Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683/fd852497-bc9a-3b30-ab74-cc2c337021d5.roa
File:                     fd852497-bc9a-3b30-ab74-cc2c337021d5.roa (raw, json)
Hash identifier:          p7W0NPVXjhKconfRtfqZ2f85jW59psiGglu1Dp52298=
Subject key identifier:   36:63:93:C9:0A:8C:08:BB:7E:7C:25:2B:26:9F:8A:3C:FC:A1:B4:23
Certificate issuer:       /CN=6bf0b484-94d2-490f-8a68-d7588d1f3683
Certificate serial:       010D0C9F4328584CF5879337E1DAD244B82D3F50
Authority key identifier: 2C:7F:1E:92:2A:96:B9:4C:13:5E:EB:5C:38:45:77:97:4A:C6:5E:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683/fd852497-bc9a-3b30-ab74-cc2c337021d5.roa
Signing time:             Mon 23 Feb 2026 14:00:41 +0000
ROA not before:           Mon 23 Feb 2026 14:00:41 +0000
ROA not after:            Sun 24 May 2026 13:00:41 +0000
asID:                     395853
IP address blocks:        208.68.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683/6bf0b484-94d2-490f-8a68-d7588d1f3683.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683/6bf0b484-94d2-490f-8a68-d7588d1f3683.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f5:87:93:37:e1:da:d2:44:b8:2d:3f:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bf0b484-94d2-490f-8a68-d7588d1f3683
        Validity
            Not Before: Feb 23 14:00:41 2026 GMT
            Not After : May 24 13:00:41 2026 GMT
        Subject: CN=ebb21dd4-3d3e-4e9b-a493-d70c5666a61d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:3f:02:59:f7:f4:00:29:2e:40:53:61:9c:ae:
                    45:9d:a1:0b:7d:4f:a2:ce:6c:11:2a:a2:91:3d:b2:
                    bf:0b:22:2c:72:18:57:02:07:db:97:54:26:78:18:
                    42:ca:32:a3:04:53:de:65:d0:18:74:b0:72:a7:b5:
                    80:3d:bc:32:c1:7f:c7:89:99:f6:ff:d9:ab:d0:a6:
                    fe:40:22:62:c1:bf:c0:c5:ea:80:0c:19:39:23:eb:
                    4c:5e:b5:e6:ed:6f:99:72:6b:3b:0b:eb:53:d2:bb:
                    83:d3:ce:85:84:20:67:8c:13:fb:bb:9f:58:54:1b:
                    26:f8:ef:2f:15:89:6b:3b:4e:03:8f:a0:c0:62:b0:
                    5f:f1:05:4e:3b:7b:5c:91:1c:c2:82:c5:02:b2:07:
                    60:9e:ab:7a:b9:e8:87:c8:ac:a6:c9:4b:9c:ed:be:
                    d0:39:d2:8f:8b:d3:57:3c:af:c0:c9:2e:38:ba:65:
                    3c:c1:1f:87:92:a9:4e:8d:e3:d2:31:d6:7a:1f:19:
                    15:07:13:5a:57:a4:b4:4d:69:d1:cf:4c:56:c3:6d:
                    6d:7a:0c:c1:eb:23:0b:5c:9a:72:46:c3:49:bd:0f:
                    48:56:7b:a4:77:ff:50:92:41:a6:d9:2c:a6:48:38:
                    9a:17:a3:0a:25:31:96:4f:6b:be:9a:1d:4c:f7:3a:
                    8e:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:63:93:C9:0A:8C:08:BB:7E:7C:25:2B:26:9F:8A:3C:FC:A1:B4:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683/fd852497-bc9a-3b30-ab74-cc2c337021d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683/6bf0b484-94d2-490f-8a68-d7588d1f3683.crl

            X509v3 Authority Key Identifier:
                keyid:2C:7F:1E:92:2A:96:B9:4C:13:5E:EB:5C:38:45:77:97:4A:C6:5E:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.68.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:2b:e9:e7:bd:12:bf:b1:0a:7c:6a:6b:f6:0d:88:80:77:3c:
         db:36:0a:7d:bf:46:1e:03:00:61:86:ae:a7:e7:f1:39:f7:6e:
         07:33:9e:bb:df:d3:77:01:ee:e3:63:28:e5:d2:0e:4c:f1:d5:
         54:a7:79:5b:83:3a:79:ee:5b:a5:bd:ec:a1:fa:2d:35:f2:2e:
         4c:57:a0:a8:f3:19:ae:c4:84:17:d0:7a:29:e7:66:63:f8:37:
         3b:86:a9:d9:82:ce:47:ad:3a:0d:ad:d6:49:e8:a0:13:e9:8d:
         ee:00:52:83:8b:07:13:44:ae:48:d9:b8:4e:76:e3:c3:f8:4f:
         f3:a1:ef:19:f2:c0:b4:70:c6:48:89:e6:51:65:df:cc:6d:f4:
         af:83:f9:b0:e2:75:b8:ff:9c:5d:0f:ba:1f:fe:de:93:b3:c9:
         a5:c7:51:9a:25:f4:a8:8d:e5:e1:be:19:61:c0:25:99:f0:a1:
         3a:1b:a3:13:b3:68:a8:2f:64:ae:2d:b3:7e:51:42:38:ef:e6:
         1f:33:1a:e8:05:dd:62:cc:4c:3f:15:eb:42:2f:bb:47:9d:b4:
         ed:d1:58:aa:35:e0:af:64:93:07:92:46:7d:58:6f:ad:e3:38:
         4d:8a:ba:08:d5:60:78:10:cd:e6:3f:3f:95:30:b0:62:b7:52:
         f5:d4:90:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:48:15 2026 by rpki-client