Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/595b7ff4-a60f-3919-a2c8-f00158275cae.roa
File:                     595b7ff4-a60f-3919-a2c8-f00158275cae.roa (raw, json)
Hash identifier:          CgHdQTb9uD9YKieb2odH89hxdLow+lJSRv3rTJ8tEB0=
Subject key identifier:   2A:51:6B:6B:D6:C1:3D:3C:02:18:65:D0:51:A8:3E:17:3E:5C:10:F5
Certificate issuer:       /CN=61f3c7c4-a771-47a9-a4e8-0aae7df7b234
Certificate serial:       010D0C9F4328584CEE45E8365E2ECEF9206BD1C0
Authority key identifier: BB:88:4D:5F:DE:1F:DC:B6:62:A7:DE:13:88:FD:FC:A0:3F:0F:F8:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/595b7ff4-a60f-3919-a2c8-f00158275cae.roa
Signing time:             Fri 20 Feb 2026 23:37:53 +0000
ROA not before:           Fri 20 Feb 2026 23:37:53 +0000
ROA not after:            Thu 21 May 2026 22:37:53 +0000
asID:                     54453
IP address blocks:        199.216.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ee:45:e8:36:5e:2e:ce:f9:20:6b:d1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61f3c7c4-a771-47a9-a4e8-0aae7df7b234
        Validity
            Not Before: Feb 20 23:37:53 2026 GMT
            Not After : May 21 22:37:53 2026 GMT
        Subject: CN=19c750ee-c1e8-43d4-bbb2-4fdd7c4b1df7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ef:7c:5b:0c:84:f0:89:64:c0:a2:27:8a:9d:
                    b2:8f:27:b1:5d:1b:df:4e:11:43:de:24:16:92:70:
                    fa:ba:76:3c:a4:69:8e:9d:82:74:e9:84:c2:74:a5:
                    21:19:36:ff:f8:f4:50:2f:14:0b:ba:f2:d5:df:2d:
                    83:ad:9b:fe:62:53:92:e9:ee:9b:ff:e9:da:75:86:
                    c2:16:c8:d2:3d:88:0e:5e:a0:e7:5a:be:0c:ce:ac:
                    3e:3a:1e:e9:1f:8d:a8:7c:13:76:84:07:05:ac:2f:
                    c5:8e:5e:3c:45:d3:59:b6:04:2b:72:ce:45:63:b0:
                    fe:b6:58:4d:f6:6e:e5:04:aa:19:ba:9e:1d:8b:fb:
                    70:c6:85:16:51:ce:86:87:d8:2a:13:ac:81:0d:ba:
                    e7:26:fd:c3:1e:83:9e:57:75:88:42:52:37:7f:97:
                    c2:a3:3b:05:00:b8:ce:b2:34:15:f3:10:28:32:d8:
                    74:bb:bc:93:a8:d4:04:5f:5c:64:b7:ac:a0:55:cb:
                    c9:e3:3a:ea:16:6b:39:c1:39:46:58:9f:06:de:47:
                    bd:a5:c7:17:6c:61:d9:e8:01:85:ca:f4:ad:79:d8:
                    e4:43:57:92:c1:c5:20:72:6a:b4:bf:2a:a8:a8:e5:
                    5f:6c:e3:8f:77:cb:42:03:e6:85:7f:b5:06:50:c3:
                    d0:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:51:6B:6B:D6:C1:3D:3C:02:18:65:D0:51:A8:3E:17:3E:5C:10:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/595b7ff4-a60f-3919-a2c8-f00158275cae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.crl

            X509v3 Authority Key Identifier:
                keyid:BB:88:4D:5F:DE:1F:DC:B6:62:A7:DE:13:88:FD:FC:A0:3F:0F:F8:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.216.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:7f:71:91:b6:45:b2:f5:e3:0a:b2:4a:96:df:2a:05:1a:6b:
         65:99:4e:bb:9d:41:0f:0d:18:24:16:41:66:56:df:f4:60:10:
         c8:da:c8:96:ca:7f:5f:c5:58:40:d0:58:e4:74:03:d6:90:dc:
         a9:ed:5f:27:0b:10:b6:f9:f3:90:8d:75:ab:f1:98:6b:bb:b9:
         58:08:1b:be:d4:22:92:a8:92:21:3a:1b:3a:f6:b6:9a:9e:8f:
         ee:e4:5c:ce:cc:13:e1:10:67:c3:e9:2e:d6:33:c8:e3:14:b8:
         1d:60:0b:ba:7b:08:df:1a:1a:42:a1:32:9d:ce:74:5c:cf:8f:
         f6:52:a1:4f:ea:fa:5d:06:49:d5:ea:47:51:b8:d1:ee:63:32:
         4f:33:07:43:e6:80:6e:6d:f4:b9:8b:2c:b9:6c:96:f3:ec:fc:
         9d:43:55:d1:ef:d6:39:6a:c4:80:68:23:8c:35:1a:56:66:ad:
         30:0b:4e:cf:cc:05:74:8a:63:5c:cb:5e:4c:1e:f3:51:7a:7a:
         54:6b:62:e0:38:46:96:9b:74:dd:2f:6f:7d:21:69:7a:09:e9:
         96:78:95:ff:05:6c:1f:14:62:07:d3:60:b8:37:9d:1d:42:6f:
         44:ef:ef:e2:d2:16:a9:a2:bc:42:b2:a6:8c:dd:c9:0e:57:ce:
         34:93:5f:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:08:16 2026 by rpki-client