Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/506e9b20-967c-306c-b07a-e6ee75a6aaad.roa
File:                     506e9b20-967c-306c-b07a-e6ee75a6aaad.roa (raw, json)
Hash identifier:          byHCtpAZLuzuipVVenBvBc0OsNNUQhO43JF5GP3Y/QY=
Subject key identifier:   D7:A1:F8:70:F0:F3:9F:AB:FB:CA:A7:77:76:9F:68:6B:F1:A3:9D:35
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F4328584D00B25A15008C2D489D355970
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/506e9b20-967c-306c-b07a-e6ee75a6aaad.roa
Signing time:             Fri 27 Feb 2026 14:00:40 +0000
ROA not before:           Fri 27 Feb 2026 14:00:40 +0000
ROA not after:            Thu 28 May 2026 13:00:40 +0000
asID:                     399839
IP address blocks:        149.19.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:00:b2:5a:15:00:8c:2d:48:9d:35:59:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Feb 27 14:00:40 2026 GMT
            Not After : May 28 13:00:40 2026 GMT
        Subject: CN=96d77a7d-652e-4120-85aa-e9d883f20b19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:55:35:6c:ef:97:38:e6:af:63:7c:8b:e1:c3:
                    58:93:d0:fb:a6:b7:70:37:4b:51:7e:76:72:c7:69:
                    68:fa:1e:b2:56:c2:52:53:a0:4b:ac:94:a3:23:71:
                    36:a6:c1:fb:c6:ec:4e:e0:0b:5a:43:9e:77:aa:ba:
                    8a:6a:f8:a5:8b:b1:d9:d1:66:77:a5:b1:b1:14:98:
                    0e:95:e1:4e:91:8f:94:08:ae:ec:9b:ed:6d:ce:1f:
                    e6:fe:c7:6b:65:f4:7a:31:43:64:09:e6:26:c5:94:
                    d3:35:47:f3:d5:a3:8e:28:28:0e:fd:17:6f:d2:63:
                    12:1d:8c:79:69:14:cd:96:4b:bf:45:0d:2f:9a:f6:
                    2c:fb:34:a1:d1:c6:31:ab:9a:45:08:89:5f:84:af:
                    b6:27:d8:10:68:95:ce:07:aa:1c:dc:49:55:a6:af:
                    9f:bd:52:f4:ff:b7:c0:30:8e:a0:f0:d5:e0:c0:ae:
                    4c:21:07:16:f6:7c:6f:26:9b:92:df:99:bf:81:ff:
                    7e:32:9e:c5:61:95:99:c8:04:32:69:81:54:4b:86:
                    d4:07:aa:a9:ce:66:17:b3:1f:88:e9:e1:81:87:2b:
                    3b:ce:35:2d:19:08:fe:6a:3d:bb:41:92:bd:ea:61:
                    a4:5f:c7:64:3e:9a:63:6d:7a:9e:78:59:fa:61:15:
                    60:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:A1:F8:70:F0:F3:9F:AB:FB:CA:A7:77:76:9F:68:6B:F1:A3:9D:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/506e9b20-967c-306c-b07a-e6ee75a6aaad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.19.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:c8:82:4d:17:77:4f:e7:c5:76:0b:69:ea:a8:23:44:c0:29:
         5f:88:5d:2f:b4:89:bb:c7:2b:b8:e1:9a:a8:53:66:1d:f8:70:
         3c:c1:95:5b:64:47:65:1d:a8:04:e0:b0:50:77:6e:49:80:76:
         f9:66:af:83:fc:49:76:bd:0d:a8:2f:d3:56:f3:ac:b3:8b:f2:
         cf:bb:47:db:6e:32:2c:20:a6:d9:8e:4f:98:73:28:a9:1c:da:
         a8:59:84:2c:33:97:63:46:70:4a:4a:46:58:b5:6c:17:46:df:
         52:ab:1b:70:30:c5:dc:68:0c:bb:77:58:e4:89:70:89:74:b3:
         98:24:b2:43:6a:c7:59:38:96:f8:7b:e8:b7:55:72:2e:5a:36:
         3f:08:e8:f1:0f:e4:dc:11:a0:48:78:c1:e5:2b:7b:9b:07:4b:
         b0:ef:2e:3f:5a:88:57:bf:b4:03:c1:ad:c8:8d:8a:4b:05:07:
         b0:22:ff:13:6a:57:ef:20:a7:82:45:61:98:e5:63:21:7f:10:
         ee:b0:5d:60:75:39:11:0e:68:1c:ed:7b:db:e8:3c:4c:b2:ee:
         71:df:c2:8b:04:21:a6:7d:43:7b:d0:c6:c5:28:8a:aa:7b:1c:
         49:49:10:8d:68:05:ea:70:96:f9:90:04:0b:47:b7:07:b4:41:
         18:8e:16:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:42:52 2026 by rpki-client