Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/01b2d667-c096-462f-9ad9-6391b09e9746/2dd74a6d-3813-3171-a4e0-9bf74f942879.roa
File:                     2dd74a6d-3813-3171-a4e0-9bf74f942879.roa (raw, json)
Hash identifier:          fbSyRM3/EhVrPw2U9N6xJ9b4JOf/heRF/XY2B/6EGzs=
Subject key identifier:   4C:32:38:5C:33:C1:14:F9:63:BF:7C:11:9B:85:75:9F:A0:70:77:13
Certificate issuer:       /CN=01b2d667-c096-462f-9ad9-6391b09e9746
Certificate serial:       010D0C9F4328584CEBC237CAEF0329D9DF7DE2D0
Authority key identifier: EF:55:74:99:02:9B:7D:CA:4F:EF:EE:5F:8A:11:58:6F:46:D7:2F:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/01b2d667-c096-462f-9ad9-6391b09e9746.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/01b2d667-c096-462f-9ad9-6391b09e9746/2dd74a6d-3813-3171-a4e0-9bf74f942879.roa
Signing time:             Fri 20 Feb 2026 02:00:32 +0000
ROA not before:           Fri 20 Feb 2026 02:00:32 +0000
ROA not after:            Thu 21 May 2026 01:00:32 +0000
asID:                     42831
IP address blocks:        199.59.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/01b2d667-c096-462f-9ad9-6391b09e9746/01b2d667-c096-462f-9ad9-6391b09e9746.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/01b2d667-c096-462f-9ad9-6391b09e9746/01b2d667-c096-462f-9ad9-6391b09e9746.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/01b2d667-c096-462f-9ad9-6391b09e9746.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:eb:c2:37:ca:ef:03:29:d9:df:7d:e2:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01b2d667-c096-462f-9ad9-6391b09e9746
        Validity
            Not Before: Feb 20 02:00:32 2026 GMT
            Not After : May 21 01:00:32 2026 GMT
        Subject: CN=65884a6a-8623-4795-bf19-e5cae2f03dc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:6e:84:e7:26:29:84:92:f7:b2:ef:09:8e:ff:
                    ab:74:37:14:f1:45:ad:43:3b:08:5c:7f:26:0b:48:
                    b2:03:86:78:4b:0f:29:7a:3e:55:be:8f:f6:5c:ff:
                    d3:01:55:aa:e5:cf:ae:37:d3:2c:e1:44:d9:2e:dc:
                    23:74:d8:ef:6d:44:60:01:d8:32:ab:3a:79:d4:1e:
                    b0:e2:23:23:f7:b5:77:96:cf:a6:b3:41:40:ba:11:
                    67:a8:64:de:5c:59:6b:8e:5e:5f:05:ee:c5:e9:27:
                    82:49:c7:f8:fe:d6:6c:d7:4b:8d:3c:0e:c9:36:6e:
                    cc:fe:e8:a4:d5:a9:af:6f:31:f0:09:cb:b0:86:c2:
                    48:2e:3c:48:18:ba:33:3c:ce:6e:97:b5:8d:ce:29:
                    f1:2a:88:b3:94:ff:fa:b2:19:43:0e:7a:ff:0f:1c:
                    e7:b6:4e:7d:27:6c:4b:6b:94:a0:f5:16:d8:dc:17:
                    e3:52:ca:78:e2:03:26:67:f8:93:50:14:8b:ed:0b:
                    8f:ea:55:2d:20:8b:f5:bf:23:76:69:d0:92:2c:69:
                    47:85:3f:99:9e:47:24:b5:de:e5:7e:e5:db:f6:1e:
                    00:c7:25:bf:cc:8b:cc:f7:97:6e:22:9d:9d:7a:3a:
                    35:2d:02:48:b8:f6:52:71:e1:e0:c1:59:41:89:e6:
                    85:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:32:38:5C:33:C1:14:F9:63:BF:7C:11:9B:85:75:9F:A0:70:77:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/01b2d667-c096-462f-9ad9-6391b09e9746/2dd74a6d-3813-3171-a4e0-9bf74f942879.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/01b2d667-c096-462f-9ad9-6391b09e9746/01b2d667-c096-462f-9ad9-6391b09e9746.crl

            X509v3 Authority Key Identifier:
                keyid:EF:55:74:99:02:9B:7D:CA:4F:EF:EE:5F:8A:11:58:6F:46:D7:2F:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/01b2d667-c096-462f-9ad9-6391b09e9746.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.59.181.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:1c:68:56:d4:5b:db:f4:9c:33:8d:63:7e:8d:77:78:0e:b0:
         fd:75:4d:f6:e4:69:69:9e:a7:ae:c0:85:d3:ec:45:1d:b0:c2:
         81:31:1f:e9:55:3a:37:e2:dc:1b:03:27:00:75:f6:c5:54:d2:
         19:c5:0b:bb:a4:5a:06:1a:da:f7:8d:33:c6:6e:da:8e:23:6e:
         4e:ae:87:18:34:f4:e1:fc:34:63:49:a1:4a:8a:09:f4:fe:23:
         17:ad:d9:67:86:0a:d9:66:62:0d:d8:7a:d3:8b:46:35:f2:cd:
         3d:6a:0a:3b:83:c5:97:67:1d:0f:f0:5c:09:c8:b5:cf:80:a9:
         b0:34:81:24:15:9c:08:57:df:cd:58:1a:72:0c:8e:78:c6:31:
         72:b1:a9:4a:50:6d:52:98:53:72:eb:5b:c1:bd:d1:10:2a:cf:
         c2:8a:27:1c:d0:e9:c1:d8:29:fa:02:b8:2a:27:32:34:d5:71:
         49:1e:da:2b:37:05:aa:9e:38:58:0d:7d:96:92:76:89:ce:4f:
         97:33:b1:33:ac:30:81:c9:72:02:1b:31:85:02:51:86:cf:75:
         79:76:70:79:2b:5e:45:05:e2:ed:e5:f5:88:05:df:89:e1:63:
         49:bb:11:ed:09:f2:c4:80:c4:c5:d7:43:76:0e:1c:4a:64:b7:
         d8:db:21:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:14:58 2026 by rpki-client