Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/39993af2-98b1-47da-a218-47109f41cb97/2512d839-7186-386d-951f-497f9c5ad2ba.roa
File:                     2512d839-7186-386d-951f-497f9c5ad2ba.roa (raw, json)
Hash identifier:          BSikPv50YBClhkWwUXirV8xrYt5VoPf1D+w75OKquY8=
Subject key identifier:   53:AC:88:AE:B0:0E:16:44:E2:7A:3F:8E:A7:E6:DC:88:B6:68:D5:B0
Certificate issuer:       /CN=39993af2-98b1-47da-a218-47109f41cb97
Certificate serial:       010D0C9F4328584CC8DC96DCB59FA75BFBE3FC00
Authority key identifier: 12:D9:FD:69:DE:67:DD:AB:84:4D:8C:72:61:39:2F:F6:D2:4F:76:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/39993af2-98b1-47da-a218-47109f41cb97.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/39993af2-98b1-47da-a218-47109f41cb97/2512d839-7186-386d-951f-497f9c5ad2ba.roa
Signing time:             Sat 07 Feb 2026 14:00:41 +0000
ROA not before:           Sat 07 Feb 2026 14:00:41 +0000
ROA not after:            Fri 08 May 2026 13:00:41 +0000
asID:                     4150
IP address blocks:        192.236.28.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/39993af2-98b1-47da-a218-47109f41cb97/39993af2-98b1-47da-a218-47109f41cb97.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/39993af2-98b1-47da-a218-47109f41cb97/39993af2-98b1-47da-a218-47109f41cb97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/39993af2-98b1-47da-a218-47109f41cb97.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c8:dc:96:dc:b5:9f:a7:5b:fb:e3:fc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39993af2-98b1-47da-a218-47109f41cb97
        Validity
            Not Before: Feb  7 14:00:41 2026 GMT
            Not After : May  8 13:00:41 2026 GMT
        Subject: CN=443f5510-06be-4435-a902-e2692516870c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:0d:38:6d:69:54:fa:aa:ff:80:88:ae:61:15:
                    25:ae:45:98:62:22:e8:8c:bc:64:12:11:30:d0:46:
                    19:9e:36:2c:7f:0b:60:f6:2d:f7:21:5b:85:61:8f:
                    c8:13:8d:3c:5e:1b:b4:0e:cd:34:39:19:7e:3b:51:
                    1b:a2:50:d1:fd:ff:57:09:c5:53:8d:74:21:13:d1:
                    06:ee:29:c6:71:61:d6:ba:a6:5f:5d:6a:99:da:01:
                    6e:06:9f:95:54:f8:59:06:db:05:29:3b:9c:8d:41:
                    58:e9:ef:c1:e8:54:9f:1f:74:50:bc:1f:02:8b:44:
                    0f:0b:99:68:c7:c9:7e:4c:0a:ba:7f:be:da:ee:11:
                    d1:0e:2d:2f:4f:ea:e5:fc:18:e8:8c:60:d5:e5:b5:
                    7c:57:a9:35:6c:66:f3:d5:e4:3d:a3:b0:f3:89:73:
                    f3:a7:bb:64:df:8d:c9:3b:ae:43:b7:08:a7:c9:a1:
                    96:4e:79:73:cc:5d:9a:8e:95:4b:c0:fe:bb:c8:ac:
                    06:07:bf:21:c2:85:b2:21:f4:91:4f:b7:87:c8:0d:
                    da:cc:05:90:84:97:76:d9:c0:b3:f1:4a:45:5d:83:
                    53:d1:65:11:16:df:68:5e:9d:b1:7e:99:16:2f:da:
                    f2:f8:a4:2f:fe:fa:bc:d9:9e:4b:5e:d4:2f:8d:75:
                    54:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:AC:88:AE:B0:0E:16:44:E2:7A:3F:8E:A7:E6:DC:88:B6:68:D5:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/39993af2-98b1-47da-a218-47109f41cb97/2512d839-7186-386d-951f-497f9c5ad2ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/39993af2-98b1-47da-a218-47109f41cb97/39993af2-98b1-47da-a218-47109f41cb97.crl

            X509v3 Authority Key Identifier:
                keyid:12:D9:FD:69:DE:67:DD:AB:84:4D:8C:72:61:39:2F:F6:D2:4F:76:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/39993af2-98b1-47da-a218-47109f41cb97.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.236.28.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:26:cc:4e:d2:18:01:80:af:38:cd:c4:4e:11:c1:21:50:8b:
         7b:f5:d6:0b:b9:f6:ac:a2:dd:4a:0e:aa:cc:05:cc:72:17:54:
         b8:0b:39:e2:2c:b2:15:e8:21:a6:a4:d3:e9:6c:99:54:4d:b8:
         73:44:13:98:cf:c4:67:ba:50:7d:81:75:14:2d:0a:fd:a6:e2:
         f4:db:42:21:0a:13:e3:72:b0:7e:27:61:e5:de:de:b3:39:02:
         c1:79:db:04:96:31:e9:d9:56:05:7f:0f:63:0a:77:72:f2:58:
         f0:35:7e:60:83:cb:30:63:b5:7f:9b:a0:30:b6:67:4a:86:f9:
         46:fe:74:2e:dc:80:53:eb:fe:f1:83:16:5b:a9:c8:e1:08:be:
         41:80:77:68:fc:d4:68:67:f7:d3:34:9a:8c:5b:f8:4b:bc:a4:
         21:69:c6:7d:16:87:ac:b9:b4:c7:6e:e2:f0:7a:40:57:9c:90:
         d2:24:29:6b:54:f7:72:1c:5c:71:fe:d0:b0:e4:31:3d:31:e6:
         40:9c:ad:eb:ac:1b:99:af:32:f5:d6:67:3b:fd:c5:32:a0:94:
         b3:ec:17:2b:91:99:5d:dc:31:55:20:40:f5:e6:ed:d8:36:b7:
         43:8a:41:e9:b1:c9:d1:a9:e0:bc:ed:2b:15:4a:d1:57:57:46:
         10:94:86:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:41:28 2026 by rpki-client