Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/71ceba98-7f07-3ae1-80df-ff534fcfc627.roa
File:                     71ceba98-7f07-3ae1-80df-ff534fcfc627.roa (raw, json)
Hash identifier:          B/igwRTp2ENaPowuFjgECU3mlMsV+tR4cUHfFV2rQMs=
Subject key identifier:   99:42:2E:FD:C2:36:2A:98:23:85:A3:B8:B2:8C:6A:E7:EB:9E:A6:52
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584CD40794DA581302D5E88C4D40
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/71ceba98-7f07-3ae1-80df-ff534fcfc627.roa
Signing time:             Wed 11 Feb 2026 14:00:41 +0000
ROA not before:           Wed 11 Feb 2026 14:00:41 +0000
ROA not after:            Tue 12 May 2026 13:00:41 +0000
asID:                     54113
IP address blocks:        157.52.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d4:07:94:da:58:13:02:d5:e8:8c:4d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Feb 11 14:00:41 2026 GMT
            Not After : May 12 13:00:41 2026 GMT
        Subject: CN=92f4920c-9c2e-458f-ae40-199073e1efca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:75:46:86:ea:e8:00:1f:4e:56:41:ff:a0:5c:
                    67:43:b3:b5:ff:f7:66:0f:3a:a3:2a:9b:ba:e6:7c:
                    18:b6:b9:88:d7:65:8b:7a:87:4f:25:49:05:0c:8d:
                    65:65:ed:b5:7d:67:38:34:0b:ad:e0:59:ac:7d:4b:
                    eb:30:8c:9b:b8:44:e6:20:cc:2f:db:70:80:17:c1:
                    b9:c9:a6:94:c8:b8:5c:c0:18:f4:06:45:9c:b9:0f:
                    6e:42:4c:0a:30:3f:78:5f:c4:68:5f:0c:98:fd:f2:
                    7b:93:2d:b9:93:fa:83:94:f4:95:ed:ed:28:f8:fa:
                    07:c1:66:1e:88:bd:05:a9:15:8f:44:e4:96:99:8e:
                    68:ac:a3:75:38:48:61:cb:7e:07:12:90:3e:bd:a9:
                    64:92:15:34:bb:76:93:5e:f1:6d:67:1c:a7:c5:17:
                    ea:dd:51:48:78:75:a2:bc:31:48:5d:41:3c:90:f1:
                    10:f6:b0:51:5d:2e:83:26:c9:6e:5a:e8:48:53:9d:
                    6f:73:0e:d7:da:cd:93:d4:b8:77:50:30:7b:9c:fa:
                    21:14:0b:2e:9c:57:33:47:c8:d9:ae:17:30:04:97:
                    41:e9:10:77:82:13:02:ea:5a:28:bb:a7:c2:90:16:
                    55:6f:5c:23:72:73:0d:4c:3a:00:c4:3a:4b:6b:ce:
                    1d:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:42:2E:FD:C2:36:2A:98:23:85:A3:B8:B2:8C:6A:E7:EB:9E:A6:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/71ceba98-7f07-3ae1-80df-ff534fcfc627.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.52.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:d9:18:e3:3e:08:db:3a:29:a5:a7:2f:56:fa:cc:23:4b:97:
         64:59:64:a6:a1:bd:25:a3:be:93:0a:0b:91:2c:a7:ac:dc:83:
         46:99:fd:b1:4b:ee:d3:4b:5e:5c:e9:10:88:e1:83:43:76:77:
         ff:47:c4:fa:94:02:3c:68:24:e4:50:8b:dc:e2:88:db:f3:b7:
         0f:4e:d4:b8:8a:12:b4:6f:ab:d1:5f:57:77:ae:e0:70:64:26:
         5d:e8:cd:c6:14:3b:66:44:66:e9:4b:8b:cb:d4:d3:d5:28:d3:
         e2:46:c4:de:c5:c8:c9:cc:26:34:16:fa:c0:49:f9:00:9f:21:
         82:06:54:28:ef:c0:43:97:b8:65:fd:d7:9b:67:1b:ef:80:a3:
         bf:70:6e:0c:13:92:ee:85:98:88:dc:6a:0f:8f:ab:6d:97:90:
         b9:3a:f8:86:43:3a:ab:e3:14:23:8d:68:ad:88:cd:ec:3c:af:
         26:b7:7d:5b:3d:1c:d3:a9:02:6e:4d:56:8b:a6:31:f0:75:d7:
         b9:74:6e:39:a9:f6:a1:83:54:55:77:7d:86:b7:8d:66:98:72:
         18:4d:b1:54:af:90:dc:9f:85:38:a9:c9:91:8f:f2:fa:4c:c2:
         21:b4:2b:ce:5c:07:9e:a4:49:93:ca:05:c5:fa:a5:58:60:a2:
         e6:7b:d5:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:52:52 2026 by rpki-client