Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/24ee7603-c18e-3075-87a3-2e79abe90370.roa
File:                     24ee7603-c18e-3075-87a3-2e79abe90370.roa (raw, json)
Hash identifier:          qN6ecY2WfnAOYIxypcyItsT5ec8A1iuptNKBFfvJjvo=
Subject key identifier:   90:7D:3F:CB:DE:C8:C8:BF:5A:34:DD:0F:94:E0:FC:8F:9D:51:30:AA
Certificate issuer:       /CN=8ad56193-8e33-4786-9a64-949338fc325a
Certificate serial:       010D0C9F4328584CC7773A276C00496603221480
Authority key identifier: 4A:6C:4F:37:D3:2A:B1:8E:70:1C:BD:06:EB:1B:C3:FB:6D:4E:57:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/24ee7603-c18e-3075-87a3-2e79abe90370.roa
Signing time:             Sat 07 Feb 2026 02:00:31 +0000
ROA not before:           Sat 07 Feb 2026 02:00:31 +0000
ROA not after:            Fri 08 May 2026 01:00:31 +0000
asID:                     14618
IP address blocks:        209.114.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/8ad56193-8e33-4786-9a64-949338fc325a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/8ad56193-8e33-4786-9a64-949338fc325a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c7:77:3a:27:6c:00:49:66:03:22:14:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ad56193-8e33-4786-9a64-949338fc325a
        Validity
            Not Before: Feb  7 02:00:31 2026 GMT
            Not After : May  8 01:00:31 2026 GMT
        Subject: CN=116271fb-4746-4d18-bddc-5d865d630ef9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:ff:5f:de:4b:77:cb:2f:75:75:a2:14:5b:89:
                    91:f8:3f:9e:c0:e3:70:d7:c6:cc:22:92:d3:81:6d:
                    40:82:dd:9d:79:64:72:53:d2:6e:06:da:aa:0e:1c:
                    52:a8:5d:f3:ab:d1:97:7c:5f:f0:ad:d5:ab:e8:d8:
                    0a:ea:32:a7:d6:6d:73:7b:b6:c7:0e:53:2f:24:29:
                    cb:38:ad:29:ba:25:e8:0b:02:f3:a5:70:c2:f2:63:
                    31:2b:a5:7e:b5:4c:f0:57:d0:a9:83:8f:18:f9:f0:
                    8e:d4:5a:19:7f:6b:ba:86:68:11:c6:3f:36:86:0a:
                    0f:53:c3:27:26:94:ff:88:fd:af:d5:a5:2d:1d:a1:
                    b5:56:66:c1:a4:41:52:08:52:25:b3:78:31:d8:21:
                    d6:7b:f6:c8:7f:6f:89:67:18:69:0f:a4:89:24:7a:
                    2a:f9:06:34:28:cf:30:2e:3d:d1:c3:eb:ce:1b:0e:
                    f5:73:e7:6f:6f:f4:25:6a:29:e8:b9:80:b9:ed:d2:
                    6a:a0:c5:96:1d:3f:1e:f1:eb:84:63:10:c2:7c:2e:
                    fd:ed:32:d4:04:a6:a8:e4:82:d3:48:e4:8f:89:16:
                    33:9e:6b:59:71:b2:27:4f:d9:17:77:81:10:f5:0f:
                    ab:1d:95:23:f8:9e:c8:7e:e8:24:77:1c:ba:a5:ff:
                    69:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:7D:3F:CB:DE:C8:C8:BF:5A:34:DD:0F:94:E0:FC:8F:9D:51:30:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/24ee7603-c18e-3075-87a3-2e79abe90370.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/8ad56193-8e33-4786-9a64-949338fc325a.crl

            X509v3 Authority Key Identifier:
                keyid:4A:6C:4F:37:D3:2A:B1:8E:70:1C:BD:06:EB:1B:C3:FB:6D:4E:57:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.114.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:82:fc:2d:dc:7c:35:6e:47:01:83:b9:9d:ce:4f:8a:ee:d7:
         31:bf:0d:d5:63:45:a7:66:a2:e7:28:bf:76:86:b5:1c:de:b8:
         dc:42:15:fa:23:60:d0:56:cb:8c:0e:44:54:fe:f4:7c:09:33:
         1e:ae:bc:33:63:85:97:fe:81:22:1b:3d:1f:35:87:e6:0e:dd:
         9e:80:da:b8:88:2b:a2:34:fc:10:3a:57:f8:b2:7e:5c:25:55:
         0d:0c:90:d5:b6:82:61:99:07:62:a2:cd:98:47:02:53:bd:1f:
         20:68:60:90:1f:8d:59:c0:23:81:62:2c:8a:94:f0:f9:a2:88:
         9a:80:a7:f2:b7:24:53:a6:fa:e9:29:24:31:78:25:98:d5:31:
         fb:ed:a4:89:fa:97:06:74:e3:03:39:13:17:f2:ae:c8:07:da:
         43:f8:53:e5:51:e8:dd:bf:b8:b6:23:58:19:0d:ba:ce:67:5c:
         9b:29:a0:b9:d9:51:e9:b7:e2:f6:e6:61:d4:e3:f8:a4:bf:b6:
         bf:8e:a8:82:bc:66:44:5d:88:51:5b:e6:0b:3c:11:2a:4d:4a:
         76:9e:8c:9d:67:c0:4e:3b:91:36:6c:2b:ad:f4:50:48:f6:12:
         88:4b:21:53:99:14:04:33:56:50:0a:1e:e0:35:a6:ee:81:61:
         d5:fe:e0:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:26:59 2026 by rpki-client