Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0df77c4-4a94-461b-9582-441eb75796a4/e7dd884a-aed6-3cdb-959f-5446e5849ee7.roa
File:                     e7dd884a-aed6-3cdb-959f-5446e5849ee7.roa (raw, json)
Hash identifier:          /pnrHVd9InPe5FRejHnf6ot0atzd9jWWZpbg6NeTTC8=
Subject key identifier:   1F:86:42:29:DB:F3:C1:4E:0A:B2:CB:B3:25:D9:88:06:78:C1:F8:A0
Certificate issuer:       /CN=d0df77c4-4a94-461b-9582-441eb75796a4
Certificate serial:       010D0C9F4328584CF2BCF7DD7C5B8A08A56F64C0
Authority key identifier: DA:61:E4:DF:36:71:36:8A:15:61:50:4B:93:78:46:05:F0:7B:C9:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0df77c4-4a94-461b-9582-441eb75796a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0df77c4-4a94-461b-9582-441eb75796a4/e7dd884a-aed6-3cdb-959f-5446e5849ee7.roa
Signing time:             Sun 22 Feb 2026 14:00:41 +0000
ROA not before:           Sun 22 Feb 2026 14:00:41 +0000
ROA not after:            Sat 23 May 2026 13:00:41 +0000
asID:                     394023
IP address blocks:        206.108.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0df77c4-4a94-461b-9582-441eb75796a4/d0df77c4-4a94-461b-9582-441eb75796a4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0df77c4-4a94-461b-9582-441eb75796a4/d0df77c4-4a94-461b-9582-441eb75796a4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0df77c4-4a94-461b-9582-441eb75796a4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f2:bc:f7:dd:7c:5b:8a:08:a5:6f:64:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0df77c4-4a94-461b-9582-441eb75796a4
        Validity
            Not Before: Feb 22 14:00:41 2026 GMT
            Not After : May 23 13:00:41 2026 GMT
        Subject: CN=cf5e9a69-0f28-4915-8f47-903e8b527c41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:44:fe:7b:d7:22:66:32:e1:56:97:f0:08:02:
                    a5:ea:98:23:90:41:72:aa:0a:13:dd:11:7e:a3:70:
                    7f:02:73:68:47:97:9e:8f:ca:70:1f:4d:08:f6:6e:
                    49:25:3c:ee:92:00:f2:4c:43:3e:9f:80:9f:63:86:
                    75:4b:8c:f0:3a:a3:77:59:e0:96:5f:da:f4:0a:87:
                    a2:71:19:fb:cb:ea:a5:7c:eb:22:dc:1f:85:88:4e:
                    20:16:3b:16:40:84:0a:b4:3d:05:32:9d:10:80:64:
                    39:f7:0f:6c:b7:9b:da:72:c7:45:c2:8b:57:19:e3:
                    50:d0:3a:98:59:30:2a:fc:35:db:d8:db:bc:14:1f:
                    e2:51:c8:66:08:d1:d5:6a:8e:f2:38:d7:ac:91:d7:
                    3d:cf:64:df:d8:e1:29:e6:c4:72:f1:4b:c1:36:a6:
                    ce:69:f2:2f:be:9e:54:b8:0e:29:c2:2d:15:f6:04:
                    10:1d:04:06:c8:e6:62:31:9e:c0:ac:8b:11:38:f5:
                    4a:66:5a:d5:9e:9e:f6:12:e9:38:0d:69:ad:3c:87:
                    71:68:bc:43:06:95:59:9c:38:9d:52:be:01:cf:a2:
                    f3:14:9b:4a:c2:2a:18:fd:63:99:b3:b5:4c:d3:6c:
                    7f:dc:75:c8:03:d4:2b:98:ca:43:64:d2:2a:fa:1e:
                    8b:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:86:42:29:DB:F3:C1:4E:0A:B2:CB:B3:25:D9:88:06:78:C1:F8:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0df77c4-4a94-461b-9582-441eb75796a4/e7dd884a-aed6-3cdb-959f-5446e5849ee7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0df77c4-4a94-461b-9582-441eb75796a4/d0df77c4-4a94-461b-9582-441eb75796a4.crl

            X509v3 Authority Key Identifier:
                keyid:DA:61:E4:DF:36:71:36:8A:15:61:50:4B:93:78:46:05:F0:7B:C9:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0df77c4-4a94-461b-9582-441eb75796a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.108.10.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:63:98:86:c6:0c:1d:3f:54:69:c6:83:15:01:3d:bd:bb:5b:
         3f:0d:25:02:fd:61:e2:8b:76:29:3c:3f:74:c4:1f:a2:9e:ae:
         ef:43:25:1b:02:b6:16:43:14:2e:86:31:45:7d:a6:7a:98:20:
         19:c4:3e:95:94:78:f5:85:21:e5:5a:51:88:e5:d8:2e:31:99:
         24:64:c3:79:86:7c:6a:5f:53:63:d2:c1:e4:b2:10:9c:ac:b8:
         27:90:fe:d6:10:ae:2a:ac:af:43:a1:ba:8e:93:72:c2:a8:f4:
         02:d3:b5:6d:e8:16:fc:0c:b1:1e:ef:2b:f7:98:a9:b1:5f:da:
         0f:59:c0:ca:c8:f0:64:7a:30:ec:99:55:05:61:e3:b9:db:c0:
         36:8e:c6:ab:0e:bb:f2:fa:15:de:7a:31:9b:d4:73:f6:ac:a2:
         c9:bb:24:7f:45:71:98:64:ba:6b:b5:5f:c0:af:1f:ed:2f:f9:
         71:e9:39:cc:d6:84:7a:8d:15:d9:09:82:22:82:f7:12:88:03:
         94:e4:35:0a:05:3d:fb:87:56:ad:75:26:08:a8:3f:3c:20:c6:
         54:89:1e:56:db:c1:91:69:e4:b5:15:58:c7:58:4f:ea:c1:59:
         4b:1e:25:9e:51:04:14:a0:72:53:8f:62:ab:35:43:b1:e3:72:
         91:01:0b:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:06:35 2026 by rpki-client