Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9/74f562d4-913b-3843-9e3d-f9f26ec3da09.roa
File:                     74f562d4-913b-3843-9e3d-f9f26ec3da09.roa (raw, json)
Hash identifier:          M1BxhLU8f1Atex+Pqv0e4D4acaJ05HZXfFdCD1/ygsg=
Subject key identifier:   73:7F:E1:64:50:91:E5:6C:CE:10:3C:4C:E6:EB:20:26:77:60:DE:BE
Certificate issuer:       /CN=e7ade0d6-df84-4816-a5cf-cf568498fce9
Certificate serial:       010D0C9F4328584CE4C77BAD0C14F37D2A64BC40
Authority key identifier: 8A:A8:CE:31:8E:6C:68:6F:13:B2:21:E5:F7:8D:49:0F:E7:6E:89:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9/74f562d4-913b-3843-9e3d-f9f26ec3da09.roa
Signing time:             Tue 17 Feb 2026 14:00:41 +0000
ROA not before:           Tue 17 Feb 2026 14:00:41 +0000
ROA not after:            Mon 18 May 2026 13:00:41 +0000
asID:                     26057
IP address blocks:        168.238.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9/e7ade0d6-df84-4816-a5cf-cf568498fce9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9/e7ade0d6-df84-4816-a5cf-cf568498fce9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e4:c7:7b:ad:0c:14:f3:7d:2a:64:bc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7ade0d6-df84-4816-a5cf-cf568498fce9
        Validity
            Not Before: Feb 17 14:00:41 2026 GMT
            Not After : May 18 13:00:41 2026 GMT
        Subject: CN=f21322c6-ccab-44b3-8eb9-db82a674fd22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:c8:ef:e3:7f:ff:35:bd:43:a9:79:de:57:d2:
                    d1:13:d2:94:c0:4a:5a:f1:df:af:36:95:7b:e5:2f:
                    ff:67:f0:27:81:7f:6b:7e:54:a4:34:e6:98:dc:8b:
                    0d:a8:c7:f1:11:d9:cb:c8:4c:b7:e3:c9:52:ce:4f:
                    45:0c:42:f7:47:20:95:4e:6d:60:4c:de:8b:3a:ff:
                    9c:cd:61:f6:7a:52:24:0f:b6:b1:a3:b6:98:90:ee:
                    c5:8f:95:67:02:74:dc:28:cd:e0:ac:27:29:48:50:
                    9c:ee:bc:4a:c7:cc:ec:40:4a:d9:c5:3b:7f:c0:4a:
                    50:04:fe:48:a7:29:4d:cc:dc:e8:48:7e:86:11:61:
                    5e:43:65:80:36:1d:93:7b:d2:5b:bd:07:eb:24:02:
                    f3:0e:4d:74:7c:41:8f:03:ef:d7:78:c4:cc:e9:5a:
                    1b:24:f7:d6:f9:4f:d4:0c:62:40:67:68:67:dd:c0:
                    d6:23:6c:6c:fe:fb:af:27:6d:01:e6:9b:d2:ed:4b:
                    4a:ae:f4:8e:f9:48:b4:2d:12:42:f7:9c:9e:0b:20:
                    49:72:5f:3f:e3:03:15:9c:8c:c6:fe:bc:bb:5e:bb:
                    c6:db:86:bc:07:8f:ed:7c:56:5e:c9:7c:a1:62:40:
                    b7:32:87:c6:f4:47:03:a5:55:35:fb:48:fc:4a:8b:
                    27:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:7F:E1:64:50:91:E5:6C:CE:10:3C:4C:E6:EB:20:26:77:60:DE:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9/74f562d4-913b-3843-9e3d-f9f26ec3da09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9/e7ade0d6-df84-4816-a5cf-cf568498fce9.crl

            X509v3 Authority Key Identifier:
                keyid:8A:A8:CE:31:8E:6C:68:6F:13:B2:21:E5:F7:8D:49:0F:E7:6E:89:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.238.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:a2:6e:05:6d:ba:9f:9f:13:65:57:09:90:c6:47:b2:29:81:
         c5:24:ac:36:e7:51:70:00:31:b4:69:d7:f2:0e:20:fe:60:61:
         1a:7b:b7:e8:5c:53:c3:ba:3d:75:20:42:d5:10:82:7c:57:1a:
         c8:fe:51:c4:a6:23:0c:f8:99:94:2c:aa:cc:ad:12:0f:a9:0b:
         f2:8b:9d:97:f1:3e:41:7c:82:89:de:fb:ee:f8:08:f6:a6:fc:
         5b:aa:a0:43:ff:55:70:c2:25:25:5a:47:ba:7d:45:7d:c9:12:
         02:70:55:bd:66:24:9d:bf:3d:5c:55:8d:a7:34:7a:4a:49:fb:
         0f:2e:d0:29:0e:ad:0f:50:1b:94:21:c1:fe:d9:d3:68:b9:f0:
         70:f9:1d:fc:ed:2e:b6:56:7f:e3:fa:b7:f5:b9:40:22:7c:ef:
         a8:2f:91:6a:1d:d4:38:a2:1c:71:28:2a:94:5d:ba:e6:48:3a:
         7d:d3:d0:a4:5d:24:e7:76:1b:a1:dd:72:44:0f:84:a5:6d:01:
         3d:f1:73:c3:60:d5:c6:3e:0c:0b:4a:53:94:e0:d7:0b:f0:af:
         a2:30:0f:24:01:23:14:62:a2:68:9c:80:21:90:ae:b5:f5:4e:
         2e:a2:31:5e:9e:a0:e2:a8:ab:68:03:e9:7d:5a:30:ca:57:87:
         04:d3:64:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:55:04 2026 by rpki-client