Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5001e41b-e2bf-366c-b403-4f8177f4ea53.roa
File:                     5001e41b-e2bf-366c-b403-4f8177f4ea53.roa (raw, json)
Hash identifier:          RkmpauyqoPsAOxkNdWi3/lEJWBK+G9Q307Ca4ZizNO8=
Subject key identifier:   98:EF:2D:02:5D:3F:63:F7:EA:47:66:9B:D9:48:7E:DA:08:83:55:E4
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584CDF329F9C4B84883001B8C14C
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5001e41b-e2bf-366c-b403-4f8177f4ea53.roa
Signing time:             Sun 15 Feb 2026 14:00:41 +0000
ROA not before:           Sun 15 Feb 2026 14:00:41 +0000
ROA not after:            Sat 16 May 2026 13:00:41 +0000
asID:                     401783
IP address blocks:        209.101.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:df:32:9f:9c:4b:84:88:30:01:b8:c1:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Feb 15 14:00:41 2026 GMT
            Not After : May 16 13:00:41 2026 GMT
        Subject: CN=7c7cf88d-9a8f-48d9-b5ba-29f85861beaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:96:0d:19:df:e8:df:5a:69:75:ef:f0:7a:19:
                    82:15:7b:cc:65:e3:3b:b0:0f:85:a4:0a:f4:db:8d:
                    a6:ae:3b:f1:02:8c:58:5f:24:b2:21:0f:49:ba:47:
                    29:e9:44:35:63:1a:77:c1:44:b4:80:f1:2e:bd:f4:
                    93:8a:57:1e:3c:8f:79:25:4a:67:64:5d:36:d4:64:
                    06:45:1e:ca:b6:dd:fb:fd:b4:ab:7e:23:38:65:09:
                    d3:2e:e3:8c:c8:8d:f4:24:5d:09:7a:6b:bb:a7:5c:
                    99:f2:56:e9:9f:11:7e:fa:29:80:ef:0e:8b:2f:eb:
                    41:90:a6:7c:66:51:a7:23:d5:02:bf:c6:00:c5:bd:
                    9d:4f:2e:a9:d3:65:8e:1f:f8:19:65:7e:4d:75:31:
                    1c:8f:e0:a8:b3:b4:70:53:d6:c0:42:57:44:c4:21:
                    b6:dd:41:02:73:e3:55:fd:85:af:20:ae:ad:19:a2:
                    5d:4f:b2:97:5e:de:c8:b9:89:89:cf:a8:a5:c4:f2:
                    2f:94:25:fe:a9:64:08:dc:d9:2b:80:79:95:28:88:
                    18:63:c6:84:51:79:d7:00:50:38:1e:28:60:59:e5:
                    f7:5c:40:98:1f:b7:b9:c3:15:97:e5:72:c3:4b:17:
                    a6:ce:47:9c:29:b6:40:74:de:5d:80:98:ba:c6:42:
                    d7:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:EF:2D:02:5D:3F:63:F7:EA:47:66:9B:D9:48:7E:DA:08:83:55:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5001e41b-e2bf-366c-b403-4f8177f4ea53.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.101.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:0f:46:82:c0:4a:e3:59:15:29:a5:bf:8d:e6:ea:01:5c:63:
         55:3a:13:7e:e8:a6:0a:ca:b4:f8:d9:99:8c:ad:a1:89:0a:f0:
         8f:da:40:13:e6:89:e2:21:0c:9d:11:73:95:0c:f2:6e:fd:4b:
         08:88:02:8b:11:8e:57:a1:05:9a:f5:d1:f7:45:c9:1d:fc:86:
         42:44:95:f5:3b:6f:d5:83:2f:8a:d3:98:f3:9d:67:c4:10:62:
         84:50:86:09:f3:a4:88:7a:8b:45:76:7d:d0:07:be:b8:ab:61:
         b5:b3:a5:3b:8a:cd:9c:93:15:60:20:d6:a3:3a:4d:d2:c4:fc:
         21:2d:ad:85:4d:ed:01:81:a9:61:92:4f:bf:0c:cc:19:51:31:
         9a:9c:89:cd:79:c1:2d:9e:01:d1:3f:00:49:9a:2a:e7:c4:19:
         26:26:22:d5:26:72:6b:d3:4e:b8:7e:47:9c:30:1f:51:f9:96:
         98:33:0c:f5:25:74:25:f8:0b:1d:5f:3f:3c:a8:29:e4:49:ae:
         2d:a9:20:01:f1:c2:83:1c:38:51:2c:ab:79:54:36:23:03:d2:
         ca:c2:d7:db:b0:34:5e:92:0e:8b:2c:f3:79:4c:26:06:fb:7b:
         2d:7e:62:22:64:8b:72:0e:61:ba:4e:b1:6f:44:19:66:ba:b9:
         b7:16:f8:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:57:22 2026 by rpki-client