Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5a66c245-1026-3b1c-b93a-be33fd9c87c4.roa
File:                     5a66c245-1026-3b1c-b93a-be33fd9c87c4.roa (raw, json)
Hash identifier:          Ol2xKtwNdpF/aEU3t2FFpU8LpkCjSw7dkJ/26Hqzl/8=
Subject key identifier:   FA:88:A6:58:E0:14:27:FB:7F:EC:53:FE:BF:4B:6E:90:04:99:BE:5B
Certificate issuer:       /CN=5c19a246-d9fa-481a-a4d7-010af8c132b3
Certificate serial:       010D0C9F4328584D037D546E1665B3ED7B50EB60
Authority key identifier: 18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5a66c245-1026-3b1c-b93a-be33fd9c87c4.roa
Signing time:             Sat 28 Feb 2026 14:00:40 +0000
ROA not before:           Sat 28 Feb 2026 14:00:40 +0000
ROA not after:            Fri 29 May 2026 13:00:40 +0000
asID:                     26930
IP address blocks:        208.99.44.0/24 maxlen: 24
                          209.151.125.0/24 maxlen: 24
                          2602:fa7c:10::/44 maxlen: 44
                          2602:fa7c:100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:03:7d:54:6e:16:65:b3:ed:7b:50:eb:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c19a246-d9fa-481a-a4d7-010af8c132b3
        Validity
            Not Before: Feb 28 14:00:40 2026 GMT
            Not After : May 29 13:00:40 2026 GMT
        Subject: CN=881bb26f-d866-48f7-b1e8-129be8284823
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:75:8c:da:aa:8c:c4:3d:08:e0:c8:ae:76:cf:
                    12:7c:99:9a:82:82:00:5c:9b:ea:cc:4e:21:22:2e:
                    3c:be:5c:50:79:5e:ba:33:11:6f:b4:9f:db:fd:93:
                    e8:ac:23:00:28:30:19:0a:61:cf:8a:38:e1:32:a3:
                    2c:40:b2:07:27:6c:5f:8c:af:11:30:08:82:15:5c:
                    ea:f8:be:ad:ce:66:61:42:d4:b6:29:84:bb:f9:78:
                    93:83:b1:f5:bc:34:33:85:87:ca:9a:35:50:64:ef:
                    d8:9b:75:8f:0a:3e:89:b5:6d:59:2c:a8:cf:8c:7b:
                    b1:88:26:87:ac:8c:77:ce:ab:db:52:b3:89:6c:47:
                    ec:1b:f1:07:5a:ea:bf:35:31:62:17:da:10:87:2d:
                    9e:2c:7b:58:56:06:0c:d9:eb:c6:38:8e:ef:f4:e8:
                    da:8e:92:d5:c8:c2:73:98:52:a9:a6:16:18:f6:4f:
                    5f:1d:80:aa:b1:d0:7e:71:e9:f3:bf:be:15:2a:11:
                    98:57:59:eb:ad:36:dc:d5:87:ae:ba:6b:38:60:3b:
                    02:60:7c:34:77:f7:28:ce:00:b5:29:38:b7:53:1d:
                    1e:cb:c2:00:10:57:a5:c4:40:0b:b6:3b:e8:78:f0:
                    d8:e4:ce:96:ae:56:09:dc:bd:91:70:93:38:32:64:
                    1f:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:88:A6:58:E0:14:27:FB:7F:EC:53:FE:BF:4B:6E:90:04:99:BE:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5a66c245-1026-3b1c-b93a-be33fd9c87c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl

            X509v3 Authority Key Identifier:
                keyid:18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.99.44.0/24
                  209.151.125.0/24
                IPv6:
                  2602:fa7c:10::/44
                  2602:fa7c:100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:71:83:3e:1c:46:ec:53:f0:36:56:ba:cd:5a:cc:e9:fb:05:
         6c:92:4e:72:d0:0d:7d:24:95:37:ab:dc:82:a4:3a:c7:9a:ff:
         a0:01:7f:54:05:12:c4:d1:c1:f5:a2:2f:55:bf:71:42:7e:01:
         5b:49:db:6d:d0:3c:97:49:0b:63:9c:9d:6b:00:b5:ea:49:61:
         a1:72:70:67:1b:45:92:3f:30:69:bd:38:d0:50:aa:47:89:93:
         bd:b9:e9:1f:01:fe:b2:d7:d3:b3:a4:ef:e1:2b:18:f8:34:a0:
         90:71:6b:81:93:63:89:3f:4f:3e:2e:ca:1b:2f:3b:d0:a4:96:
         35:15:b1:5e:65:a6:bf:26:1c:ee:10:d7:04:d2:a5:dd:8c:ab:
         ce:b4:d7:8c:fd:72:be:45:8e:74:85:64:37:50:1a:70:52:62:
         ac:3f:d0:82:b7:fb:58:c3:53:a2:9a:1d:53:cc:06:8e:f8:c9:
         1e:5b:a6:ac:ac:bc:aa:a8:86:90:b4:2c:ec:74:65:d8:99:d6:
         19:34:ad:df:cf:a7:b1:0b:28:76:b3:d2:72:4f:76:89:f6:26:
         27:1f:66:19:3e:1f:08:3e:f6:22:25:df:ca:54:fb:fb:34:9b:
         b9:4d:9d:b7:18:ce:67:10:e4:57:bf:60:44:af:cc:d5:d8:07:
         a8:4e:a1:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:53:41 2026 by rpki-client