Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/0a10828c-39d5-3df1-9816-18a78eb1eee5.roa
File:                     0a10828c-39d5-3df1-9816-18a78eb1eee5.roa (raw, json)
Hash identifier:          eC4NZ0VK468B41x2poEfvT/d/IeooHtEyVUJxi28tqw=
Subject key identifier:   8D:F1:E2:2C:DF:80:39:FF:81:C8:A1:04:A4:C2:7B:71:8F:8B:61:3A
Certificate issuer:       /CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8
Certificate serial:       010D0C9F4328584CFC822D930C434763EC478508
Authority key identifier: DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/0a10828c-39d5-3df1-9816-18a78eb1eee5.roa
Signing time:             Thu 26 Feb 2026 02:00:32 +0000
ROA not before:           Thu 26 Feb 2026 02:00:32 +0000
ROA not after:            Wed 27 May 2026 01:00:32 +0000
asID:                     11377
IP address blocks:        216.20.24.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fc:82:2d:93:0c:43:47:63:ec:47:85:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8
        Validity
            Not Before: Feb 26 02:00:32 2026 GMT
            Not After : May 27 01:00:32 2026 GMT
        Subject: CN=43e9702e-b555-4c62-8044-8f8ac37918ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:94:fa:06:83:05:08:46:01:60:1c:7a:c9:3e:
                    77:9f:3a:52:48:80:95:45:26:bc:fb:cc:40:65:6b:
                    d3:e7:ff:01:b3:da:4d:8e:7f:45:5a:71:50:d8:d5:
                    5e:8d:51:99:fd:5c:b1:ed:a1:02:a3:60:a0:1f:68:
                    b8:5b:56:3d:26:71:5b:c1:59:c9:1b:f9:bc:87:15:
                    3f:48:ee:ea:a9:3d:c6:3b:d7:57:7b:ff:70:e9:54:
                    b1:5d:cc:fb:a7:6e:a5:7a:f3:b8:9e:2b:82:2d:d4:
                    33:e6:c9:74:35:18:3d:89:38:7b:cc:76:f0:bc:67:
                    1c:d2:92:6b:c8:cf:8e:51:d1:ee:c7:41:83:fd:b4:
                    e1:06:6e:df:f2:5e:26:ed:59:a5:f9:33:28:07:bf:
                    2b:5b:bc:d3:31:54:32:c0:2f:25:53:90:7f:68:45:
                    2f:59:7d:4b:21:4b:35:12:82:aa:cb:cf:5d:29:fe:
                    2b:46:d3:a9:54:f9:cc:ec:7b:67:ef:73:44:1c:37:
                    53:74:5f:3f:2e:47:67:7b:f4:c5:54:08:79:b0:81:
                    16:94:3c:c1:bb:ab:3b:9c:5d:52:8f:66:ca:d7:62:
                    a4:9c:14:37:da:35:b3:8b:03:c6:9f:39:90:2b:3c:
                    a7:26:a9:d5:6d:34:ad:c9:b8:ba:70:e3:da:a5:1d:
                    64:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:F1:E2:2C:DF:80:39:FF:81:C8:A1:04:A4:C2:7B:71:8F:8B:61:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/0a10828c-39d5-3df1-9816-18a78eb1eee5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl

            X509v3 Authority Key Identifier:
                keyid:DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.20.24.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:25:4b:90:ec:7d:cd:eb:6f:33:f5:d0:d1:53:68:ac:b3:52:
         ac:ff:60:8f:71:03:50:0b:1b:a1:61:b6:23:d7:dc:db:bf:ae:
         a8:91:3f:54:18:83:8c:29:66:22:2d:9e:a7:a3:82:c5:5d:0a:
         49:af:c7:15:c7:b0:c6:9f:5d:6b:37:4e:77:ec:71:d2:00:bc:
         91:fc:05:8b:f5:a9:41:a3:ce:61:64:ee:87:24:70:8d:fe:2b:
         d0:df:f7:c1:0f:86:4f:a4:17:c9:99:67:80:88:18:13:f1:b2:
         6d:e9:63:8b:07:8b:36:21:6b:b3:09:d8:66:ca:65:31:a9:2d:
         49:1c:f4:3f:98:c0:d2:02:f8:a5:46:eb:01:d8:5c:84:5d:4a:
         78:84:3b:67:03:b7:c3:90:52:5f:6a:b0:41:90:0e:13:0d:30:
         85:5d:7f:61:03:20:3e:cf:d8:5c:7b:4a:1c:e4:0d:5a:32:27:
         8e:ab:c6:7d:2d:5b:a0:78:35:f9:87:48:df:69:b1:cf:4c:5f:
         a4:eb:35:14:bd:9f:59:cf:11:63:ac:32:50:e2:d1:1d:1b:d3:
         a9:2c:04:2c:72:2f:c2:1e:f9:17:09:2b:74:ab:c0:43:a9:b5:
         eb:6a:4c:a7:65:19:18:e3:d2:88:95:b0:9b:c9:c6:b9:20:9d:
         53:4a:a9:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:44:34 2026 by rpki-client