Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b58aaf28-235a-43af-9bdf-f824731e27c6/e9851369-8ef3-3be5-a0b3-f90140f7a60a.roa
File:                     e9851369-8ef3-3be5-a0b3-f90140f7a60a.roa (raw, json)
Hash identifier:          h/5/kZwkmiG+VnrvLC92cvLU7PpvJDqvfX0cUeXwekc=
Subject key identifier:   40:10:3B:F6:56:34:0F:40:BE:1E:4E:0B:B0:FB:0F:71:DB:88:BA:93
Certificate issuer:       /CN=b58aaf28-235a-43af-9bdf-f824731e27c6
Certificate serial:       010D0C9F4328584D0217849FF78FF88F9E4B07C0
Authority key identifier: 59:6D:4D:F3:0F:79:3F:BC:27:7F:CC:07:45:87:2B:14:97:01:5B:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b58aaf28-235a-43af-9bdf-f824731e27c6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b58aaf28-235a-43af-9bdf-f824731e27c6/e9851369-8ef3-3be5-a0b3-f90140f7a60a.roa
Signing time:             Sat 28 Feb 2026 02:00:32 +0000
ROA not before:           Sat 28 Feb 2026 02:00:32 +0000
ROA not after:            Fri 29 May 2026 01:00:32 +0000
asID:                     400424
IP address blocks:        198.151.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b58aaf28-235a-43af-9bdf-f824731e27c6/b58aaf28-235a-43af-9bdf-f824731e27c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b58aaf28-235a-43af-9bdf-f824731e27c6/b58aaf28-235a-43af-9bdf-f824731e27c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b58aaf28-235a-43af-9bdf-f824731e27c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:02:17:84:9f:f7:8f:f8:8f:9e:4b:07:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b58aaf28-235a-43af-9bdf-f824731e27c6
        Validity
            Not Before: Feb 28 02:00:32 2026 GMT
            Not After : May 29 01:00:32 2026 GMT
        Subject: CN=8d94d140-8bad-49c9-84c7-eb06da498a51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:19:56:b1:2b:8b:ce:41:93:37:13:5d:13:d9:
                    bc:b5:85:fa:b5:1e:b5:3e:ce:cd:33:b8:e5:8b:20:
                    82:ee:3c:29:1d:fa:93:0b:40:e0:27:21:3e:76:30:
                    e2:33:24:e1:01:9d:12:a2:31:b7:e2:96:f0:d0:c7:
                    87:9b:ac:a6:2f:64:c4:a2:c8:73:f6:e4:1c:44:61:
                    bb:ef:62:38:0a:f1:66:a5:4a:1f:ad:b0:d6:22:b4:
                    71:9c:51:c5:76:96:b4:79:0f:1d:5a:94:57:bc:99:
                    d3:c1:3b:a2:31:a9:1e:9c:24:2f:14:1d:a4:0b:18:
                    f2:c6:ec:a6:44:d5:f7:9e:8c:e0:b3:12:67:32:d4:
                    8f:9d:bf:69:47:6e:0c:9c:77:bd:0a:f2:e5:a9:39:
                    38:13:e6:e1:5a:b1:26:ab:41:aa:83:9e:ea:3c:19:
                    39:31:f8:a4:b6:d7:3c:d7:97:42:8c:cb:a9:2f:df:
                    f4:b8:c4:80:7f:bf:98:4f:7a:fe:90:aa:67:56:38:
                    56:00:70:42:13:e0:ac:92:30:4a:3d:3a:2d:7b:3c:
                    d8:3c:c0:c7:e9:8b:06:24:8e:3e:06:c6:59:19:a1:
                    9f:19:a8:7c:47:ee:b9:d3:2b:4e:89:2e:15:fd:55:
                    01:ee:d1:f9:49:e6:37:5b:7f:27:55:d5:a0:af:01:
                    1f:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:10:3B:F6:56:34:0F:40:BE:1E:4E:0B:B0:FB:0F:71:DB:88:BA:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b58aaf28-235a-43af-9bdf-f824731e27c6/e9851369-8ef3-3be5-a0b3-f90140f7a60a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b58aaf28-235a-43af-9bdf-f824731e27c6/b58aaf28-235a-43af-9bdf-f824731e27c6.crl

            X509v3 Authority Key Identifier:
                keyid:59:6D:4D:F3:0F:79:3F:BC:27:7F:CC:07:45:87:2B:14:97:01:5B:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b58aaf28-235a-43af-9bdf-f824731e27c6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.151.205.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:70:dc:51:17:8b:df:33:e2:f6:40:2d:5f:bd:26:1a:bf:44:
         ff:b9:b4:66:38:03:06:07:24:fc:72:59:9c:c7:06:90:d7:f2:
         2d:82:8c:78:81:21:5e:da:e5:87:ca:79:ce:70:9c:57:41:05:
         18:f2:4e:af:b6:8f:57:8f:c0:94:35:14:2a:a2:21:81:0e:dc:
         ae:b9:10:32:67:70:96:57:b9:5f:58:10:d6:77:ab:72:3d:d9:
         58:a8:14:69:3c:dd:01:18:42:ae:88:85:0e:a6:47:a9:99:7a:
         b6:6b:eb:44:4d:4c:9d:5f:2c:5f:22:0b:4a:4a:25:c3:09:8a:
         bc:ba:30:e9:f1:ad:ec:3c:2b:d6:64:1a:59:cd:9a:ea:d7:38:
         f5:26:e6:0a:a0:8e:83:64:95:d5:7b:80:20:78:7c:2b:88:6b:
         f0:ff:ef:b0:e4:f9:51:68:d2:13:93:cb:3f:03:7c:4d:67:a4:
         c4:6d:df:b9:a7:74:05:fd:df:63:3e:81:e5:bd:0d:a4:4d:42:
         8c:b6:c9:b1:e4:79:f3:0c:38:84:8d:d6:8f:85:94:95:b3:93:
         94:c8:bd:cb:a4:d0:86:f6:0f:ad:83:8c:c4:c3:e1:20:2c:83:
         49:ea:41:61:a2:13:5e:82:16:c8:0c:a3:15:0d:2b:ae:c7:1d:
         e9:2d:3e:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:09:22 2026 by rpki-client