Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d/7e9397a4-08c0-3c94-9105-d3aa6a292f94.roa
File:                     7e9397a4-08c0-3c94-9105-d3aa6a292f94.roa (raw, json)
Hash identifier:          GXD3NSl1a3L51aiwnI3OodDadGhiT1OAONJSk1X9nrg=
Subject key identifier:   89:5E:68:99:DC:E6:1C:4D:CD:AE:7B:CE:9D:BC:72:9A:CD:11:49:D7
Certificate issuer:       /CN=0ea67b9e-1c99-4b1c-8c50-055c10d4d55d
Certificate serial:       010D0C9F4328584CFC823BB84E495CD5837CAF80
Authority key identifier: 8F:F9:BD:64:62:6F:68:AD:4F:51:81:74:78:57:9D:54:4A:A0:29:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d/7e9397a4-08c0-3c94-9105-d3aa6a292f94.roa
Signing time:             Thu 26 Feb 2026 02:00:32 +0000
ROA not before:           Thu 26 Feb 2026 02:00:32 +0000
ROA not after:            Wed 27 May 2026 01:00:32 +0000
asID:                     14618
IP address blocks:        206.219.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fc:82:3b:b8:4e:49:5c:d5:83:7c:af:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ea67b9e-1c99-4b1c-8c50-055c10d4d55d
        Validity
            Not Before: Feb 26 02:00:32 2026 GMT
            Not After : May 27 01:00:32 2026 GMT
        Subject: CN=cda65e42-5ebf-490a-b1da-9e1734da111a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6f:6e:44:96:4c:01:c5:fb:14:5e:84:49:f0:
                    07:fd:c4:85:8d:b2:c4:8e:cd:29:0d:49:63:a5:87:
                    40:3d:3b:7c:98:0b:e1:74:a6:b0:0e:82:8b:a0:72:
                    e4:09:7d:b3:dd:b7:2b:0b:26:3f:2d:15:04:87:47:
                    17:80:a7:d7:5d:c8:7b:40:92:2c:72:73:8f:82:0b:
                    b1:26:87:64:81:cc:46:14:c1:59:37:d1:f1:61:1f:
                    ea:05:0f:4a:db:b0:5c:37:c0:f7:ce:6e:02:67:e7:
                    f2:2c:86:f5:ed:c7:0d:ff:f4:31:00:2a:c2:7c:7c:
                    16:af:1b:2c:bf:95:a7:5d:a2:9c:49:8e:98:1e:3c:
                    30:26:d0:c3:c8:92:e6:ef:33:7c:31:7e:de:bc:e9:
                    10:9d:83:92:92:8d:18:29:7f:b1:70:8f:14:c3:f1:
                    f2:b6:f1:f1:ee:6b:b6:90:ef:cd:19:65:3d:31:39:
                    34:31:ec:65:5e:18:6d:f0:44:6e:f2:dd:c2:89:d6:
                    8a:d1:9e:36:64:e7:45:66:61:ab:e7:d2:5f:81:4c:
                    9f:e4:33:2c:81:4c:20:a7:3b:8f:17:d4:e5:18:cb:
                    24:1c:59:21:3b:f5:ee:49:34:f7:19:f9:21:c2:be:
                    a4:2a:db:10:cf:b5:9f:dd:1f:a3:0f:d7:29:e9:36:
                    0d:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:5E:68:99:DC:E6:1C:4D:CD:AE:7B:CE:9D:BC:72:9A:CD:11:49:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d/7e9397a4-08c0-3c94-9105-d3aa6a292f94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d.crl

            X509v3 Authority Key Identifier:
                keyid:8F:F9:BD:64:62:6F:68:AD:4F:51:81:74:78:57:9D:54:4A:A0:29:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.219.228.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:21:ea:98:fa:55:68:fb:68:d0:5b:20:46:25:6e:f5:5a:7e:
         f1:58:3b:31:93:76:5b:9c:be:d8:dd:d1:63:ec:fb:68:77:2f:
         3e:3d:26:8d:b7:66:ef:05:8e:ac:64:3f:ea:d5:ba:bc:e2:26:
         51:52:ea:15:bf:69:6a:52:54:f3:d8:ca:09:1c:70:e6:6e:70:
         74:fe:d6:bb:33:0b:9e:16:7b:12:85:e6:4b:ad:3b:6c:01:87:
         49:7d:55:4d:b9:5c:a4:93:d5:ad:9b:bf:28:2a:0d:5a:93:fa:
         77:80:cf:d3:08:98:7b:55:37:c3:cb:8d:68:24:82:bc:5d:ce:
         bb:60:36:75:83:5e:ea:d7:75:7d:ad:9e:af:aa:40:9f:b5:f7:
         ef:5a:01:a5:59:00:e2:20:a4:16:63:e7:b6:51:da:70:f1:48:
         a7:a3:f0:51:7e:bb:6a:f3:d3:bb:d3:21:5a:35:74:59:cf:9f:
         5b:b4:54:b6:dd:95:ba:21:45:ab:e6:bb:0e:c7:a4:7d:76:20:
         fb:3a:9c:e0:06:85:83:18:ff:9a:a6:c3:ae:b7:ba:67:f5:ef:
         0e:d4:55:ca:18:bd:c5:96:f6:a8:e9:49:b4:2b:bd:29:fd:11:
         f2:63:84:56:b1:84:be:d7:fc:91:10:f7:17:0d:26:29:5f:2a:
         be:c5:e9:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:26:50 2026 by rpki-client