Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/0ed8f50b-70f5-35e7-b706-77411b691954.roa
File:                     0ed8f50b-70f5-35e7-b706-77411b691954.roa (raw, json)
Hash identifier:          naEeqrBh+O9iFdLEwBfgFgFNp3Z4ur+JVm2UqHj07Xg=
Subject key identifier:   8D:9F:7F:2A:8E:42:F1:A7:98:CA:AE:A7:59:18:C9:9A:53:C7:26:CF
Certificate issuer:       /CN=5c19a246-d9fa-481a-a4d7-010af8c132b3
Certificate serial:       010D0C9F4328584CDDCCF76F9990F45C038F2280
Authority key identifier: 18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/0ed8f50b-70f5-35e7-b706-77411b691954.roa
Signing time:             Sun 15 Feb 2026 02:00:32 +0000
ROA not before:           Sun 15 Feb 2026 02:00:32 +0000
ROA not after:            Sat 16 May 2026 01:00:32 +0000
asID:                     26548
IP address blocks:        207.174.24.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:dd:cc:f7:6f:99:90:f4:5c:03:8f:22:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c19a246-d9fa-481a-a4d7-010af8c132b3
        Validity
            Not Before: Feb 15 02:00:32 2026 GMT
            Not After : May 16 01:00:32 2026 GMT
        Subject: CN=918010b2-3a89-4df3-b5cc-84bde37cc3b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:22:b9:1e:e8:e6:e5:02:d8:71:97:dc:7a:f1:
                    d2:ec:c9:08:24:95:48:10:f7:c1:b8:82:e1:85:90:
                    b0:5d:c2:17:0b:7b:02:f6:05:83:98:4a:dc:d5:70:
                    52:f0:03:07:d0:a2:d2:75:77:1a:cd:f9:b0:d7:27:
                    bf:7a:31:f2:53:14:6d:db:52:c5:e4:84:2a:f5:f6:
                    a3:39:db:36:08:54:db:8e:b6:8f:3d:39:a6:1d:28:
                    bb:c9:61:ff:2d:c7:45:c7:4c:4d:f5:07:31:30:55:
                    d3:da:42:7e:09:81:2e:61:58:5f:68:44:b9:1e:8c:
                    31:a6:e4:0a:1c:5b:09:b3:11:dc:e5:41:7c:14:6d:
                    8e:b0:7d:e8:f4:34:86:54:67:6d:e3:8b:df:da:47:
                    78:46:ef:0e:91:a7:26:4b:37:16:71:36:f4:cc:28:
                    a9:b1:2f:73:4e:03:8d:ed:6d:d7:d0:f2:85:cd:4f:
                    45:83:89:5f:00:1f:33:ca:02:49:1c:a3:b2:0d:a4:
                    fd:bf:4e:0e:aa:25:da:e0:a1:cc:28:fb:76:03:ff:
                    79:72:c4:ab:b6:53:f2:c2:ad:39:64:09:36:47:12:
                    a3:26:7d:01:46:b2:9f:f2:4e:b2:17:4a:fc:b9:d6:
                    3c:47:cc:88:56:53:7f:22:ae:7c:6e:31:9c:e5:79:
                    37:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:9F:7F:2A:8E:42:F1:A7:98:CA:AE:A7:59:18:C9:9A:53:C7:26:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/0ed8f50b-70f5-35e7-b706-77411b691954.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl

            X509v3 Authority Key Identifier:
                keyid:18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.174.24.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:c0:9b:34:12:85:fc:46:36:c6:78:42:fc:0f:22:68:49:f4:
         ef:19:3a:df:8e:b4:4b:3c:f5:93:26:83:3e:18:b7:68:9a:75:
         ec:74:30:0c:2e:f6:41:51:2e:c7:70:d7:01:36:1e:99:ba:07:
         80:fd:d8:7b:fc:e7:2f:f9:b7:99:78:a6:6d:a0:a4:b6:70:d5:
         66:cb:8d:f6:ff:e7:08:87:7e:65:dc:04:a5:83:2b:84:47:4d:
         d5:ee:8f:7f:c1:7d:88:70:65:6c:ea:70:d6:48:0a:0f:92:52:
         55:1f:1f:75:a4:2f:08:3c:95:cf:ac:55:a8:ea:9d:78:42:2e:
         c8:9a:fb:72:e5:4c:42:37:0e:25:79:c0:89:03:77:b1:3b:48:
         ec:79:e0:21:e1:e9:26:76:89:a1:bc:7e:ca:20:e4:b8:ee:0c:
         cb:e5:05:e1:d2:d0:b3:a8:c0:7f:f7:35:c2:b0:f0:75:61:7e:
         48:f5:b9:c8:04:7d:41:58:9b:ac:86:81:87:fc:c6:55:2b:31:
         a7:77:e6:2a:b2:0d:68:3b:61:2e:f2:94:d5:cf:ea:31:f4:0f:
         c7:70:55:4c:df:1d:8f:5e:f8:e0:03:2a:e9:76:2f:81:04:48:
         66:c3:da:c9:71:22:9b:54:41:71:a0:dc:da:dc:09:81:4a:1c:
         b2:f9:38:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:00:57 2026 by rpki-client