Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/a5c4b647-d02b-36a5-aaaf-c0af27ad1733.roa
File:                     a5c4b647-d02b-36a5-aaaf-c0af27ad1733.roa (raw, json)
Hash identifier:          RviBiIWGv6MulBI4dtfpIugxRptUkXmCVqhhfNFh4PU=
Subject key identifier:   40:05:8C:40:39:F4:35:55:23:C0:80:22:2D:EC:34:FE:B8:8A:60:F8
Certificate issuer:       /CN=c4668147-a71b-4fb3-9ed9-e1e04061bbdd
Certificate serial:       010D0C9F4328584CED27BE6CC537F0BA347F5B40
Authority key identifier: 25:2C:65:D1:2B:2B:E5:A6:80:45:38:98:E0:6B:67:DB:F5:0A:EE:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/a5c4b647-d02b-36a5-aaaf-c0af27ad1733.roa
Signing time:             Fri 20 Feb 2026 14:00:41 +0000
ROA not before:           Fri 20 Feb 2026 14:00:41 +0000
ROA not after:            Thu 21 May 2026 13:00:41 +0000
asID:                     62246
IP address blocks:        199.188.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/c4668147-a71b-4fb3-9ed9-e1e04061bbdd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/c4668147-a71b-4fb3-9ed9-e1e04061bbdd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ed:27:be:6c:c5:37:f0:ba:34:7f:5b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4668147-a71b-4fb3-9ed9-e1e04061bbdd
        Validity
            Not Before: Feb 20 14:00:41 2026 GMT
            Not After : May 21 13:00:41 2026 GMT
        Subject: CN=d19c377b-628d-4f79-9792-91e5cdaa21e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:15:65:23:26:b0:d2:5f:2a:42:5a:65:08:39:
                    3b:62:bd:b0:56:93:e2:ad:58:f2:3b:ec:cf:71:7e:
                    f2:39:f1:26:33:d8:91:3e:7b:65:df:18:9f:08:90:
                    dd:78:95:58:31:1c:7b:a3:c0:de:2e:ee:01:dd:d8:
                    59:13:5f:f1:ec:80:49:11:32:50:dd:f2:38:14:7d:
                    ee:82:a3:13:fd:7e:3c:22:33:ca:00:58:f8:5e:99:
                    68:21:3f:c4:1d:6b:7b:58:86:3d:d4:44:85:d2:2b:
                    b4:b4:02:7f:8e:2e:a5:ba:0c:e8:95:75:91:44:14:
                    e0:f2:08:e7:f5:86:26:a1:fb:ad:7d:fe:77:07:9b:
                    99:9b:b5:c9:eb:c2:8c:4d:5a:41:eb:36:c8:b7:65:
                    86:ba:9e:0d:ba:89:94:44:bd:40:f2:c8:52:22:63:
                    2c:b8:8c:0d:6f:80:06:ef:09:9d:37:2f:2a:e1:e2:
                    01:f2:0e:96:69:7b:16:2a:fe:ac:74:bf:34:04:52:
                    d9:9b:4f:08:40:15:41:f3:ef:5b:37:f7:a1:a8:95:
                    bc:ee:f4:06:a6:38:21:68:5a:c0:36:a3:38:fc:d6:
                    6f:1b:dd:35:5c:c0:fc:02:70:ab:f8:dc:71:ea:a0:
                    4f:18:83:87:50:29:c3:48:02:80:70:38:82:38:85:
                    16:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:05:8C:40:39:F4:35:55:23:C0:80:22:2D:EC:34:FE:B8:8A:60:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/a5c4b647-d02b-36a5-aaaf-c0af27ad1733.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/c4668147-a71b-4fb3-9ed9-e1e04061bbdd.crl

            X509v3 Authority Key Identifier:
                keyid:25:2C:65:D1:2B:2B:E5:A6:80:45:38:98:E0:6B:67:DB:F5:0A:EE:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.188.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:db:15:bf:73:b9:8f:ee:fc:bd:c9:3c:ca:ed:a8:86:e7:83:
         b5:6e:17:c3:1b:97:ce:62:ea:51:1a:2d:c3:ea:23:61:2b:45:
         ac:39:1a:19:2e:ba:5a:9e:c8:1e:c3:60:d7:be:e5:c0:34:7c:
         2d:bc:74:4a:ec:d0:4a:94:7b:4c:1f:00:6d:12:b9:55:b5:ba:
         19:1f:e6:25:df:82:e8:cf:2d:97:6d:fb:44:30:0c:2b:d6:37:
         75:1d:7f:ec:b0:37:ec:0a:9b:c2:31:36:c8:b1:b6:c4:8e:21:
         99:64:63:0b:3c:fd:d0:40:a0:74:4a:4c:30:12:98:23:15:a7:
         16:30:1f:ef:2a:ba:e5:d1:9a:41:d3:8e:74:ee:0b:aa:c4:e0:
         c0:bf:66:fc:df:c9:d6:c1:25:f4:af:9f:bd:52:ea:4a:80:1d:
         7b:41:8f:fb:c7:8b:d7:2a:1a:03:b9:52:35:6b:0d:88:99:93:
         c8:84:5d:a1:14:e4:47:5e:f0:f2:c9:5f:aa:26:9f:bc:0e:37:
         c2:8d:fb:7f:5d:8b:a9:15:87:b0:85:cc:82:89:1c:a5:53:df:
         f3:e2:6d:f4:17:76:ae:a7:77:a6:3e:6e:17:e9:43:9d:23:64:
         9b:0b:35:6e:5f:fd:08:6f:8e:6f:27:68:47:40:da:31:5d:1f:
         35:5a:59:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:28:31 2026 by rpki-client