Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/52c2c681-fd3d-336a-8fc9-0f314d01fa8f.roa
File:                     52c2c681-fd3d-336a-8fc9-0f314d01fa8f.roa (raw, json)
Hash identifier:          etcndBpE3knX1YAfyUc9XrYcamPiePO+MAvGL8JZRsc=
Subject key identifier:   70:55:CC:80:E9:13:E2:42:F3:C0:C3:3D:B8:00:A8:C6:B3:DF:A8:B5
Certificate issuer:       /CN=b02b2a27-63d2-435f-8114-d98e289edc6c
Certificate serial:       010D0C9F4328584CEFF23DCC6A22DB0F17F91DA0
Authority key identifier: 68:FD:10:A9:76:FA:09:AC:44:0A:CF:EB:95:4C:B2:32:BF:35:91:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/52c2c681-fd3d-336a-8fc9-0f314d01fa8f.roa
Signing time:             Sat 21 Feb 2026 14:00:41 +0000
ROA not before:           Sat 21 Feb 2026 14:00:41 +0000
ROA not after:            Fri 22 May 2026 13:00:41 +0000
asID:                     14618
IP address blocks:        208.71.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/b02b2a27-63d2-435f-8114-d98e289edc6c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/b02b2a27-63d2-435f-8114-d98e289edc6c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ef:f2:3d:cc:6a:22:db:0f:17:f9:1d:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b02b2a27-63d2-435f-8114-d98e289edc6c
        Validity
            Not Before: Feb 21 14:00:41 2026 GMT
            Not After : May 22 13:00:41 2026 GMT
        Subject: CN=5dfd9a0c-3ccb-4eaa-9aec-30de86401cbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:fd:ba:84:3e:cb:bc:11:c1:ca:f1:f1:85:7e:
                    43:ef:6e:59:3e:3c:0d:7a:c2:43:9f:80:0b:ee:7f:
                    91:87:3c:b4:4a:fd:76:af:83:34:60:1c:e3:d6:8a:
                    94:41:68:8b:f3:7b:87:bd:54:7a:d4:9d:d9:d4:99:
                    c7:61:fe:4e:93:93:d5:bb:17:21:9b:5a:88:f1:6f:
                    ba:66:2c:4f:e4:8d:c9:be:c3:6f:52:5c:5a:06:d9:
                    7a:41:bb:90:90:12:63:fe:e4:b2:0e:5f:6e:16:e5:
                    45:33:b0:00:d5:fd:c3:d6:6e:c1:7c:a6:46:26:96:
                    f4:cb:44:49:16:18:35:20:ee:c9:9b:3f:11:c3:21:
                    c2:87:5d:a6:a0:44:24:aa:22:86:23:96:54:b2:ec:
                    b6:6c:0a:2c:01:bc:3f:c0:5e:19:24:54:55:d9:f8:
                    84:13:a7:cc:10:7d:a5:38:eb:3d:6e:b8:14:f9:49:
                    53:68:05:06:41:2b:f7:03:1b:de:f8:93:6e:04:5f:
                    02:80:64:de:e1:2a:92:21:50:d3:c7:58:87:33:91:
                    b7:0a:c8:20:e3:1c:70:15:6f:11:95:6a:76:cf:90:
                    2d:fe:08:66:37:79:fe:fa:21:69:73:eb:56:38:ec:
                    03:94:31:83:89:16:3a:22:f3:8a:9c:5b:65:45:bb:
                    fd:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:55:CC:80:E9:13:E2:42:F3:C0:C3:3D:B8:00:A8:C6:B3:DF:A8:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/52c2c681-fd3d-336a-8fc9-0f314d01fa8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/b02b2a27-63d2-435f-8114-d98e289edc6c.crl

            X509v3 Authority Key Identifier:
                keyid:68:FD:10:A9:76:FA:09:AC:44:0A:CF:EB:95:4C:B2:32:BF:35:91:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.71.210.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:a1:95:a9:33:d3:09:a3:ce:3c:76:21:eb:5f:f8:82:74:55:
         6a:e5:6b:9c:db:e2:9e:14:08:d0:6a:e2:a1:56:0c:b5:1f:12:
         8c:cf:60:d6:10:8e:69:c8:b1:04:84:c0:6b:98:b0:b2:29:cc:
         ca:6e:12:29:12:46:9c:8b:b8:e3:d9:c2:f7:e7:42:b8:91:9c:
         13:d7:dc:e1:6d:cc:c1:75:59:fc:9c:10:11:fc:fd:f1:a4:16:
         5c:04:87:de:d1:1b:b9:57:89:48:af:4a:9e:01:e6:72:e4:15:
         b2:3d:34:83:58:a2:54:05:98:7d:2a:cf:c8:37:c5:21:bb:6f:
         bf:94:29:0e:dc:ad:9d:86:1a:f3:b4:01:b7:a8:17:20:cc:48:
         99:5a:34:86:29:fd:34:0f:41:0c:6c:32:6a:95:a4:0e:b5:11:
         7c:7e:65:f2:66:38:bc:45:21:dc:ea:03:1a:45:8b:0b:11:bc:
         6e:c2:84:40:59:55:99:f3:42:20:5e:ed:e8:47:d2:a4:3a:ee:
         78:97:6e:65:16:31:e5:8f:31:6f:4a:b0:10:60:84:ff:ab:b0:
         70:aa:a6:d9:fa:82:80:b7:a0:70:c1:73:f1:63:63:4e:e6:46:
         0a:01:93:da:39:72:30:8f:62:12:3f:59:ab:dd:3a:fe:c8:4c:
         fd:ef:08:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:34:43 2026 by rpki-client