Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a25dba35-fbce-4e02-ac3e-dba534f71021/f054ea12-3853-302f-9dff-eb2166c427f7.roa
File:                     f054ea12-3853-302f-9dff-eb2166c427f7.roa (raw, json)
Hash identifier:          D8VNitPx6Qputo7KCMFfB59Tv7Z6EyDeiYLSVRlpAdY=
Subject key identifier:   3D:6F:14:0C:A7:98:24:FC:8F:80:EE:D5:65:D1:D5:38:F2:F1:A5:68
Certificate issuer:       /CN=a25dba35-fbce-4e02-ac3e-dba534f71021
Certificate serial:       010D0C9F4328584CE62CBA21645BE77560F43D80
Authority key identifier: EC:C7:E0:F6:5F:96:C5:4D:B8:72:64:41:06:4C:37:23:0B:FE:46:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a25dba35-fbce-4e02-ac3e-dba534f71021.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a25dba35-fbce-4e02-ac3e-dba534f71021/f054ea12-3853-302f-9dff-eb2166c427f7.roa
Signing time:             Wed 18 Feb 2026 02:00:31 +0000
ROA not before:           Wed 18 Feb 2026 02:00:31 +0000
ROA not after:            Tue 19 May 2026 01:00:31 +0000
asID:                     6079
IP address blocks:        209.94.64.0/24 maxlen: 24
                          209.94.76.0/24 maxlen: 24
                          209.94.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a25dba35-fbce-4e02-ac3e-dba534f71021/a25dba35-fbce-4e02-ac3e-dba534f71021.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a25dba35-fbce-4e02-ac3e-dba534f71021/a25dba35-fbce-4e02-ac3e-dba534f71021.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a25dba35-fbce-4e02-ac3e-dba534f71021.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e6:2c:ba:21:64:5b:e7:75:60:f4:3d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a25dba35-fbce-4e02-ac3e-dba534f71021
        Validity
            Not Before: Feb 18 02:00:31 2026 GMT
            Not After : May 19 01:00:31 2026 GMT
        Subject: CN=b24db22c-48f5-4b46-85ed-a449ce087cc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:2c:2c:ed:13:13:bc:b2:e3:90:af:4c:28:a4:
                    7a:56:cf:78:31:a3:b3:3a:b9:ca:f0:db:8b:69:bd:
                    99:b2:40:a6:73:c3:78:d2:0c:8c:f5:93:6b:bc:f3:
                    1b:74:c7:e3:55:f8:9d:ab:06:5d:ec:cb:36:c4:e3:
                    08:7c:7f:c8:ce:73:f1:6e:91:78:31:81:a3:02:56:
                    ec:b2:46:ad:c5:cf:05:c4:d1:6a:d7:36:e6:15:b8:
                    4b:35:b6:41:f3:b3:08:74:b1:02:56:53:d6:a4:6e:
                    f1:62:34:a4:88:4e:a2:32:9a:23:0b:75:61:b8:38:
                    81:91:e8:a9:a8:a8:fb:f4:e4:46:ad:f4:29:1d:c7:
                    4a:26:df:e0:fb:93:e8:b1:83:b2:17:b4:b5:42:87:
                    c2:ca:b7:cb:42:1b:9d:33:ff:99:08:67:05:9d:65:
                    d7:7e:e8:9b:08:b9:1f:e4:6b:6e:0f:fb:8e:8c:0b:
                    44:c4:38:38:01:1b:60:b2:82:74:45:4b:23:49:b2:
                    15:3a:ca:5e:e0:d4:ea:9e:03:80:22:62:9b:16:63:
                    9d:66:33:3b:cd:64:88:32:6e:2f:27:cf:06:f8:10:
                    cf:58:d7:17:ad:70:b1:62:41:d2:c2:01:98:da:a8:
                    dc:19:76:a9:d9:cf:5f:04:17:73:9d:63:51:66:8f:
                    f4:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:6F:14:0C:A7:98:24:FC:8F:80:EE:D5:65:D1:D5:38:F2:F1:A5:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a25dba35-fbce-4e02-ac3e-dba534f71021/f054ea12-3853-302f-9dff-eb2166c427f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a25dba35-fbce-4e02-ac3e-dba534f71021/a25dba35-fbce-4e02-ac3e-dba534f71021.crl

            X509v3 Authority Key Identifier:
                keyid:EC:C7:E0:F6:5F:96:C5:4D:B8:72:64:41:06:4C:37:23:0B:FE:46:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a25dba35-fbce-4e02-ac3e-dba534f71021.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.94.64.0/24
                  209.94.76.0/24
                  209.94.95.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:13:76:26:ac:c7:f8:c0:cc:20:0d:d3:81:78:29:d7:24:2d:
         7c:42:7b:2f:6b:9a:dd:6d:21:0f:17:0f:7f:4e:6f:38:b6:57:
         91:20:db:4a:5a:45:7d:d6:0a:a2:f7:5f:48:8a:84:ba:7b:7d:
         2d:75:42:f8:fe:e5:94:b5:ff:fa:1a:0a:e6:dd:78:7b:d5:98:
         51:60:6a:14:e1:5d:41:f7:2f:2e:ec:fc:44:9f:63:f7:c1:f4:
         4c:e6:3c:2a:b6:f8:12:52:57:6d:6c:2d:8c:60:29:8c:69:4d:
         52:ad:4a:f7:eb:b6:33:a0:3f:77:e6:0d:37:ab:77:9f:10:e6:
         db:e4:af:c2:f5:f5:89:a3:bf:c3:7c:f9:22:00:b2:53:2d:f2:
         60:98:26:bf:91:42:28:41:20:70:f0:20:bc:de:14:5d:b2:f3:
         0d:15:6b:1d:42:40:08:e3:86:ce:36:0a:c4:67:f0:3d:8a:4f:
         aa:f8:87:91:a6:8b:0c:62:fd:5c:79:51:af:d8:9f:57:99:bc:
         ef:b8:30:bb:6a:6d:d0:ed:34:72:c1:9a:16:98:f0:6c:83:13:
         f2:85:ac:fc:fc:a8:07:bb:62:14:dc:56:19:e8:42:2c:56:46:
         d5:04:4f:aa:33:ba:df:78:9a:19:72:c6:15:99:b4:a1:f1:9f:
         07:07:05:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:51:58 2026 by rpki-client