Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/f1d32fb4-228c-37d2-9751-57a3f0746694.roa
File:                     f1d32fb4-228c-37d2-9751-57a3f0746694.roa (raw, json)
Hash identifier:          oykf5jOiNeiymiEzSbiNw0ske8SYigHv4CpI2UK/4pk=
Subject key identifier:   0D:76:5E:1F:C7:28:F9:77:15:3B:99:6F:93:2F:56:3E:FA:28:2E:69
Certificate issuer:       /CN=8ad56193-8e33-4786-9a64-949338fc325a
Certificate serial:       010D0C9F4328584CE79229649BFB42C029269F00
Authority key identifier: 4A:6C:4F:37:D3:2A:B1:8E:70:1C:BD:06:EB:1B:C3:FB:6D:4E:57:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/f1d32fb4-228c-37d2-9751-57a3f0746694.roa
Signing time:             Wed 18 Feb 2026 14:00:41 +0000
ROA not before:           Wed 18 Feb 2026 14:00:41 +0000
ROA not after:            Tue 19 May 2026 13:00:41 +0000
asID:                     16509
IP address blocks:        209.114.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/8ad56193-8e33-4786-9a64-949338fc325a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/8ad56193-8e33-4786-9a64-949338fc325a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e7:92:29:64:9b:fb:42:c0:29:26:9f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ad56193-8e33-4786-9a64-949338fc325a
        Validity
            Not Before: Feb 18 14:00:41 2026 GMT
            Not After : May 19 13:00:41 2026 GMT
        Subject: CN=86ed3a14-9a07-42b2-8475-68a47b4d8f74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:8c:7d:df:ca:2a:db:78:47:00:2c:dd:fc:11:
                    80:a3:0c:a5:51:20:b3:93:82:ad:b3:54:c6:69:b7:
                    ce:9a:84:15:a5:4b:b1:6f:a4:ce:a2:ca:4a:18:29:
                    11:c1:c0:fe:0b:c6:0c:92:c6:a5:e7:21:14:8d:b7:
                    19:9e:ff:c1:85:15:83:85:e5:53:e4:de:9a:58:cd:
                    65:38:6a:bd:de:f6:a8:b8:83:6a:85:c8:e7:f0:e8:
                    ce:ff:af:36:58:0a:49:d4:96:9d:c2:07:11:82:29:
                    ec:32:f9:41:8a:69:a5:6d:70:d2:4d:1b:c6:80:b5:
                    08:0b:c0:75:0c:33:7f:bb:ad:a4:e9:a3:b1:d8:09:
                    f6:31:2a:bc:0f:bb:60:6a:30:1d:72:99:d5:03:bd:
                    e4:d3:4f:a5:54:97:3f:46:ac:05:86:5d:bc:94:e5:
                    bf:95:08:5f:cd:07:6c:f1:07:7e:29:41:b8:6e:7b:
                    e8:be:45:63:6d:58:2d:45:98:85:38:08:d1:42:b0:
                    9b:77:68:f8:c2:24:1d:d3:bd:ae:ca:c9:78:41:7d:
                    df:32:93:2a:e1:4c:54:a7:bc:4e:4b:93:fa:cd:76:
                    41:e7:1a:2c:7e:40:ab:c0:3e:23:c5:9f:63:60:14:
                    be:b1:38:cf:31:30:88:48:91:bd:34:54:48:ef:35:
                    57:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:76:5E:1F:C7:28:F9:77:15:3B:99:6F:93:2F:56:3E:FA:28:2E:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/f1d32fb4-228c-37d2-9751-57a3f0746694.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/8ad56193-8e33-4786-9a64-949338fc325a.crl

            X509v3 Authority Key Identifier:
                keyid:4A:6C:4F:37:D3:2A:B1:8E:70:1C:BD:06:EB:1B:C3:FB:6D:4E:57:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.114.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:31:aa:ce:35:be:ad:5b:cd:59:9b:60:3b:00:9f:05:39:d5:
         76:58:c6:d5:4d:20:59:15:4a:d3:7b:5f:0d:4c:31:2a:75:d2:
         90:09:76:ac:3f:4a:78:c0:08:7e:4d:00:09:0c:f7:5c:89:1e:
         f4:f7:0b:b2:b4:5d:37:d3:27:30:74:06:28:7c:d9:50:e3:21:
         6b:f0:8b:e2:d8:36:e5:f4:38:46:b2:86:19:57:32:02:b2:04:
         11:62:27:b5:0a:1f:6a:6f:01:bf:28:3e:41:70:21:7f:e9:17:
         70:f1:04:07:a3:e7:7d:33:83:8f:bb:19:14:b2:46:c8:39:e7:
         8a:c2:b8:af:91:63:d8:20:c5:c1:20:af:a6:8e:8b:d4:74:b4:
         6e:df:49:10:17:bc:af:d9:8c:fd:2d:c7:7a:54:05:b0:58:90:
         fa:00:46:a7:7f:d7:a5:34:07:95:38:79:59:31:a7:84:2f:ff:
         91:48:07:a0:fd:90:17:3e:85:8a:29:bf:d1:29:37:79:72:64:
         63:c4:ad:ec:48:32:d2:e1:e0:0c:d6:b3:eb:98:78:2f:9c:3f:
         d9:85:84:d5:de:73:87:b1:9f:44:3f:fa:3e:86:82:a2:44:17:
         03:0b:a4:6b:9d:d1:ad:b0:6b:fa:d8:fd:d2:8b:50:17:d9:79:
         bc:07:8a:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:45:07 2026 by rpki-client