:66:78:
                    bb:91:81:95:e7:31:cb:44:5d:25:bb:1c:f3:6f:92:
                    50:81:a5:d2:1b:c0:49:1c:7e:b9:9f:7a:00:b8:a9:
                    ba:c8:e9:fa:78:55:1c:99:b5:52:7a:3a:d7:10:7e:
                    e3:67:c2:68:e9:58:ed:7a:fb:52:a2:50:bc:6f:9f:
                    e7:d0:6c:3e:6d:c3:b3:ee:ba:bc:92:3c:3f:05:b3:
                    2e:90:4a:99:26:ee:1d:f4:7a:ed:30:15:b7:cc:cb:
                    03:a7:66:26:46:ce:0a:0e:26:f1:7b:db:e1:33:27:
                    71:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:1C:B5:8E:A7:41:25:DA:8B:32:BD:E6:A2:51:B9:A7:55:78:0E:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/7d5e385a-2e24-3deb-ad85-ed9ad58a023c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.1.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:b2:0e:22:e3:28:81:ef:0c:ba:23:ba:4a:4a:f8:d7:a6:24:
         da:b5:1e:84:94:34:b3:6b:dc:df:cf:1c:76:55:0d:ec:a6:a0:
         99:36:c8:09:98:bb:30:55:f0:d6:17:31:0f:5c:8c:ff:07:61:
         d9:22:90:29:82:1f:c9:9c:b1:b7:45:60:91:64:90:70:f5:95:
         cd:fa:69:ef:56:c8:a0:54:77:1e:bd:25:fc:4a:a3:cd:03:13:
         67:4c:44:6b:86:0c:bf:b8:29:69:b6:2c:70:9f:b4:96:45:59:
         1d:f0:c4:e6:75:25:04:8b:74:7a:9d:21:1f:d8:42:28:d5:d1:
         76:8b:c0:70:ae:03:d8:33:ad:d5:0e:e3:42:4e:fd:e5:a7:28:
         4e:da:96:3a:b5:c1:a4:f2:b8:71:9d:50:5c:75:21:09:4a:85:
         cd:49:ab:18:c8:1e:b8:1e:ee:52:c5:58:4b:a6:01:7e:dc:13:
         ed:aa:04:d5:a6:f0:cc:77:03:1a:41:cd:c9:1d:0a:cf:17:69:
         c8:23:7a:0f:51:d9:37:4b:1e:75:3c:c2:e3:a5:55:9d:08:06:
         45:a9:c0:61:af:36:b1:07:f1:e3:f8:7e:70:2d:5c:8e:1a:03:
         b9:de:8f:df:3c:c6:a2:41:77:02:1a:32:66:c7:5c:ef:6f:65:
         c2:e0:b8:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:41:43 2026 by rpki-client