Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/1acc8926-09da-3feb-8663-0ef5cad8cb18.roa
File:                     1acc8926-09da-3feb-8663-0ef5cad8cb18.roa (raw, json)
Hash identifier:          6iftFloJEryfy8eUAgUlVTqBW77SSfAejRw0B9f5Jp8=
Subject key identifier:   5F:95:A1:A8:68:EA:4C:84:09:A4:B6:2E:1B:AA:FB:17:B1:2D:1E:50
Certificate issuer:       /CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Certificate serial:       010D0C9F4328584CEFF2338144F65F65EDFE0FC0
Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/1acc8926-09da-3feb-8663-0ef5cad8cb18.roa
Signing time:             Sat 21 Feb 2026 14:00:41 +0000
ROA not before:           Sat 21 Feb 2026 14:00:41 +0000
ROA not after:            Fri 22 May 2026 13:00:41 +0000
asID:                     9009
IP address blocks:        198.145.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ef:f2:33:81:44:f6:5f:65:ed:fe:0f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b
        Validity
            Not Before: Feb 21 14:00:41 2026 GMT
            Not After : May 22 13:00:41 2026 GMT
        Subject: CN=0c0f2e52-d224-4ec4-8e01-5ed13436bed2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:50:40:ee:dc:5b:85:75:10:56:46:91:71:e7:
                    cd:9e:0a:96:5f:8e:c3:5a:08:63:08:6a:64:6c:65:
                    7e:f1:71:a2:e9:06:d2:89:d2:42:45:b4:a6:a9:0e:
                    19:1f:5e:24:32:5c:85:20:53:fd:07:74:6e:58:5b:
                    9d:68:c0:85:36:fd:42:7f:9b:75:3f:60:4e:82:e4:
                    a0:fc:a8:24:51:03:17:75:6f:d2:e6:16:cb:5b:0d:
                    46:57:68:b5:95:77:0b:6e:47:93:59:80:92:fd:bd:
                    09:e1:aa:63:55:c0:59:3c:02:70:b6:7f:31:78:c0:
                    cf:36:bc:f1:23:92:d7:4d:4e:86:bb:d0:eb:ec:7d:
                    1a:ba:f7:0f:7f:d8:38:ef:ec:0b:8c:a4:69:35:7c:
                    96:33:cd:1d:56:d8:5f:b0:63:5c:97:fc:d6:20:a5:
                    f3:d0:b5:c1:5a:5d:d0:ce:ba:75:b5:69:2b:59:49:
                    fb:69:0b:88:cc:32:e2:46:e1:98:8a:08:c1:d1:44:
                    e7:35:e8:88:38:aa:2b:42:15:6f:8d:1d:54:43:94:
                    34:db:48:a4:91:aa:9e:1a:29:34:bc:ce:7f:fb:ad:
                    f4:b1:ff:f2:2e:70:be:8e:9d:f7:72:f3:41:02:ee:
                    87:29:f1:06:b2:7a:c8:55:10:8d:41:44:59:ce:ae:
                    35:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:95:A1:A8:68:EA:4C:84:09:A4:B6:2E:1B:AA:FB:17:B1:2D:1E:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/1acc8926-09da-3feb-8663-0ef5cad8cb18.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl

            X509v3 Authority Key Identifier:
                keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.145.231.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e3:54:9b:db:3b:96:ec:c7:17:59:a3:2f:ba:32:20:22:65:ac:
         b6:cb:5b:36:ec:1c:30:9d:de:f9:e5:c6:e9:59:d6:dd:65:8c:
         2d:c4:4a:f1:ed:e5:b3:16:e7:36:3b:5e:46:52:e2:98:d5:21:
         b8:15:4b:3c:31:63:a1:27:9e:2e:f5:2f:99:ed:22:b1:f8:3d:
         60:66:0e:48:d6:be:30:90:21:0d:3b:9e:3a:85:3a:0a:6f:d5:
         19:1b:40:c3:48:a5:0a:22:ae:7f:63:fe:92:46:c5:08:36:a1:
         99:a4:f1:6a:f5:60:ee:ae:be:6e:3b:2b:80:41:9a:0c:ff:5f:
         a2:54:c8:73:e6:0a:f9:fa:09:89:4f:4a:ca:2f:16:2d:30:f9:
         65:c3:60:1a:dc:88:d2:fb:50:ae:d9:e2:6f:e9:2a:7a:a9:ae:
         31:9a:d0:e6:09:67:a0:c3:df:be:92:f9:3d:90:78:e2:a6:27:
         39:30:ff:34:43:60:77:10:cc:d5:71:c3:49:74:84:f2:fd:6a:
         91:20:dc:7d:bc:2d:49:bd:be:d5:11:a1:2f:76:7b:07:6c:2a:
         b7:7e:6f:a7:18:5b:c6:96:44:e8:03:3d:fb:b5:19:69:d7:31:
         a1:bb:c6:73:3b:df:09:3e:aa:2a:4b:2f:47:c8:0f:b4:92:4e:
         88:1c:cb:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:37:09 2026 by rpki-client