Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/38fa5c90-5602-3d17-9831-6b87f1e7c396.roa
File:                     38fa5c90-5602-3d17-9831-6b87f1e7c396.roa (raw, json)
Hash identifier:          wpWJb0qUEre7iuUV2YSg3h7LPuaPvGwQcE7KWZDVPDI=
Subject key identifier:   DC:78:09:BB:91:B7:4C:C4:38:DB:26:E6:82:85:95:E7:25:67:07:D6
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584CEA5CD2FC1C87D5F43839BB80
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/38fa5c90-5602-3d17-9831-6b87f1e7c396.roa
Signing time:             Thu 19 Feb 2026 14:00:40 +0000
ROA not before:           Thu 19 Feb 2026 14:00:40 +0000
ROA not after:            Wed 20 May 2026 13:00:40 +0000
asID:                     20001
IP address blocks:        69.58.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ea:5c:d2:fc:1c:87:d5:f4:38:39:bb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Feb 19 14:00:40 2026 GMT
            Not After : May 20 13:00:40 2026 GMT
        Subject: CN=bf496cc4-61f4-47be-a897-d8084d171871
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:6b:dd:e9:f8:51:48:9b:7a:21:fc:ba:fb:66:
                    dd:9c:57:2f:fe:c1:1a:02:31:95:43:94:d5:5d:e9:
                    61:3d:16:0c:b8:5c:6c:4d:27:f8:11:c1:63:05:e0:
                    32:5c:0b:79:56:81:cb:fe:39:25:5e:73:08:82:55:
                    0b:fa:55:32:35:3b:c6:ad:50:35:c4:1d:ba:89:7a:
                    ba:f1:9a:17:eb:cc:0f:2a:d8:64:a3:0f:de:f9:7e:
                    2b:85:f8:cb:8f:52:08:49:ef:0e:ef:b8:73:95:0f:
                    85:95:0d:c6:9c:2c:34:bf:35:98:26:0c:ea:06:e7:
                    b8:9a:e0:a3:3d:1f:2b:fc:86:4b:17:28:2d:5e:da:
                    a4:62:9a:8c:01:1f:67:ea:54:bb:c9:35:ab:29:07:
                    88:ee:eb:b8:59:c5:f5:db:7a:ff:49:9b:7b:51:fb:
                    64:41:27:54:72:f7:00:6f:55:42:0b:35:b3:65:af:
                    0c:a1:b5:5d:30:0b:cb:f8:19:a0:30:e2:2c:92:35:
                    6e:1e:4b:05:71:88:ee:05:b0:80:67:5e:ab:02:be:
                    c3:86:56:d4:b9:66:f3:7a:65:92:9e:e0:70:d6:05:
                    56:f1:35:a6:df:31:01:82:f9:ce:65:b3:a3:7c:5f:
                    9a:4e:15:49:1c:ae:5e:22:c0:af:b6:7f:d5:e3:3b:
                    e8:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:78:09:BB:91:B7:4C:C4:38:DB:26:E6:82:85:95:E7:25:67:07:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/38fa5c90-5602-3d17-9831-6b87f1e7c396.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.58.77.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e0:df:f1:1d:52:77:80:60:a2:79:e2:31:59:eb:99:36:00:9c:
         75:65:b8:7f:9f:7c:c0:64:f9:4d:19:49:39:c9:73:16:68:17:
         e9:5c:18:ba:dc:35:c6:ff:e8:57:03:36:ad:ea:81:1f:a6:32:
         44:27:d9:0e:5e:c5:5b:c4:15:99:e2:a3:c3:cd:4d:d4:fd:8c:
         16:61:09:6d:35:f4:cb:16:94:8a:90:a8:d4:d7:47:80:ef:1e:
         a1:74:19:19:d6:eb:07:18:f0:46:78:b0:df:98:fb:2e:09:6e:
         3a:5c:ae:1f:a1:ca:0e:e4:6d:23:6c:de:cd:90:51:bd:70:09:
         b2:b9:17:c4:02:93:9d:14:e1:7a:5d:cb:e0:5f:5d:f7:38:6a:
         99:b4:9d:d7:22:53:ba:58:a9:3e:64:04:c3:48:27:a7:cb:98:
         a1:c8:f7:64:a3:03:29:76:c2:d3:9c:51:de:86:4c:ac:a5:7f:
         84:47:a6:c1:ae:fc:b1:a3:d9:89:e6:a0:5e:60:a3:ad:d8:be:
         c0:b9:a9:15:15:42:4f:c7:6b:46:23:ad:43:e7:af:2e:12:36:
         69:9f:65:fd:78:91:17:c5:93:e9:68:91:7d:e1:e9:92:4c:3d:
         b6:9d:2b:66:e4:b1:ef:0b:e5:67:6b:1c:a6:aa:cd:a8:9c:aa:
         e0:d9:cb:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:46:13 2026 by rpki-client