Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/503d278e-3d64-45f0-9c99-0926a5eec14c/ae8ad375-d312-35a7-8de3-794474cd3e8f.roa
File:                     ae8ad375-d312-35a7-8de3-794474cd3e8f.roa (raw, json)
Hash identifier:          GopDcqRPjI06kNU1IlGqMK+yuF2+v1n3ylpajLVqa1M=
Subject key identifier:   28:07:8B:5E:BF:F4:28:DA:0E:08:F2:E3:13:99:08:72:C5:CD:9C:E8
Certificate issuer:       /CN=503d278e-3d64-45f0-9c99-0926a5eec14c
Certificate serial:       010D0C9F4328584CF1576C575F9AA500518044E0
Authority key identifier: 3A:A5:E2:51:83:F9:FB:6D:B8:1B:0F:08:67:A3:B0:25:EA:19:BF:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/503d278e-3d64-45f0-9c99-0926a5eec14c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/503d278e-3d64-45f0-9c99-0926a5eec14c/ae8ad375-d312-35a7-8de3-794474cd3e8f.roa
Signing time:             Sun 22 Feb 2026 02:00:32 +0000
ROA not before:           Sun 22 Feb 2026 02:00:32 +0000
ROA not after:            Sat 23 May 2026 01:00:32 +0000
asID:                     198949
IP address blocks:        204.63.232.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/503d278e-3d64-45f0-9c99-0926a5eec14c/503d278e-3d64-45f0-9c99-0926a5eec14c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/503d278e-3d64-45f0-9c99-0926a5eec14c/503d278e-3d64-45f0-9c99-0926a5eec14c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/503d278e-3d64-45f0-9c99-0926a5eec14c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f1:57:6c:57:5f:9a:a5:00:51:80:44:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=503d278e-3d64-45f0-9c99-0926a5eec14c
        Validity
            Not Before: Feb 22 02:00:32 2026 GMT
            Not After : May 23 01:00:32 2026 GMT
        Subject: CN=550e5b81-d2da-4b20-836a-437d27b88012
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:aa:a9:40:08:88:90:8a:8f:cf:d0:eb:6c:eb:
                    25:f9:c5:8a:d6:bc:b7:ac:44:ad:d4:c5:4f:d0:0c:
                    85:c2:32:59:9e:7e:5a:29:16:2a:77:01:2a:8d:6e:
                    44:37:b1:53:54:77:c3:72:79:3a:b6:81:6f:ff:09:
                    d5:09:67:8d:fc:ba:b6:5a:bd:c1:6c:a1:5b:59:ae:
                    ee:8b:22:07:63:81:71:0f:2f:8b:b3:23:47:8a:fa:
                    e5:32:3b:e4:20:63:11:31:24:1a:68:49:45:53:5d:
                    d4:7a:20:40:f8:9e:df:e8:46:a2:33:07:cc:e7:34:
                    43:fd:b8:cd:7b:ae:e5:3a:2f:7d:09:25:f0:fd:bd:
                    1d:1a:cf:1e:28:fe:34:1f:b6:83:c8:36:ae:83:02:
                    37:63:1b:ac:22:38:30:80:40:90:3e:8b:45:54:ec:
                    1a:59:bc:ea:e1:6f:60:43:7e:b8:07:0a:27:40:2f:
                    95:48:67:3e:37:ba:7f:8e:9c:c4:89:f8:b1:6d:03:
                    7b:01:ba:36:2a:93:98:aa:da:83:4f:8f:e9:87:a6:
                    b6:54:94:52:78:22:e5:93:ee:22:c8:52:54:2f:2f:
                    85:60:3a:0c:a5:61:2c:65:45:97:1d:81:9a:c6:c0:
                    ed:20:b6:fc:8f:0a:6f:95:8e:c3:03:97:18:1b:e4:
                    00:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:07:8B:5E:BF:F4:28:DA:0E:08:F2:E3:13:99:08:72:C5:CD:9C:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/503d278e-3d64-45f0-9c99-0926a5eec14c/ae8ad375-d312-35a7-8de3-794474cd3e8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/503d278e-3d64-45f0-9c99-0926a5eec14c/503d278e-3d64-45f0-9c99-0926a5eec14c.crl

            X509v3 Authority Key Identifier:
                keyid:3A:A5:E2:51:83:F9:FB:6D:B8:1B:0F:08:67:A3:B0:25:EA:19:BF:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/503d278e-3d64-45f0-9c99-0926a5eec14c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.63.232.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:74:2a:2b:28:20:76:e8:5e:4a:0a:8a:d2:2e:c8:b2:64:a0:
         75:7f:30:76:c2:60:b7:0b:97:8c:91:e3:fc:76:2e:a3:68:45:
         52:32:51:22:02:f3:5c:a3:9e:7e:e9:c7:af:9a:76:19:89:d8:
         39:c0:69:48:7e:d2:7f:39:09:b9:97:1f:0b:2f:2a:44:20:7e:
         ee:bd:ee:dd:57:43:37:90:a6:75:67:09:d1:7a:40:d4:7d:16:
         69:a8:23:cf:fb:73:ad:0a:df:f9:04:f3:6c:12:3c:19:37:81:
         1b:ab:45:b2:0b:24:2a:0b:3a:12:e5:9e:e8:e6:8b:a8:d3:95:
         0c:9c:90:6b:18:5a:9e:5c:ad:43:22:6e:7f:de:b1:85:1f:6f:
         34:f5:5c:46:20:de:0f:5f:2e:70:46:fe:6e:5f:4f:1e:0c:4b:
         66:43:82:77:a4:7f:72:e4:40:28:ce:45:87:3a:b1:a1:0e:86:
         b6:84:6c:2b:30:69:1a:38:56:3d:7d:fd:37:6c:2e:cf:63:9b:
         1d:c9:fd:21:56:4a:18:47:3d:fb:4d:29:d0:a7:6a:f5:c6:9f:
         3d:14:7b:aa:73:0e:0d:c6:df:54:76:fd:fc:7b:c9:57:4b:10:
         81:48:84:a5:01:8f:9b:4c:2b:43:8d:27:ba:4b:37:7f:b2:61:
         21:19:fc:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:18:41 2026 by rpki-client