Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/33d0c66a-4089-3d40-a5d5-6d313a7787f0.roa
File:                     33d0c66a-4089-3d40-a5d5-6d313a7787f0.roa (raw, json)
Hash identifier:          hPh0RlbO/un2Xiq4FYWQIBtSJ7Mr1qZ0U1977Pdr9XQ=
Subject key identifier:   08:90:B7:65:07:61:7E:1B:F5:47:E9:D5:45:9B:37:52:D3:5C:61:62
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F4328584CE1FCCBDE84FA090C12FEAE00
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/33d0c66a-4089-3d40-a5d5-6d313a7787f0.roa
Signing time:             Mon 16 Feb 2026 14:00:40 +0000
ROA not before:           Mon 16 Feb 2026 14:00:40 +0000
ROA not after:            Sun 17 May 2026 13:00:40 +0000
asID:                     16462
IP address blocks:        206.12.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e1:fc:cb:de:84:fa:09:0c:12:fe:ae:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: Feb 16 14:00:40 2026 GMT
            Not After : May 17 13:00:40 2026 GMT
        Subject: CN=d5a62fe7-94e9-4fa5-8803-e567b092c00d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:5b:e2:8a:06:5c:69:fc:e6:73:2a:73:6e:1d:
                    64:d4:8b:f4:75:41:59:f3:3b:18:67:55:d1:03:b0:
                    fc:1b:68:cd:c9:ae:d9:74:57:6a:f0:55:b0:a8:69:
                    73:cd:f1:92:3e:89:fd:f2:bd:b1:31:c3:76:bd:c2:
                    6b:d5:a6:bd:49:a4:79:ba:bb:e4:f1:f3:66:25:64:
                    5d:87:41:3f:5b:5d:3f:b2:06:9d:48:6a:76:83:88:
                    d5:e5:44:3b:5b:82:67:79:69:5a:27:54:9f:ab:d9:
                    9a:c9:86:d3:5e:4a:27:b8:07:96:6b:1a:46:3e:ab:
                    32:b0:f1:c0:8b:da:46:bd:03:aa:1a:27:c4:30:f0:
                    88:50:db:53:5d:b3:4c:16:a4:0a:a4:51:d9:d6:16:
                    b0:81:df:31:6f:2a:06:5e:57:72:68:0e:0a:e2:e5:
                    66:b0:fc:85:4d:8b:16:82:e6:b2:8a:9b:76:43:8b:
                    25:c0:41:d8:bf:73:79:8e:62:5e:eb:77:b8:31:61:
                    7f:73:52:64:e8:da:5e:97:89:51:4b:68:8c:dc:fb:
                    f1:3c:20:40:37:57:46:e4:d9:61:c2:3e:b2:16:93:
                    c9:d9:62:56:6b:68:6f:9e:19:63:98:1f:20:f4:67:
                    98:c4:47:6c:62:dd:af:5f:e1:f6:9a:47:e6:c8:f5:
                    09:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:90:B7:65:07:61:7E:1B:F5:47:E9:D5:45:9B:37:52:D3:5C:61:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/33d0c66a-4089-3d40-a5d5-6d313a7787f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.12.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:71:15:c4:95:d0:0c:ee:4a:b4:0e:c7:a1:e2:a2:aa:a2:c6:
         ad:7d:f5:53:da:0c:ba:a4:8b:98:bf:cb:6d:57:10:45:76:3c:
         f6:08:ad:99:34:1b:94:b0:db:19:66:b2:54:72:93:1e:86:85:
         db:c2:48:53:84:42:b0:17:51:79:c6:ce:b8:22:65:9c:ac:ff:
         17:2d:ef:9c:4e:fe:30:09:5e:f2:d2:d8:60:0e:5b:d7:e3:26:
         88:3e:58:4a:98:37:1e:20:10:88:c7:04:95:e5:cf:f8:9f:cf:
         15:9c:9b:36:ec:b0:a8:11:74:16:d1:ea:23:db:7a:b3:e0:b6:
         74:39:94:fa:64:2a:d4:97:67:0f:15:a5:1f:8c:e3:fc:a3:44:
         20:59:e0:4d:2e:de:01:59:4b:20:96:79:4b:55:11:50:17:21:
         91:ce:54:18:83:9b:99:d8:1b:58:ba:70:47:34:9c:ae:ac:02:
         66:c6:29:6e:07:48:f5:b0:a9:d4:09:b2:0d:bd:e9:9f:09:b2:
         36:7c:c1:b0:e5:24:db:76:8e:7b:bc:6a:ef:93:b9:e0:01:ef:
         81:96:5b:09:8a:93:30:be:84:da:29:ab:5b:5f:11:5d:0a:92:
         71:7b:a3:85:9e:0e:37:bd:10:f1:fd:c1:00:56:e0:0b:c6:05:
         91:b6:3d:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:09:49 2026 by rpki-client