Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/53330c81-f837-38c4-8d1e-b3a0acb55743.roa
File:                     53330c81-f837-38c4-8d1e-b3a0acb55743.roa (raw, json)
Hash identifier:          cQmO2HKyaNSQ3TdTCvOOtgs99TSB8Yc1cPfc/Nwpbrg=
Subject key identifier:   D0:6A:3F:E3:3F:F9:7D:78:15:18:31:84:57:08:66:40:67:4C:9A:9D
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584CDF32AA346DA5E03198BB8130
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/53330c81-f837-38c4-8d1e-b3a0acb55743.roa
Signing time:             Sun 15 Feb 2026 14:00:41 +0000
ROA not before:           Sun 15 Feb 2026 14:00:41 +0000
ROA not after:            Sat 16 May 2026 13:00:41 +0000
asID:                     401783
IP address blocks:        209.101.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:df:32:aa:34:6d:a5:e0:31:98:bb:81:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Feb 15 14:00:41 2026 GMT
            Not After : May 16 13:00:41 2026 GMT
        Subject: CN=eed43e9d-d471-458c-af55-ff80cfa9ec75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:70:3c:0c:3d:97:dd:e8:cc:50:b6:7d:8a:d1:
                    a2:01:8f:12:69:b8:50:42:12:00:bb:2a:80:0c:32:
                    8c:d4:ad:99:fa:5e:0e:b6:3e:0d:58:64:46:ef:cd:
                    3d:64:de:30:24:37:24:4e:36:6c:ae:b8:27:12:b0:
                    23:bf:95:c0:16:97:3e:61:ac:04:c2:e5:81:01:78:
                    c4:48:9b:b8:ac:4f:e2:d5:ac:65:98:39:f6:08:90:
                    ac:f9:9d:94:6a:90:6d:c4:e7:d8:8a:ed:94:a9:18:
                    13:62:35:f1:f9:b3:ec:a2:c5:76:57:3b:7a:15:2e:
                    3f:e8:73:dd:35:18:1e:d8:eb:0b:68:79:22:41:c4:
                    49:ed:94:26:4d:4d:98:e6:3c:8e:82:f0:ab:3f:f3:
                    92:49:b2:ca:4d:e2:4d:21:07:e9:c3:68:d1:01:7b:
                    7d:6b:77:02:72:d3:e3:5e:01:8f:d3:50:fa:7e:5b:
                    b0:e2:07:ea:1c:1b:4e:e3:05:a1:da:ab:df:ca:16:
                    ed:cd:ae:e9:91:37:0d:1f:67:1f:9b:0b:ee:a7:42:
                    dd:69:9a:bd:3c:20:ac:ca:3c:6d:ec:98:f8:f5:04:
                    df:29:a1:a6:01:30:d8:5d:3e:b7:7e:0a:8a:0e:57:
                    11:ea:73:45:cc:3e:d7:a3:ee:43:d0:2f:37:f9:a6:
                    ee:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:6A:3F:E3:3F:F9:7D:78:15:18:31:84:57:08:66:40:67:4C:9A:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/53330c81-f837-38c4-8d1e-b3a0acb55743.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.101.95.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:8f:9c:54:e9:aa:38:cd:f2:94:74:a8:fc:5e:06:21:33:59:
         0b:04:92:c3:08:2b:b1:ab:f1:36:d0:01:41:b9:09:a6:4f:eb:
         e0:5c:e8:91:27:24:8c:75:ff:a8:07:f2:1c:8f:fb:60:1e:2b:
         8e:c7:3d:f7:a2:09:2b:fc:2d:84:98:be:95:2e:38:8a:67:c4:
         ba:ca:7c:26:0b:63:6d:cc:a2:1e:50:37:94:ed:4e:3e:42:e5:
         a5:e6:a6:88:f5:03:2d:6e:00:30:bb:02:14:ca:b6:24:12:1b:
         44:3d:7e:4d:16:62:1a:27:ea:30:fc:eb:5c:5c:37:4e:af:42:
         af:17:61:93:50:78:b2:7e:7c:52:c7:ed:24:be:60:3d:f1:7c:
         5b:57:4a:9b:fb:8d:8c:0a:8b:a2:50:e9:64:8c:5b:f9:87:85:
         de:67:6a:65:a4:2a:e3:c2:04:21:fa:a7:19:b5:67:e1:d7:9c:
         92:71:7e:40:49:64:a8:24:a2:9e:46:5c:14:b7:f8:75:5c:52:
         aa:41:e6:ea:8b:aa:f6:5b:89:c6:32:74:93:ac:eb:9e:2d:98:
         7e:63:11:e2:46:15:1f:d7:da:56:1f:7b:1f:e7:fe:b0:2c:8d:
         42:51:18:fd:98:54:b9:db:04:aa:01:6c:e8:e4:86:24:34:81:
         3a:cc:c6:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:12:45 2026 by rpki-client