Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/120c0faa-5468-395e-b740-2643ae843157.roa
File:                     120c0faa-5468-395e-b740-2643ae843157.roa (raw, json)
Hash identifier:          48fDx+XlhUlYgk9frsI2QhwmBPGIlZzYwVCchtZlkyo=
Subject key identifier:   5D:74:6B:31:B2:A6:ED:76:79:AF:E9:E5:4D:B3:CE:9B:83:EB:7F:E9
Certificate issuer:       /CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f
Certificate serial:       010D0C9F4328584CFF4CCF52A703AE8A40562F80
Authority key identifier: B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/120c0faa-5468-395e-b740-2643ae843157.roa
Signing time:             Fri 27 Feb 2026 02:00:31 +0000
ROA not before:           Fri 27 Feb 2026 02:00:31 +0000
ROA not after:            Thu 28 May 2026 01:00:31 +0000
asID:                     203921
IP address blocks:        64.255.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ff:4c:cf:52:a7:03:ae:8a:40:56:2f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f
        Validity
            Not Before: Feb 27 02:00:31 2026 GMT
            Not After : May 28 01:00:31 2026 GMT
        Subject: CN=2e5e8883-f58a-4cae-a770-766027b4b0f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:52:00:22:f2:62:b3:6b:e7:98:81:dc:05:c8:
                    f6:42:48:26:70:9d:99:22:17:70:15:b4:66:2e:79:
                    ff:80:da:46:86:24:73:6c:7f:fc:90:ce:66:c5:4e:
                    99:d9:b9:4f:8d:29:c3:6c:3e:ee:cf:90:d5:85:99:
                    74:64:df:6c:00:36:ed:f8:ac:4b:57:d8:11:c1:e1:
                    bb:f4:60:e7:94:d7:7f:de:67:d9:8c:34:0d:95:2f:
                    ff:d0:cd:21:cf:a4:08:a1:88:17:1a:3a:18:54:7d:
                    8d:4f:9f:f2:77:01:5b:b9:7d:ef:1d:62:21:3b:d5:
                    50:cb:4e:ad:5a:8a:52:21:7f:15:cb:03:4f:8c:43:
                    14:a1:49:ec:35:34:d0:f5:6b:c8:d8:87:48:7d:41:
                    6e:22:50:1c:d2:0d:79:fc:e9:7e:57:f3:77:68:48:
                    a0:08:f5:db:77:cb:c1:8b:95:88:9d:b7:80:0a:fd:
                    d7:55:d9:d0:14:fb:0b:92:4f:e7:6f:b6:d1:e8:2a:
                    aa:00:14:84:99:15:87:42:ba:eb:70:fe:aa:0e:90:
                    4a:fb:d9:ed:16:bc:62:55:60:68:d9:03:f3:35:82:
                    99:f3:a3:25:5a:23:a7:de:90:a5:4b:75:68:14:fa:
                    c3:0c:eb:48:d8:a1:be:0b:95:d5:9e:99:c5:c5:c2:
                    8c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:74:6B:31:B2:A6:ED:76:79:AF:E9:E5:4D:B3:CE:9B:83:EB:7F:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/120c0faa-5468-395e-b740-2643ae843157.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl

            X509v3 Authority Key Identifier:
                keyid:B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.255.26.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:a2:a1:66:54:d5:51:d8:e3:73:59:08:56:ce:06:8a:3c:83:
         e4:e7:9e:5a:4e:87:f8:39:a4:84:be:53:a9:b9:ed:8d:21:4e:
         05:60:0d:10:23:8d:a7:06:d1:a3:63:94:ed:e8:3c:6c:ce:cb:
         49:94:d8:cd:0a:15:35:98:4e:7c:e8:9a:12:f1:cb:a8:7f:b1:
         7f:6b:1c:e9:82:9b:94:0b:90:48:03:81:75:0e:64:17:ec:12:
         bc:45:9d:dd:ee:35:fc:1c:59:84:a2:66:b3:4a:67:f8:84:66:
         01:83:50:63:92:7b:f0:a2:4b:45:3f:d4:51:df:8f:b6:d9:34:
         66:81:4d:0d:84:77:7a:5a:ce:93:53:48:fa:5b:ec:04:14:af:
         39:7c:6e:18:26:1d:88:22:ae:7b:3e:87:b4:c1:4b:c4:86:9e:
         6c:6c:3d:5e:4e:da:09:4e:ec:8c:0c:cf:79:98:13:9f:63:e7:
         d5:16:4d:55:b9:51:58:c8:7e:e6:06:ab:10:6c:40:3c:b1:4f:
         09:62:7c:0c:22:94:dd:62:fd:83:b6:be:33:37:7a:5a:e5:41:
         04:9d:0e:6a:22:8f:9f:1e:7f:8e:98:f4:6d:51:bb:27:b1:07:
         9c:d2:fd:6c:02:28:23:3a:15:d0:06:95:d8:77:f1:b0:33:e5:
         ba:11:3d:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:23:17 2026 by rpki-client