Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d79b6adb-b58c-4bcf-9efb-2f60caa1d4ed/2e76c261-fdad-3290-a47c-70e64b04cc41.roa
File:                     2e76c261-fdad-3290-a47c-70e64b04cc41.roa (raw, json)
Hash identifier:          j9eqYMTA3NSt9HRXteGgSXJ3MDvom/ElSFqkD43bcTg=
Subject key identifier:   9A:C6:77:8A:89:D4:E1:B4:B6:1C:BE:A6:AC:A0:7F:E3:D4:97:B4:99
Certificate issuer:       /CN=d79b6adb-b58c-4bcf-9efb-2f60caa1d4ed
Certificate serial:       010D0C9F4328584CF2BCE17608A9138E88074970
Authority key identifier: 2F:F7:BD:CB:F6:81:8B:78:85:D8:33:81:75:70:E4:2D:F3:A5:F6:5D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d79b6adb-b58c-4bcf-9efb-2f60caa1d4ed.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d79b6adb-b58c-4bcf-9efb-2f60caa1d4ed/2e76c261-fdad-3290-a47c-70e64b04cc41.roa
Signing time:             Sun 22 Feb 2026 14:00:41 +0000
ROA not before:           Sun 22 Feb 2026 14:00:41 +0000
ROA not after:            Sat 23 May 2026 13:00:41 +0000
asID:                     396982
IP address blocks:        199.250.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d79b6adb-b58c-4bcf-9efb-2f60caa1d4ed/d79b6adb-b58c-4bcf-9efb-2f60caa1d4ed.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d79b6adb-b58c-4bcf-9efb-2f60caa1d4ed/d79b6adb-b58c-4bcf-9efb-2f60caa1d4ed.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d79b6adb-b58c-4bcf-9efb-2f60caa1d4ed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f2:bc:e1:76:08:a9:13:8e:88:07:49:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d79b6adb-b58c-4bcf-9efb-2f60caa1d4ed
        Validity
            Not Before: Feb 22 14:00:41 2026 GMT
            Not After : May 23 13:00:41 2026 GMT
        Subject: CN=7898e487-b8b4-4c5b-98da-3a2d1a3df91f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:22:d5:b9:8d:7b:a1:9c:c8:4c:d6:d7:e5:e3:
                    83:9c:b4:bd:c1:ed:83:08:07:ab:e6:97:26:24:f0:
                    da:b8:4c:64:08:0f:78:f9:83:9b:82:ee:16:48:34:
                    b8:1f:ef:1a:e8:04:a6:54:e0:f8:a1:22:20:e3:a2:
                    59:72:38:e2:54:a2:57:cb:61:98:76:99:04:85:c3:
                    89:9d:0a:54:6b:c6:de:9e:12:c6:81:95:56:1d:fa:
                    08:18:a1:c8:cf:11:97:9e:97:49:67:cd:ec:58:e5:
                    db:f8:2a:d7:2f:86:0e:a7:74:f9:b0:2f:7a:11:85:
                    52:d6:f4:3f:27:77:e0:03:81:1c:eb:6e:bf:e2:a6:
                    ce:d0:71:5e:d0:ae:84:61:81:ac:28:5d:67:99:0b:
                    2f:69:a8:c1:7c:2c:c2:76:ef:dc:78:51:d5:a5:60:
                    e1:d5:99:ac:8e:df:29:b3:3f:77:58:91:4f:bf:92:
                    41:94:b4:09:a6:4c:9b:88:9d:72:50:74:6e:e0:12:
                    53:ea:75:a3:0a:28:24:91:49:77:b5:72:3c:ca:52:
                    79:8c:85:de:f2:75:e9:c0:02:1d:eb:45:95:38:a6:
                    8a:2f:17:24:0e:f4:55:61:85:70:94:2d:a1:28:8d:
                    37:36:cb:ec:78:b4:90:c6:90:a1:41:27:9f:e3:2a:
                    6a:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:C6:77:8A:89:D4:E1:B4:B6:1C:BE:A6:AC:A0:7F:E3:D4:97:B4:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d79b6adb-b58c-4bcf-9efb-2f60caa1d4ed/2e76c261-fdad-3290-a47c-70e64b04cc41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d79b6adb-b58c-4bcf-9efb-2f60caa1d4ed/d79b6adb-b58c-4bcf-9efb-2f60caa1d4ed.crl

            X509v3 Authority Key Identifier:
                keyid:2F:F7:BD:CB:F6:81:8B:78:85:D8:33:81:75:70:E4:2D:F3:A5:F6:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d79b6adb-b58c-4bcf-9efb-2f60caa1d4ed.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.250.249.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:9f:ce:9b:e3:62:e7:9c:2d:f7:d8:82:16:41:1b:e8:28:01:
         62:b6:8d:c0:f8:e5:46:a0:8c:be:d3:59:3a:3f:ab:8d:30:e4:
         9e:f4:71:e9:f0:ac:14:e5:62:9a:25:c2:92:2e:68:6c:1b:68:
         db:98:24:4b:04:39:d1:d9:13:06:1b:b8:00:c7:ab:f2:04:43:
         bb:8c:bd:09:62:a4:6e:f5:74:78:8c:d5:45:26:a1:72:ab:33:
         7b:22:a0:e4:98:cc:43:ca:61:2b:ea:6a:ed:29:52:58:15:b9:
         3b:f6:1f:10:6a:0c:fa:1d:3f:75:f1:71:c4:e8:0a:01:b1:e5:
         99:9b:82:89:86:60:f2:ea:81:61:b1:1d:a0:06:08:d4:c3:43:
         cf:7c:18:8c:0b:78:a4:db:eb:cd:b2:c4:df:03:cb:d7:2c:ef:
         67:7e:09:31:e6:2b:53:5d:67:32:a2:9c:ad:08:5c:87:c4:6e:
         03:27:33:91:d8:34:5e:12:25:20:84:cf:6d:90:21:d5:0d:72:
         db:03:32:01:1d:e9:91:a3:0d:3e:3a:30:3e:12:57:52:20:c4:
         44:7d:d7:b3:0b:9f:e2:15:9e:0d:77:0a:47:7e:b8:5e:ec:63:
         c2:6a:7f:7b:a8:07:7c:e2:05:62:ba:9a:aa:94:69:38:4c:00:
         ba:62:9f:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:51:01 2026 by rpki-client