Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c97d8771-667e-33d4-90b7-b13aee8cf0b1.roa
File:                     c97d8771-667e-33d4-90b7-b13aee8cf0b1.roa (raw, json)
Hash identifier:          Zwvl4E6IBZmGUcYxWqSGOVwrmsoaoWzxZmhgi6rB4pQ=
Subject key identifier:   E9:20:CB:7E:B3:AF:F2:F0:D5:D3:05:00:53:EB:08:B9:B7:2A:78:FD
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584CDC67C5707C25847E3E56CF80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c97d8771-667e-33d4-90b7-b13aee8cf0b1.roa
Signing time:             Sat 14 Feb 2026 14:00:41 +0000
ROA not before:           Sat 14 Feb 2026 14:00:41 +0000
ROA not after:            Fri 15 May 2026 13:00:41 +0000
asID:                     701
IP address blocks:        209.158.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:dc:67:c5:70:7c:25:84:7e:3e:56:cf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb 14 14:00:41 2026 GMT
            Not After : May 15 13:00:41 2026 GMT
        Subject: CN=c0af9436-9bf6-4fa9-9527-57111cff396e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:47:05:b2:7d:37:f1:88:d7:fc:c8:98:c7:9c:
                    e8:8b:9d:9f:ad:fe:2a:63:55:fb:55:55:f7:71:dc:
                    d2:ea:98:0d:07:b7:d7:c7:3b:e5:1e:2d:c7:46:11:
                    2b:35:34:7c:24:ab:7e:a2:fd:60:c8:ce:f4:7c:a7:
                    e0:eb:c4:26:6b:c9:54:45:d6:f5:47:da:13:af:a6:
                    e8:57:38:09:7c:4b:a5:9a:9d:47:27:46:90:26:33:
                    08:d0:38:e4:8a:cc:b3:67:11:24:23:02:e9:f9:d2:
                    a3:78:38:75:9b:7a:e9:1c:5e:9f:34:f5:09:34:3a:
                    6b:f3:e3:81:17:bb:e8:c5:88:47:2b:78:75:e4:b7:
                    27:86:69:98:95:78:c8:57:51:fb:a9:4b:ec:60:af:
                    19:15:d1:60:d6:b5:5a:7a:8c:9f:35:6e:c6:a0:6d:
                    9e:ae:48:04:56:16:96:31:f3:21:09:7c:1d:f3:cc:
                    1f:d6:39:27:96:2f:93:6b:3c:79:ec:7d:a3:98:ba:
                    8d:5e:67:19:30:b7:2c:95:a9:41:50:1c:f2:a9:44:
                    d2:33:d7:fa:33:4e:93:96:bf:a3:b8:73:ac:09:99:
                    7b:4b:30:8d:72:cc:17:68:bf:35:88:29:83:7f:63:
                    b2:ee:c5:b4:05:a8:8f:33:56:c0:44:6e:8d:63:2d:
                    ee:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:20:CB:7E:B3:AF:F2:F0:D5:D3:05:00:53:EB:08:B9:B7:2A:78:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c97d8771-667e-33d4-90b7-b13aee8cf0b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.158.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:a3:8e:e2:59:b7:f5:0f:51:dd:23:4b:50:c8:5d:bb:9e:31:
         c5:f2:8e:84:14:8c:d5:5d:d0:9c:4b:71:ba:65:54:42:9f:83:
         03:34:cb:58:a2:97:79:f4:b8:71:17:ca:07:61:42:78:69:81:
         84:a0:35:4e:0a:51:ff:74:b7:e0:3f:cf:6e:f0:3b:58:79:d6:
         33:a3:ab:ba:c0:82:ee:42:aa:e5:fa:28:94:92:e7:67:5f:63:
         a3:c9:80:11:a4:cc:92:0b:c9:dc:dd:4e:8b:fe:60:ae:12:c7:
         37:fd:63:be:05:48:a9:3f:3d:ec:58:bf:ec:cc:89:83:bf:b2:
         89:0e:69:8a:22:4f:8a:35:11:9d:a1:2a:0e:97:8a:6a:21:bf:
         3f:5c:2b:fd:d0:c9:54:b7:4e:af:5f:96:bf:f0:94:48:d9:ad:
         96:cb:c6:15:6a:2e:28:24:64:1f:c9:fe:0f:c4:f5:ca:e5:4b:
         b0:f5:0d:41:d5:64:5d:9e:d6:f1:4e:7e:78:c2:56:7a:d7:90:
         38:d4:30:f1:73:c9:09:e5:10:57:6e:38:bd:86:8d:50:46:d6:
         e7:bb:44:82:fa:16:15:bb:6d:de:90:6c:14:db:93:33:38:da:
         d6:08:e9:41:06:05:4d:88:40:99:b5:a4:4a:25:b5:bb:ef:f7:
         17:a1:a5:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:18:53 2026 by rpki-client