Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dc563dc9-6b87-4d82-8a58-6b8b7917092c/758f08ff-4e18-391a-b667-f17bbc8fab2d.roa
File:                     758f08ff-4e18-391a-b667-f17bbc8fab2d.roa (raw, json)
Hash identifier:          vn1BW2NVFlzF+5r9J3SfMKMJUv94tezzEftFRGZ4/A0=
Subject key identifier:   9D:48:F4:8A:46:0B:FB:98:B4:10:02:0C:B8:4B:39:12:20:1C:21:80
Certificate issuer:       /CN=dc563dc9-6b87-4d82-8a58-6b8b7917092c
Certificate serial:       010D0C9F4328584CED27BC6FC17A8CCF7BCAF240
Authority key identifier: A0:36:F8:0B:C8:AD:05:3F:44:8C:B8:A2:AB:AA:39:66:57:E0:D3:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dc563dc9-6b87-4d82-8a58-6b8b7917092c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dc563dc9-6b87-4d82-8a58-6b8b7917092c/758f08ff-4e18-391a-b667-f17bbc8fab2d.roa
Signing time:             Fri 20 Feb 2026 14:00:41 +0000
ROA not before:           Fri 20 Feb 2026 14:00:41 +0000
ROA not after:            Thu 21 May 2026 13:00:41 +0000
asID:                     26042
IP address blocks:        206.168.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dc563dc9-6b87-4d82-8a58-6b8b7917092c/dc563dc9-6b87-4d82-8a58-6b8b7917092c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dc563dc9-6b87-4d82-8a58-6b8b7917092c/dc563dc9-6b87-4d82-8a58-6b8b7917092c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dc563dc9-6b87-4d82-8a58-6b8b7917092c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ed:27:bc:6f:c1:7a:8c:cf:7b:ca:f2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc563dc9-6b87-4d82-8a58-6b8b7917092c
        Validity
            Not Before: Feb 20 14:00:41 2026 GMT
            Not After : May 21 13:00:41 2026 GMT
        Subject: CN=ef601672-1ec5-4357-b96e-6d752d2930ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:63:cc:53:35:b8:25:95:69:d8:e2:fb:30:c8:
                    11:1c:f8:da:7b:e5:63:95:97:12:64:06:74:2a:6a:
                    f8:53:7f:82:fc:65:cd:8a:33:00:3f:c0:8c:75:8c:
                    2b:a1:60:d1:2b:dd:4e:b8:cf:db:3e:f4:92:f9:35:
                    a8:94:b2:db:89:ce:3c:a0:ea:e8:3f:55:25:96:74:
                    1d:da:b1:be:79:52:cf:d7:5b:5e:29:c2:88:32:89:
                    02:2a:6d:18:68:5d:dd:a1:c4:51:64:f3:07:5f:e0:
                    02:d2:8b:bf:0d:63:ec:96:a6:7e:9b:7d:4e:1b:66:
                    15:20:1b:f3:94:d7:5e:de:db:d3:f8:ec:00:60:1b:
                    80:5f:90:a8:dd:1e:31:a7:e9:7a:3c:39:8e:be:1f:
                    ae:dd:71:65:ab:6d:6c:ff:c5:fd:72:39:d6:10:40:
                    0f:b9:fe:51:56:e7:5b:ee:0c:1e:8d:a3:9b:85:39:
                    95:34:e1:3b:a6:8a:81:16:ff:2c:5e:c4:06:42:84:
                    aa:cb:cc:74:6e:ba:1b:bc:e6:af:6b:10:97:2d:aa:
                    52:db:78:c6:29:2e:b0:fb:c4:7c:2a:2a:14:0c:54:
                    5d:b9:c6:26:36:dd:a0:be:b8:ca:ce:50:1c:51:48:
                    8f:08:26:57:2c:72:b4:a9:b2:fc:fc:1e:7c:03:d9:
                    35:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:48:F4:8A:46:0B:FB:98:B4:10:02:0C:B8:4B:39:12:20:1C:21:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dc563dc9-6b87-4d82-8a58-6b8b7917092c/758f08ff-4e18-391a-b667-f17bbc8fab2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dc563dc9-6b87-4d82-8a58-6b8b7917092c/dc563dc9-6b87-4d82-8a58-6b8b7917092c.crl

            X509v3 Authority Key Identifier:
                keyid:A0:36:F8:0B:C8:AD:05:3F:44:8C:B8:A2:AB:AA:39:66:57:E0:D3:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dc563dc9-6b87-4d82-8a58-6b8b7917092c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.168.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:30:40:20:97:57:bf:e3:e5:c7:cb:18:69:59:ff:54:8b:f9:
         37:c7:2e:68:d5:58:65:07:74:8b:4d:09:3e:3d:7c:d4:5d:57:
         e9:87:71:d9:09:16:00:b3:7b:4d:14:ff:59:bc:00:64:95:b6:
         de:0e:af:46:e1:0e:96:6c:41:22:ab:6d:73:01:d5:b7:62:90:
         d9:43:32:de:82:9b:91:70:10:32:78:9d:b0:72:7e:3d:7f:88:
         c4:f0:0c:fb:17:a1:2f:d7:6d:92:15:93:dc:cf:8d:3f:8c:b5:
         50:78:da:36:2f:dc:d1:cd:d1:e0:ec:20:66:6a:54:46:44:84:
         c2:08:51:bf:28:fa:88:8a:f0:36:fa:c8:2c:2b:b4:55:0b:52:
         db:64:51:b3:75:6b:ab:8a:45:f8:59:68:6f:db:81:55:98:01:
         db:da:80:76:4e:e8:9f:45:9a:57:af:f3:ef:63:2f:58:d3:27:
         d8:f3:92:cd:6b:db:b9:58:69:51:ec:2b:05:f8:14:b1:32:d9:
         44:0a:07:64:d0:d2:12:45:ef:ee:54:42:bb:b5:79:56:05:26:
         51:ff:69:da:94:0b:6e:4d:41:bd:27:9c:28:ae:ba:05:2d:a6:
         99:a9:bf:fb:b5:f1:b8:93:7e:c7:14:c1:6b:34:80:1e:56:4e:
         bf:5d:a0:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:31:03 2026 by rpki-client