Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/2c9318b3-c8ba-354a-92a1-16c138da49bd.roa
File:                     2c9318b3-c8ba-354a-92a1-16c138da49bd.roa (raw, json)
Hash identifier:          IxnKyuNn9iRVTAJyI5wxY7PfTEDsPn277E+9aGkh9ws=
Subject key identifier:   2A:19:8E:39:DF:41:44:DF:11:0B:61:4B:35:64:7F:F0:1D:53:FC:05
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584CEA5CD23BAA41CC03CA238480
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/2c9318b3-c8ba-354a-92a1-16c138da49bd.roa
Signing time:             Thu 19 Feb 2026 14:00:40 +0000
ROA not before:           Thu 19 Feb 2026 14:00:40 +0000
ROA not after:            Wed 20 May 2026 13:00:40 +0000
asID:                     20001
IP address blocks:        69.58.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ea:5c:d2:3b:aa:41:cc:03:ca:23:84:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Feb 19 14:00:40 2026 GMT
            Not After : May 20 13:00:40 2026 GMT
        Subject: CN=8414713b-21cb-4888-85a2-1c9e50f07e27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:2c:12:f4:a1:c0:0b:42:d1:81:cc:4d:ee:7b:
                    97:00:9f:22:fb:70:72:dd:7b:93:95:a5:a8:3c:82:
                    46:2f:22:85:98:eb:f5:db:c0:a7:62:03:bb:d2:e5:
                    73:3c:63:91:48:7f:41:14:7c:5d:01:a1:d1:ff:81:
                    d1:61:33:97:16:e4:f3:b2:e4:18:56:d1:78:6f:8b:
                    e7:c1:af:c8:10:cb:f1:db:5a:28:e9:53:e5:13:5e:
                    f8:f1:74:98:d1:e7:19:01:36:37:47:f7:e5:b9:a8:
                    00:6c:5c:11:fc:ad:9f:cd:8a:7b:bb:db:ab:91:95:
                    24:5d:68:bc:9c:2f:0d:aa:6f:fd:fb:6d:e3:f2:bd:
                    57:72:33:15:71:77:2a:00:c7:88:55:cc:16:74:9f:
                    da:3c:bf:34:fe:a6:80:75:0c:c2:3a:12:cc:6d:6e:
                    22:bf:74:d6:13:55:f7:cf:88:97:81:53:58:14:89:
                    fa:21:82:87:2e:42:97:df:00:6e:ce:30:05:55:87:
                    00:04:a0:c3:09:38:ac:16:b4:de:e9:37:9c:36:42:
                    d5:3c:30:99:b7:d7:e9:d2:14:9d:81:89:d1:bc:a7:
                    c8:ff:a8:64:52:9e:75:7c:48:52:9d:a7:e4:30:0e:
                    b3:fe:fe:fd:60:fa:b1:a7:19:83:b9:61:eb:a6:cb:
                    ee:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:19:8E:39:DF:41:44:DF:11:0B:61:4B:35:64:7F:F0:1D:53:FC:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/2c9318b3-c8ba-354a-92a1-16c138da49bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.58.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:dc:bb:a2:30:29:00:7b:e0:10:5f:72:2f:59:a4:97:d2:90:
         2d:eb:be:b4:20:58:41:3c:d5:25:85:1d:10:13:96:c7:9b:9f:
         cb:45:a7:ca:33:5b:33:60:16:08:67:1e:f7:6f:6e:61:25:78:
         22:ba:ea:89:06:09:e4:b6:59:9f:e0:6a:cb:bd:a9:9d:5e:66:
         63:ab:cd:4d:91:67:10:51:b8:d4:bf:73:ec:e1:b8:15:38:b6:
         cf:fd:3d:42:78:83:f8:e8:e4:20:91:0e:56:0b:04:08:92:29:
         e3:86:31:cd:b2:71:8e:7a:6e:72:a0:91:97:41:49:b4:50:d4:
         ec:6d:c6:91:0e:61:b8:84:22:65:86:5f:b3:a5:47:b3:67:4b:
         7f:c3:eb:80:29:14:7e:35:31:24:c0:1c:91:2e:a4:ea:91:2d:
         30:ac:cd:b4:79:b5:f3:61:e5:c9:16:d8:60:ae:a9:f9:4b:93:
         2f:7c:6d:e1:3f:81:b9:94:59:e8:16:aa:5a:d2:d3:d8:c8:87:
         5b:ce:63:41:86:ae:08:4b:88:0b:96:f5:10:dc:e8:16:26:f7:
         33:96:18:c2:5b:37:d2:e3:51:35:78:15:c0:b4:de:5e:f0:a9:
         fc:d1:d6:53:c2:2d:64:48:ae:03:39:ac:f8:e9:e1:cc:f9:22:
         bb:1d:69:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:48:41 2026 by rpki-client