Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ca7a5b88-c898-3224-b1d9-5657ce79e1eb.roa
File:                     ca7a5b88-c898-3224-b1d9-5657ce79e1eb.roa (raw, json)
Hash identifier:          wfJ+0I3ztHnWCmnDC7B1l/gZpBYxBXgG1VFfYG6b3WM=
Subject key identifier:   DF:E7:4F:1C:52:99:E6:F3:35:57:32:FF:A5:F1:13:AF:1B:92:65:69
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584CEA5CFED080A9389EC2474300
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ca7a5b88-c898-3224-b1d9-5657ce79e1eb.roa
Signing time:             Thu 19 Feb 2026 14:00:40 +0000
ROA not before:           Thu 19 Feb 2026 14:00:40 +0000
ROA not after:            Wed 20 May 2026 13:00:40 +0000
asID:                     20001
IP address blocks:        158.62.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ea:5c:fe:d0:80:a9:38:9e:c2:47:43:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Feb 19 14:00:40 2026 GMT
            Not After : May 20 13:00:40 2026 GMT
        Subject: CN=2d496f94-4d33-40d1-8ac3-4df0a8100a6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:68:fa:6c:16:74:2d:b4:d2:fb:2a:a3:2b:ae:
                    a1:79:45:fa:4f:87:9a:fe:e8:ff:21:50:6d:ee:41:
                    5c:cf:e4:36:ea:51:2a:2b:f6:2f:8e:6d:b4:86:d2:
                    c3:c6:6b:2e:af:03:be:6c:c7:e3:55:7d:13:1d:ac:
                    3c:5c:1b:91:2e:a7:9d:e7:19:22:fc:51:fe:65:19:
                    53:1c:c7:8b:5a:a8:b5:8c:b5:68:ae:58:f8:80:b0:
                    01:f2:62:66:d3:15:2a:9d:62:ea:8e:94:13:4c:cb:
                    2a:e0:f6:ae:e1:7a:d6:5a:6b:b4:ec:5f:bc:16:b3:
                    e0:18:e3:c1:d2:bf:f6:28:3d:76:ef:b4:6c:9c:69:
                    29:07:ff:5d:d6:75:90:2c:51:50:85:f7:75:5d:db:
                    db:b9:de:b7:ff:d9:85:41:e2:8c:2b:f2:aa:7e:98:
                    68:c7:92:21:97:31:41:bf:41:44:03:24:09:20:31:
                    87:3b:cd:ac:40:39:32:48:92:29:51:3c:03:07:08:
                    cf:98:13:c8:24:f7:9d:69:f6:17:45:99:85:75:ea:
                    e1:ea:af:80:21:a4:94:20:cd:08:b9:94:95:bf:af:
                    47:7a:85:9f:58:64:f5:78:8e:df:eb:e2:f9:8d:ae:
                    fb:81:5f:77:cc:af:2a:fc:c5:a5:d6:f6:51:29:1c:
                    fd:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:E7:4F:1C:52:99:E6:F3:35:57:32:FF:A5:F1:13:AF:1B:92:65:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ca7a5b88-c898-3224-b1d9-5657ce79e1eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.62.217.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c3:71:13:e0:17:92:9c:85:d3:d8:7d:1c:d1:79:11:57:fa:72:
         39:75:cc:51:fc:85:de:e8:c0:fa:61:e4:6d:ae:0b:14:76:9a:
         02:da:94:17:b8:92:28:d4:43:55:5c:1f:d9:de:f9:af:4e:b0:
         da:32:26:5a:7e:71:82:16:ae:b0:d8:5b:cc:03:da:f8:f6:cc:
         0c:09:97:f0:23:2e:6d:f4:b8:19:b3:ed:08:13:35:3d:97:4d:
         20:69:ab:80:4d:87:b4:f1:6f:07:54:ae:f4:a5:0f:f6:07:5f:
         d4:0f:4d:43:56:a4:4e:a6:05:65:6e:d4:d8:75:6a:74:36:3a:
         71:5c:76:10:e1:34:44:b7:7c:6b:62:5e:68:74:f9:bd:2d:55:
         0c:f6:e3:2c:33:66:fe:64:bc:f4:16:55:41:6f:a6:5d:5d:3c:
         80:be:90:6d:15:ed:56:c2:61:a8:ca:53:94:29:a1:1e:f1:63:
         3a:1f:ee:ae:50:a5:23:33:fa:18:f7:d7:41:92:39:4c:92:fd:
         89:08:ab:bf:35:4e:6d:d9:6b:66:13:56:c3:ca:1f:d6:a3:dd:
         ce:78:2e:1e:35:f8:14:a7:d2:22:88:cb:6a:c2:73:8c:9c:5f:
         63:fa:ed:61:01:f2:d4:da:e2:e2:91:c2:19:2d:f3:48:e9:b7:
         5e:a4:e6:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:10:31 2026 by rpki-client