Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5a289d75-f029-3bd1-9dc9-e630caecdd2c.roa
File:                     5a289d75-f029-3bd1-9dc9-e630caecdd2c.roa (raw, json)
Hash identifier:          Lm/LyxjhVS9LAI9FGxqSDHykdvFZIxCIb9hTRmmk+ic=
Subject key identifier:   A1:8A:05:BB:C4:3E:37:57:92:AF:C9:BC:6E:C3:9D:A9:9C:74:02:0C
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584C8476F97736D891EE4866A380
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5a289d75-f029-3bd1-9dc9-e630caecdd2c.roa
Signing time:             Wed 14 Jan 2026 02:00:31 +0000
ROA not before:           Wed 14 Jan 2026 02:00:31 +0000
ROA not after:            Tue 14 Apr 2026 01:00:31 +0000
asID:                     24319
IP address blocks:        96.7.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:84:76:f9:77:36:d8:91:ee:48:66:a3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jan 14 02:00:31 2026 GMT
            Not After : Apr 14 01:00:31 2026 GMT
        Subject: CN=09931dd1-17bc-4d33-8fd9-36d6977d4c35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:88:29:2d:9b:e6:77:c9:60:07:9a:80:52:49:
                    04:39:58:ce:61:e8:86:41:10:4c:c0:79:23:b6:d2:
                    63:da:d5:91:44:3a:fd:46:15:1b:03:a5:cf:9f:91:
                    cc:22:e1:e0:bf:b8:a4:17:30:99:e5:a4:0d:0a:d5:
                    2b:17:44:45:bf:97:32:cd:e5:a7:d3:00:21:5a:41:
                    8e:2e:93:c8:04:73:40:b0:50:fd:f3:c9:06:7a:8c:
                    af:01:77:a2:82:81:94:47:0f:26:b0:3a:4e:a5:b4:
                    fd:9f:72:38:24:70:35:03:97:c5:bd:d3:6e:a6:db:
                    ee:49:68:92:c7:24:3c:30:1d:1b:39:3a:64:c1:b5:
                    2d:37:b8:9d:5e:87:38:49:a0:3a:bb:fe:38:39:d8:
                    c5:68:5e:9f:c3:39:55:39:77:13:c2:c7:bf:6b:3b:
                    e7:35:21:3e:f4:d7:16:df:2e:4e:c4:af:e3:d3:3d:
                    96:84:61:6d:ce:17:a0:2b:13:74:04:70:75:27:77:
                    24:7e:4e:67:6a:d5:03:d8:ef:fb:9d:aa:a3:72:a8:
                    fd:68:78:a2:75:7c:b5:d5:15:f3:fe:a7:d4:da:31:
                    cd:f4:50:7e:ee:b5:07:de:47:5b:cc:41:3c:7d:b9:
                    dc:58:01:e5:e0:58:65:79:08:55:45:ef:0f:c6:44:
                    54:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:8A:05:BB:C4:3E:37:57:92:AF:C9:BC:6E:C3:9D:A9:9C:74:02:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5a289d75-f029-3bd1-9dc9-e630caecdd2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.7.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:e1:b3:2e:f1:5f:15:e0:99:8d:e5:5d:ca:5b:93:63:51:ff:
         c6:f7:ee:d1:d8:89:24:92:2e:07:39:93:f4:ed:18:be:9d:a7:
         af:fb:39:b5:bf:6c:15:43:69:1f:fb:dc:d4:9b:ad:74:5c:10:
         a3:7e:77:e0:ae:56:6d:51:df:b3:ca:da:34:62:0e:eb:31:5c:
         91:78:da:59:21:f0:70:db:2f:34:d8:54:5e:89:f7:d1:7d:ab:
         c6:82:eb:a0:07:af:ca:7c:b4:7a:c8:cb:40:3e:bb:56:92:cb:
         5d:be:0e:bf:8b:8f:78:38:bb:4b:11:13:5a:08:dd:57:75:56:
         be:9d:ba:57:de:6a:93:f3:04:09:38:40:b3:12:73:0d:b7:ee:
         37:ac:56:89:24:51:9f:b9:88:0c:34:13:a7:6d:7c:69:34:98:
         1c:3d:10:b6:73:dd:61:43:02:a7:b7:73:3f:b2:e9:d7:ac:7c:
         12:85:f2:e8:de:7f:95:54:5a:66:36:3c:4e:2e:0c:c9:c5:b0:
         c3:c6:a1:54:d6:14:56:17:b0:40:01:fb:7b:25:b8:c3:1b:b5:
         6b:c7:17:05:86:dc:82:fd:73:96:59:b8:e2:9b:02:ef:94:41:
         d6:40:c4:5f:11:26:5e:55:2c:f7:32:f0:49:9e:c3:e8:ad:ee:
         52:b1:76:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:40:41 2026 by rpki-client