Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fb8e9f00-13c9-406e-9c03-d71cd386c086/c84238dc-4927-30ce-80e8-d4213dd4be12.roa
File:                     c84238dc-4927-30ce-80e8-d4213dd4be12.roa (raw, json)
Hash identifier:          pElnTDi5vrrkJIbSU8i5m6nJAapwl1MyAXbFJkiTZIY=
Subject key identifier:   73:7C:40:53:6B:D9:E0:33:7F:12:9B:75:4D:1B:47:0C:E0:9E:31:2D
Certificate issuer:       /CN=fb8e9f00-13c9-406e-9c03-d71cd386c086
Certificate serial:       010D0C9F4328584CDC677A7C40A9C2E8EB270600
Authority key identifier: 88:9A:AF:B4:41:CD:EB:C5:CC:85:1D:00:F8:39:57:55:95:34:B4:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fb8e9f00-13c9-406e-9c03-d71cd386c086.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fb8e9f00-13c9-406e-9c03-d71cd386c086/c84238dc-4927-30ce-80e8-d4213dd4be12.roa
Signing time:             Sat 14 Feb 2026 14:00:41 +0000
ROA not before:           Sat 14 Feb 2026 14:00:41 +0000
ROA not after:            Fri 15 May 2026 13:00:41 +0000
asID:                     14618
IP address blocks:        198.89.26.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fb8e9f00-13c9-406e-9c03-d71cd386c086/fb8e9f00-13c9-406e-9c03-d71cd386c086.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fb8e9f00-13c9-406e-9c03-d71cd386c086/fb8e9f00-13c9-406e-9c03-d71cd386c086.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fb8e9f00-13c9-406e-9c03-d71cd386c086.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:dc:67:7a:7c:40:a9:c2:e8:eb:27:06:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb8e9f00-13c9-406e-9c03-d71cd386c086
        Validity
            Not Before: Feb 14 14:00:41 2026 GMT
            Not After : May 15 13:00:41 2026 GMT
        Subject: CN=2ce82307-2b48-476e-87c6-5f6c03dc039a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:91:82:ba:98:19:53:6f:14:ef:95:14:5d:e3:
                    4e:10:c1:4b:af:4f:c6:fd:9d:d3:7e:3c:e3:06:67:
                    98:6e:0e:b3:02:b9:44:72:06:07:ec:44:e6:71:e8:
                    15:80:ea:5a:fd:be:09:6a:42:cf:c2:a0:6a:b7:90:
                    6c:3b:d0:50:1c:5c:09:9d:59:6f:e8:b7:07:1a:f4:
                    96:85:9e:be:c3:3b:44:96:4d:44:74:5b:2b:20:ca:
                    aa:2a:52:ab:f2:81:00:dd:88:6f:a9:c5:92:15:a9:
                    c4:8e:da:ee:9a:d9:10:e1:4f:72:c2:3d:1e:f2:76:
                    44:b8:84:4b:ba:d0:b6:ef:58:93:01:87:05:37:aa:
                    d9:13:7c:16:28:0c:00:89:d0:40:2d:f2:ce:72:04:
                    00:b4:e7:43:ec:11:6e:0c:a8:2a:7b:c2:d8:4c:e7:
                    69:95:4e:2a:9b:8b:b1:cd:79:e9:2d:7d:6b:76:a3:
                    cc:14:7b:3b:bd:a8:11:86:e0:4c:81:03:25:56:22:
                    3c:d7:a7:c1:52:79:47:5d:cc:df:0f:65:c6:b8:3f:
                    5f:a9:96:a5:9b:e1:a9:7a:41:ad:b3:48:cd:3f:d5:
                    8c:b2:17:c5:6c:87:fb:0f:bd:98:6c:ff:7d:4f:af:
                    ae:5e:0f:12:a6:df:51:ec:35:e7:d2:45:87:1a:8b:
                    94:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:7C:40:53:6B:D9:E0:33:7F:12:9B:75:4D:1B:47:0C:E0:9E:31:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fb8e9f00-13c9-406e-9c03-d71cd386c086/c84238dc-4927-30ce-80e8-d4213dd4be12.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fb8e9f00-13c9-406e-9c03-d71cd386c086/fb8e9f00-13c9-406e-9c03-d71cd386c086.crl

            X509v3 Authority Key Identifier:
                keyid:88:9A:AF:B4:41:CD:EB:C5:CC:85:1D:00:F8:39:57:55:95:34:B4:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fb8e9f00-13c9-406e-9c03-d71cd386c086.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.89.26.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:54:02:ac:e4:8f:03:c4:e4:0c:c3:35:40:18:ec:a9:9e:16:
         01:19:aa:2f:91:76:6b:03:68:c7:df:25:ad:a1:03:81:47:e6:
         5e:26:ea:47:1d:d0:56:6a:4e:6f:8b:8e:e6:05:a6:91:c4:e2:
         c6:39:32:71:c8:dd:1a:30:de:a8:2e:2e:a4:ba:1f:86:5a:6d:
         f1:fc:f4:e4:ef:11:27:03:55:7b:85:51:68:bb:a9:d7:d6:36:
         54:97:e4:d2:10:7f:97:c4:af:08:16:24:28:21:7d:8a:21:46:
         40:b6:42:5d:6b:4d:9d:9b:96:45:33:ff:c9:a6:56:6c:d6:de:
         fd:d0:20:0c:c4:da:25:f3:73:c5:4d:a6:a5:c2:30:65:e8:0d:
         95:22:04:51:61:42:93:21:54:cc:ba:fb:0c:59:64:6b:53:b8:
         c3:5e:43:8d:39:5a:86:c3:7d:a9:7c:f9:3e:38:ca:37:62:6b:
         cd:cc:c4:04:6a:bc:bd:be:4e:08:10:4f:c5:da:3a:40:07:84:
         32:a4:44:d8:9f:34:27:1c:4d:9f:fb:b7:97:cb:71:ff:d2:91:
         38:45:9a:93:d8:80:ec:88:03:2e:10:0c:5a:9c:32:9f:59:60:
         b5:2e:78:ab:41:df:47:5f:8e:56:9d:09:2c:e8:4c:67:96:bf:
         1c:83:f6:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:52:23 2026 by rpki-client