Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/dc0f5b59-b3d1-3f18-8c6b-8d0b2d4c2df4.roa
File:                     dc0f5b59-b3d1-3f18-8c6b-8d0b2d4c2df4.roa (raw, json)
Hash identifier:          8xPfjZoioMuMnGAOT3XoaxQlbbSz6bYxCFqnFEcM9QM=
Subject key identifier:   A3:ED:3F:A7:1A:EB:18:9C:5B:3D:80:0D:41:FA:2E:42:EA:2C:37:78
Certificate issuer:       /CN=e98db606-926a-43a7-aa62-47481a8d81d0
Certificate serial:       010D0C9F4328584CDB02048807362D2912C4AC80
Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/dc0f5b59-b3d1-3f18-8c6b-8d0b2d4c2df4.roa
Signing time:             Sat 14 Feb 2026 02:00:32 +0000
ROA not before:           Sat 14 Feb 2026 02:00:32 +0000
ROA not after:            Fri 15 May 2026 01:00:32 +0000
asID:                     19795
IP address blocks:        208.85.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:db:02:04:88:07:36:2d:29:12:c4:ac:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0
        Validity
            Not Before: Feb 14 02:00:32 2026 GMT
            Not After : May 15 01:00:32 2026 GMT
        Subject: CN=198f76f1-9df9-43f4-8821-883100d4039f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:6b:a0:27:af:2d:9b:61:11:98:58:5a:eb:5b:
                    1d:e4:fc:76:03:d5:eb:1a:1b:bf:a3:45:c2:d4:5a:
                    0d:d4:bd:d0:de:d1:0d:82:cf:be:34:ba:c5:b8:b5:
                    85:cf:72:cd:7d:6f:66:f8:ea:ac:4c:9a:ea:28:67:
                    f3:7b:2b:25:cd:5f:0a:d0:ea:7e:db:97:9e:dd:d5:
                    31:b1:e1:fb:2a:10:da:e7:85:e8:66:35:3e:f2:41:
                    c6:d2:8f:ef:99:f3:3c:53:ba:f5:49:18:34:19:b5:
                    6b:18:43:02:ad:76:78:a1:e5:1d:f3:df:ac:fb:d2:
                    15:7a:22:3c:6f:ad:0e:99:47:bd:af:68:56:05:86:
                    0a:26:0d:6e:ac:4c:89:c7:63:94:d0:8c:df:66:68:
                    9b:94:fe:49:78:2d:02:e9:62:1d:8a:5c:d2:9e:ef:
                    e0:47:3a:4a:c5:d7:9e:51:4e:fe:d2:3c:ef:e7:20:
                    d0:23:ab:d2:2e:46:37:5a:96:91:09:f9:ab:4b:96:
                    c4:23:5f:b8:ce:0d:ce:e1:d8:84:53:dc:d4:91:5a:
                    f7:40:da:20:63:70:2d:97:1f:c9:a3:64:ec:23:d0:
                    bc:d9:e6:3e:e8:0a:fa:6f:99:bc:c0:9c:44:ca:eb:
                    58:97:e1:2b:2e:bf:58:9c:4d:c6:f0:72:cc:b5:ef:
                    a3:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:ED:3F:A7:1A:EB:18:9C:5B:3D:80:0D:41:FA:2E:42:EA:2C:37:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/dc0f5b59-b3d1-3f18-8c6b-8d0b2d4c2df4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl

            X509v3 Authority Key Identifier:
                keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.85.54.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:1f:51:50:f9:7d:e9:79:45:74:8c:1f:cd:ca:2f:f3:15:59:
         9c:32:85:ea:ac:e8:dc:2d:ef:0e:78:2e:68:95:f7:0e:fc:cd:
         0c:55:cf:86:c0:fc:73:ac:d1:c2:2f:71:80:1e:84:22:42:c2:
         18:08:a6:66:9d:1d:55:46:18:cf:aa:67:6c:5c:9f:2f:28:b8:
         cd:fe:65:22:53:3d:d7:c0:a0:23:77:97:81:ec:08:c0:82:b7:
         f0:4c:9a:c7:aa:ad:67:0e:32:de:5d:67:6c:fb:f0:3d:3f:ee:
         ed:8d:cb:b4:45:de:d6:e0:7e:65:40:84:50:63:9f:e8:17:ab:
         4a:6f:a9:4b:5a:22:77:02:9b:e2:9f:d8:3f:bd:ec:97:c7:04:
         71:db:7f:a9:af:32:53:28:19:5f:57:17:5b:69:d1:46:47:59:
         de:43:2f:88:63:e9:2f:2f:19:ed:5a:d8:be:31:c7:7b:c1:c5:
         74:ec:fc:a5:9e:74:4a:c3:f8:66:9d:1b:8c:ee:ee:35:a3:a3:
         a6:f3:90:db:75:60:36:62:0c:a5:78:29:86:53:6d:12:15:d8:
         01:1c:58:c8:46:1a:f3:a8:ad:84:d7:e2:5a:8f:a2:46:79:a0:
         ba:fc:53:8e:ad:81:af:09:65:5f:00:09:9c:1f:07:6a:b6:9a:
         e9:fb:f7:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:10:50 2026 by rpki-client