Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6341495d-ab3a-4984-a14c-2944926df2c2/eebdb88b-3032-3ce5-8494-c2359744e382.roa
File:                     eebdb88b-3032-3ce5-8494-c2359744e382.roa (raw, json)
Hash identifier:          vvhCTCc4KabOBX3ndPSb/SMlfEtehRCXf1c/xtsXHl0=
Subject key identifier:   B2:4D:C7:AA:90:AA:4C:D6:D5:C5:A0:91:76:CB:3E:47:08:94:79:CD
Certificate issuer:       /CN=6341495d-ab3a-4984-a14c-2944926df2c2
Certificate serial:       010D0C9F4328584CF6ECE0C226E92BB98D7A2400
Authority key identifier: 76:15:D4:FA:C5:B7:9B:11:8B:00:53:7D:39:D9:3F:29:A7:E1:DE:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6341495d-ab3a-4984-a14c-2944926df2c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6341495d-ab3a-4984-a14c-2944926df2c2/eebdb88b-3032-3ce5-8494-c2359744e382.roa
Signing time:             Tue 24 Feb 2026 02:00:31 +0000
ROA not before:           Tue 24 Feb 2026 02:00:31 +0000
ROA not after:            Mon 25 May 2026 01:00:31 +0000
asID:                     8075
IP address blocks:        168.208.48.0/24 maxlen: 24
                          168.208.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6341495d-ab3a-4984-a14c-2944926df2c2/6341495d-ab3a-4984-a14c-2944926df2c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6341495d-ab3a-4984-a14c-2944926df2c2/6341495d-ab3a-4984-a14c-2944926df2c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6341495d-ab3a-4984-a14c-2944926df2c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f6:ec:e0:c2:26:e9:2b:b9:8d:7a:24:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6341495d-ab3a-4984-a14c-2944926df2c2
        Validity
            Not Before: Feb 24 02:00:31 2026 GMT
            Not After : May 25 01:00:31 2026 GMT
        Subject: CN=ef1ff03d-1654-4e4b-9ec6-c6d2df780a48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:78:16:b8:9f:80:82:f9:08:c4:f0:cd:d2:13:
                    20:39:ee:3a:4f:1e:09:e6:b1:7e:ef:3e:bf:ea:15:
                    d2:7c:d7:79:e1:dd:10:92:1c:e6:9c:ce:d6:4c:ed:
                    5a:fe:d4:0a:ef:e6:27:f7:2c:da:ac:97:e5:2d:dd:
                    8e:aa:aa:34:1e:1f:a7:36:b7:87:84:c1:e3:b3:72:
                    00:d7:53:89:9c:05:a8:c5:22:be:1b:a0:19:f2:74:
                    08:75:c2:08:b4:09:97:8c:5d:b8:8a:ca:18:ed:59:
                    16:fe:f1:08:27:d9:6d:b1:41:79:6b:0b:45:60:1c:
                    2b:ee:72:4f:cc:93:b0:54:b7:d6:fe:dd:0f:29:d7:
                    ac:b6:4b:52:64:04:6e:31:b0:b6:14:c3:60:d4:3a:
                    0c:76:d4:3a:e0:84:d0:5a:f8:ff:4c:ac:0d:9f:c5:
                    46:43:cd:72:fb:15:89:5b:70:9d:15:39:66:6f:0b:
                    db:26:aa:21:ad:a5:14:24:6f:fb:9f:26:1b:1a:f0:
                    83:8f:bb:e7:c5:50:9a:b0:14:5e:f9:3b:8d:5c:b1:
                    6e:91:6c:26:d8:3a:45:db:6b:75:13:e6:eb:ef:78:
                    bb:22:ee:a1:e6:ab:73:e7:bc:b3:4b:58:39:c0:ef:
                    7b:53:95:fd:51:c4:aa:5c:ee:fe:d9:15:10:3f:fb:
                    be:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:4D:C7:AA:90:AA:4C:D6:D5:C5:A0:91:76:CB:3E:47:08:94:79:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6341495d-ab3a-4984-a14c-2944926df2c2/eebdb88b-3032-3ce5-8494-c2359744e382.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6341495d-ab3a-4984-a14c-2944926df2c2/6341495d-ab3a-4984-a14c-2944926df2c2.crl

            X509v3 Authority Key Identifier:
                keyid:76:15:D4:FA:C5:B7:9B:11:8B:00:53:7D:39:D9:3F:29:A7:E1:DE:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6341495d-ab3a-4984-a14c-2944926df2c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.208.48.0/24
                  168.208.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:26:31:4f:cb:9f:40:77:9a:ea:d4:79:34:c7:12:f2:6f:6a:
         a9:4e:c4:11:72:f0:68:62:8b:88:0a:eb:d0:61:13:20:39:d9:
         05:36:42:5f:b5:57:fa:e6:5b:ca:af:79:0f:14:de:b7:26:c8:
         71:62:fe:11:79:f2:8b:8e:30:28:10:01:a8:6a:07:cc:04:16:
         42:67:89:f2:c0:cc:74:c6:29:08:0b:aa:25:2e:fa:cc:9d:a6:
         d3:02:ab:31:87:b4:2b:33:4e:d7:d0:18:19:90:14:df:6c:37:
         bd:6f:5e:43:80:57:9a:ff:91:94:01:34:8e:68:19:c9:a3:57:
         a3:e6:60:9a:40:f1:ab:52:1f:9d:43:04:0c:36:68:aa:85:19:
         31:65:3f:09:af:a6:07:53:66:04:48:fb:31:68:54:14:d8:f2:
         6a:6c:7f:79:8d:38:ba:1e:b7:38:12:5c:e3:b3:8f:88:cc:16:
         16:13:1e:0b:f5:00:b8:e4:9e:4c:fd:1d:45:d8:47:92:22:40:
         d9:a0:da:b1:42:20:be:6c:84:3b:26:f1:21:33:f8:aa:fb:61:
         98:27:89:30:24:aa:3f:a4:f1:a5:04:ec:2f:9e:c3:84:4a:d9:
         08:c7:4e:78:2e:5a:1a:3e:be:ce:f3:bd:84:1f:c5:05:5a:5a:
         08:82:f5:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:50:14 2026 by rpki-client