Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/26239fe9-1b4c-309b-baa7-62dcf11a0892.roa
File:                     26239fe9-1b4c-309b-baa7-62dcf11a0892.roa (raw, json)
Hash identifier:          VslwtbBTEIZXRCM7VI8VDDbSDQJaFef1C1GWrj/uEGU=
Subject key identifier:   1A:30:D8:56:19:BF:B5:6D:BC:6A:71:F0:B2:1D:DD:B0:57:7C:1F:79
Certificate issuer:       /CN=256d2a2e-9ac7-4d29-bd15-75874d49df66
Certificate serial:       010D0C9F4328584D02179786BDF33F184B718860
Authority key identifier: E7:4C:09:96:E8:84:50:C0:CF:D5:86:D5:46:2F:70:EE:D2:57:95:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/26239fe9-1b4c-309b-baa7-62dcf11a0892.roa
Signing time:             Sat 28 Feb 2026 02:00:32 +0000
ROA not before:           Sat 28 Feb 2026 02:00:32 +0000
ROA not after:            Fri 29 May 2026 01:00:32 +0000
asID:                     40805
IP address blocks:        108.161.208.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/256d2a2e-9ac7-4d29-bd15-75874d49df66.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/256d2a2e-9ac7-4d29-bd15-75874d49df66.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:02:17:97:86:bd:f3:3f:18:4b:71:88:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=256d2a2e-9ac7-4d29-bd15-75874d49df66
        Validity
            Not Before: Feb 28 02:00:32 2026 GMT
            Not After : May 29 01:00:32 2026 GMT
        Subject: CN=d2602fa0-2caa-4761-a916-9e7a435a1124
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:80:3d:d7:d8:04:48:a1:18:e0:31:f7:fe:f7:
                    1b:9b:22:92:8c:8b:62:52:f3:bb:80:89:b9:33:33:
                    dc:86:69:83:81:18:8d:63:9d:42:98:b8:63:db:33:
                    cc:56:16:da:21:41:9a:51:32:87:d5:2f:df:90:00:
                    94:ea:8c:46:8e:bf:01:b7:ff:2b:ba:d7:43:f7:96:
                    c9:b5:50:27:dd:48:08:a7:6c:5c:18:65:8f:50:74:
                    36:54:4e:cb:ad:56:5d:db:39:dc:3d:32:db:4f:4d:
                    1a:14:88:3e:b5:70:8e:2a:76:a4:01:c7:d6:19:8a:
                    74:b6:26:e6:26:e2:f4:6f:65:05:50:ec:fd:0c:f5:
                    70:14:08:ca:64:3c:ff:62:e7:a9:77:fb:7f:ef:55:
                    04:f8:c5:a0:ff:a1:7f:e6:f5:c0:b3:1e:a7:9e:66:
                    00:7f:d8:75:19:49:01:44:c4:01:7c:d0:d5:b3:04:
                    6f:78:ed:69:91:2e:41:6a:14:7c:78:22:9a:bd:99:
                    e0:3b:bb:90:95:6d:4a:9b:1f:b7:66:30:4a:d5:c8:
                    45:47:2c:3a:e4:f8:d7:a8:8a:c2:0f:31:2f:f9:b8:
                    92:01:0b:7a:6d:7c:55:4d:9d:36:19:cb:26:79:2a:
                    1c:9b:7c:49:9f:61:19:9d:bf:52:43:7a:31:1c:37:
                    e2:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:30:D8:56:19:BF:B5:6D:BC:6A:71:F0:B2:1D:DD:B0:57:7C:1F:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/26239fe9-1b4c-309b-baa7-62dcf11a0892.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/256d2a2e-9ac7-4d29-bd15-75874d49df66.crl

            X509v3 Authority Key Identifier:
                keyid:E7:4C:09:96:E8:84:50:C0:CF:D5:86:D5:46:2F:70:EE:D2:57:95:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.161.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:31:d6:79:b3:e5:f3:7e:f4:1d:aa:9c:d6:cb:4a:4e:b3:ed:
         c7:15:19:e4:f9:5e:bb:bf:a7:eb:ea:b5:9c:af:90:64:64:cb:
         c1:e5:79:45:7a:03:df:8a:0c:aa:c1:e6:74:8f:4e:e3:f7:08:
         79:ad:19:1f:ee:0a:d7:ca:49:01:0b:f7:39:36:f5:2c:e4:49:
         9d:a7:ce:fc:c0:9b:f8:92:8f:9d:e8:90:4a:10:8e:e8:7e:3d:
         17:40:11:8d:8d:38:04:72:41:a3:f9:7e:e6:10:d6:d7:b1:95:
         1d:bf:a3:95:56:9f:93:ba:8e:db:d1:f3:b3:be:9f:15:b8:00:
         e3:b5:57:19:f0:30:df:38:65:1c:57:60:78:9f:52:46:85:6f:
         01:81:c9:88:9e:ba:f0:5a:3c:01:02:5a:85:2e:1e:64:45:ce:
         69:17:e6:9d:72:6b:58:88:57:14:10:67:f6:40:69:c7:7d:73:
         18:d1:4f:97:52:a7:8b:42:3a:17:d7:c0:fd:9a:99:a8:f1:fe:
         b9:c9:08:0c:68:da:ae:76:b2:ad:a2:a4:18:c8:c1:2b:c1:a0:
         7c:a3:a6:3b:e8:ee:7d:84:29:8e:38:39:bc:ee:e9:09:fb:ef:
         66:15:46:52:38:6d:1b:12:5a:38:ae:43:87:e0:e0:bf:b5:3e:
         ee:3d:e4:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:03:14 2026 by rpki-client