Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/1844e6db-be81-3a39-9aae-5a47a24abd44.roa
File:                     1844e6db-be81-3a39-9aae-5a47a24abd44.roa (raw, json)
Hash identifier:          tPjq4ZsjDWISMTsNJZvSkyduud3hoMW4NdUtE364YC0=
Subject key identifier:   4E:DA:B9:19:20:0E:90:0B:DB:4D:4A:49:B9:9B:90:F5:40:0C:E0:EB
Certificate issuer:       /CN=5da1b383-f975-4fb1-9ce6-e43611eafa1a
Certificate serial:       010D0C9F4328584CD6FC64AFFC4901A30C656F80
Authority key identifier: A2:6C:1C:4F:B6:21:94:6F:FA:A6:86:8E:E6:28:2B:79:CE:34:1F:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/1844e6db-be81-3a39-9aae-5a47a24abd44.roa
Signing time:             Thu 12 Feb 2026 15:26:10 +0000
ROA not before:           Thu 12 Feb 2026 15:26:10 +0000
ROA not after:            Wed 13 May 2026 14:26:10 +0000
asID:                     400662
IP address blocks:        98.142.64.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/5da1b383-f975-4fb1-9ce6-e43611eafa1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/5da1b383-f975-4fb1-9ce6-e43611eafa1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d6:fc:64:af:fc:49:01:a3:0c:65:6f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5da1b383-f975-4fb1-9ce6-e43611eafa1a
        Validity
            Not Before: Feb 12 15:26:10 2026 GMT
            Not After : May 13 14:26:10 2026 GMT
        Subject: CN=a8625f67-d81f-4d3e-96aa-14c8dbf6db56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:b9:dd:5e:31:1c:7b:02:60:85:be:83:66:9c:
                    7c:ed:f5:9c:0f:ed:06:f3:c8:4c:40:7b:21:71:bd:
                    52:58:87:7d:7b:a3:a9:c2:6a:f3:63:6a:02:0c:bd:
                    c6:66:46:fa:61:be:76:e0:a0:99:c1:b7:66:e7:d1:
                    6b:5e:6c:59:a1:30:65:99:f7:0d:2d:91:1f:3d:5f:
                    0b:37:a5:07:88:7f:02:5e:04:b5:f1:67:18:a5:ca:
                    27:f0:9e:60:c4:dc:2a:be:56:0f:71:15:24:03:2d:
                    a4:0a:dc:3b:ee:d7:3f:20:c2:b7:9b:90:84:84:0e:
                    9e:5d:05:0d:6c:2c:d1:96:bf:8d:c3:31:a5:ab:c3:
                    30:65:cd:aa:5d:20:b3:36:e9:65:82:74:c3:00:7f:
                    70:96:6f:53:0c:e0:db:da:67:57:47:93:ec:d2:5c:
                    86:24:78:26:0c:c2:3a:e4:9c:13:b6:52:1c:57:0c:
                    3e:85:ff:48:fd:a8:d3:e4:d6:6b:ca:ee:86:f1:fe:
                    63:8c:ca:20:e7:93:28:7b:9f:99:c6:e2:3f:15:67:
                    eb:b2:a4:d4:31:e3:be:a3:8a:29:ef:96:f4:1a:05:
                    ba:bb:21:22:b1:d6:46:06:64:eb:ce:8e:b0:bb:52:
                    f1:81:73:ec:96:fa:25:6c:6f:98:33:a0:d1:f1:7d:
                    e7:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:DA:B9:19:20:0E:90:0B:DB:4D:4A:49:B9:9B:90:F5:40:0C:E0:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/1844e6db-be81-3a39-9aae-5a47a24abd44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/5da1b383-f975-4fb1-9ce6-e43611eafa1a.crl

            X509v3 Authority Key Identifier:
                keyid:A2:6C:1C:4F:B6:21:94:6F:FA:A6:86:8E:E6:28:2B:79:CE:34:1F:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.142.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:36:be:14:aa:f3:03:d7:dd:a2:9c:07:fb:b8:e0:4d:f8:1f:
         14:17:b2:91:d5:85:25:c8:9a:35:a9:e8:c0:91:3f:7e:4d:b2:
         b8:1d:ba:a1:f5:e1:89:c9:0b:f7:0f:9f:ed:be:e2:0a:2e:60:
         99:a3:22:91:f9:48:82:47:62:b3:30:d6:53:dc:d9:37:76:27:
         7f:18:b3:62:e5:c4:02:ab:57:7e:6a:9c:37:11:a1:01:6f:6c:
         dd:9b:e4:53:de:f7:74:32:93:c3:ff:77:25:7f:cd:36:a5:b6:
         8e:7d:48:9e:59:2f:26:d9:6e:22:9d:e4:2f:4a:cb:69:61:a1:
         fc:bb:5d:fb:38:a7:ac:01:f3:df:80:d8:f7:84:88:8f:ca:85:
         e9:fc:8c:29:d8:0d:70:7a:95:48:5b:86:61:83:89:c9:69:50:
         0b:0e:df:af:3e:c8:7c:3a:b5:a7:84:f3:64:c8:68:64:2c:34:
         d9:96:7c:3d:76:4a:60:00:6d:f1:fe:82:92:a7:a9:34:a0:82:
         4e:64:9f:1a:43:41:dd:98:c3:90:8b:3f:d3:8c:df:cd:a3:58:
         91:26:cf:d4:d3:57:39:85:d9:9c:38:fa:d4:d6:35:66:9c:e8:
         c7:16:cb:a8:5b:2d:de:50:77:be:07:dc:f5:f1:0f:bd:fb:2a:
         96:76:6b:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:06:48 2026 by rpki-client