Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ef737142-8d1e-3137-819b-6c56bdc462c4.roa
File:                     ef737142-8d1e-3137-819b-6c56bdc462c4.roa (raw, json)
Hash identifier:          /LAvqpKj9Q7sm4Ds8p9WK8DzSjGM1ceJ6EzKceaZLVY=
Subject key identifier:   E7:DC:3E:32:D6:63:54:65:9D:20:29:4A:27:60:EC:AA:57:37:6F:C8
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584CEA5CD218F93CFF8AD005D200
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ef737142-8d1e-3137-819b-6c56bdc462c4.roa
Signing time:             Thu 19 Feb 2026 14:00:40 +0000
ROA not before:           Thu 19 Feb 2026 14:00:40 +0000
ROA not after:            Wed 20 May 2026 13:00:40 +0000
asID:                     20001
IP address blocks:        209.163.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ea:5c:d2:18:f9:3c:ff:8a:d0:05:d2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Feb 19 14:00:40 2026 GMT
            Not After : May 20 13:00:40 2026 GMT
        Subject: CN=206e0a7d-8fb6-4778-9586-e9f367c3ff8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:66:c1:35:ac:aa:1b:54:6b:65:be:4d:9e:e5:
                    a2:28:6e:05:6c:74:6f:b4:4e:97:72:0c:38:01:a6:
                    7d:0f:12:ea:df:6a:68:a6:b6:fe:54:90:f1:2c:fa:
                    3f:99:e6:c5:8e:8b:cf:c1:60:7b:0d:be:59:49:87:
                    99:fe:b5:c2:88:55:d5:ce:59:9d:20:58:be:96:e8:
                    31:8c:22:84:92:63:42:69:3b:be:99:8c:0b:74:f6:
                    10:48:96:00:9c:d9:7b:18:e0:91:31:f0:4b:00:ce:
                    05:e3:31:66:3b:51:9e:f7:5e:0a:81:c6:85:92:17:
                    38:5b:d2:3c:47:cb:c1:b1:8d:4f:f8:51:fb:bc:7b:
                    b7:0a:89:ed:5f:e4:94:b5:48:35:97:b0:7a:ba:96:
                    a8:22:8c:f0:d2:18:14:f3:33:55:4b:d7:24:a8:a4:
                    1d:a8:32:94:11:ef:32:9e:65:d3:11:98:d0:79:2a:
                    16:23:57:c9:3b:31:00:08:29:8b:ea:2a:7f:e6:49:
                    17:1e:fd:32:16:f1:4b:27:45:d0:9c:5c:bf:16:57:
                    7c:28:7e:21:95:95:af:2a:4b:79:f6:4e:38:de:e3:
                    f4:c2:f9:f8:50:c6:4e:0e:52:dd:6a:0b:2e:f7:68:
                    41:f0:a3:38:b1:b7:a3:22:8c:71:04:c6:5b:ec:86:
                    6a:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:DC:3E:32:D6:63:54:65:9D:20:29:4A:27:60:EC:AA:57:37:6F:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ef737142-8d1e-3137-819b-6c56bdc462c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.163.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d1:cd:8d:4d:cb:fa:83:72:08:cc:c8:56:be:38:d1:8a:29:cf:
         e3:ab:90:46:30:04:c9:e4:e7:1c:73:20:d6:36:6b:2b:28:14:
         fd:5f:2b:25:35:41:98:a9:44:6c:72:8c:4f:60:fc:77:3b:3c:
         d0:07:e5:f5:eb:f0:56:41:0f:64:b4:fa:1c:d2:2b:5d:e0:f9:
         db:00:f5:a4:b7:55:a4:00:86:20:85:c8:c9:29:07:9f:36:e6:
         1d:40:42:42:73:79:be:26:27:80:d1:de:37:ca:db:0a:9d:6d:
         e9:c3:4f:1f:26:7d:00:83:b0:57:f0:20:e1:0e:70:00:50:01:
         0d:c6:ab:44:f7:57:34:c0:6d:52:20:15:3c:8b:24:73:29:58:
         7e:d7:4e:a7:f4:0c:89:a1:20:b0:d5:87:d9:a8:d0:31:e6:4b:
         36:94:82:15:9a:dd:79:f1:39:fd:8d:23:6e:64:6b:1a:9b:1c:
         da:f0:be:02:fe:f5:1f:b0:f8:6a:99:f5:d3:53:94:60:6b:34:
         c8:07:3c:7d:02:2f:2a:a4:8d:dc:a9:38:9f:e8:f7:a6:90:13:
         78:42:36:03:f0:5f:99:56:9b:94:d6:fb:e7:3f:0c:59:3c:c4:
         9f:37:cc:f4:a6:75:16:e5:45:f6:4f:e3:6c:ef:b5:f0:80:47:
         21:dd:96:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:01:50 2026 by rpki-client