Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48416e40-8d51-4528-a6af-36dd93cf14ee/cdae90d2-7bca-300b-89a5-2f31e2182fd3.roa
File:                     cdae90d2-7bca-300b-89a5-2f31e2182fd3.roa (raw, json)
Hash identifier:          v62dNdQhVKia8GBo11eucfsH9XGhFpzwteC1NJr91ZA=
Subject key identifier:   91:69:C6:A8:29:43:AA:9E:E4:2A:E2:7E:B1:CB:C6:F6:8E:C8:AE:D8
Certificate issuer:       /CN=48416e40-8d51-4528-a6af-36dd93cf14ee
Certificate serial:       010D0C9F4328584CF157730DDAFB6E7A18CE02C0
Authority key identifier: 58:AC:61:1D:B9:A7:A5:FA:3D:50:CF:48:51:9B:FC:14:FA:A4:C6:FD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48416e40-8d51-4528-a6af-36dd93cf14ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48416e40-8d51-4528-a6af-36dd93cf14ee/cdae90d2-7bca-300b-89a5-2f31e2182fd3.roa
Signing time:             Sun 22 Feb 2026 02:00:32 +0000
ROA not before:           Sun 22 Feb 2026 02:00:32 +0000
ROA not after:            Sat 23 May 2026 01:00:32 +0000
asID:                     30625
IP address blocks:        208.66.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48416e40-8d51-4528-a6af-36dd93cf14ee/48416e40-8d51-4528-a6af-36dd93cf14ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48416e40-8d51-4528-a6af-36dd93cf14ee/48416e40-8d51-4528-a6af-36dd93cf14ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48416e40-8d51-4528-a6af-36dd93cf14ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f1:57:73:0d:da:fb:6e:7a:18:ce:02:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48416e40-8d51-4528-a6af-36dd93cf14ee
        Validity
            Not Before: Feb 22 02:00:32 2026 GMT
            Not After : May 23 01:00:32 2026 GMT
        Subject: CN=0860eb39-e025-4d64-8a9b-3c5461dcac38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:e0:25:35:3a:85:42:47:32:98:57:a6:fb:0a:
                    62:7e:15:da:e6:fb:30:dd:8d:75:33:e5:6b:30:ab:
                    67:36:7f:ff:42:32:80:01:f7:bf:c0:d0:db:b4:04:
                    d1:43:ec:d5:4a:27:f9:3e:9f:ca:26:8a:ae:69:b9:
                    cd:2d:06:c9:f1:cc:73:7d:77:5a:7e:41:ea:b8:bc:
                    72:27:29:d1:1a:83:50:d5:2a:a2:fd:eb:60:0c:0c:
                    c1:08:43:43:4d:c3:a4:d3:81:fa:ff:10:de:27:7c:
                    58:63:79:72:af:ed:f4:9a:58:b4:9c:3b:f5:97:b8:
                    f9:d8:cd:8a:6c:81:1b:7d:9b:10:b2:e0:8a:45:a2:
                    d3:f6:c1:f5:7c:fd:04:25:b8:63:b9:a6:24:d6:32:
                    0c:2c:5f:1c:b3:c0:e9:b7:6c:aa:17:0f:4c:14:92:
                    0a:f9:ba:45:7d:d4:53:e9:16:59:fe:da:70:1b:b5:
                    41:37:d3:a0:78:86:82:43:e9:94:20:36:8e:53:c4:
                    be:c3:46:bc:f4:62:de:6b:fe:38:88:33:b8:5b:82:
                    2f:63:1b:cb:93:be:cd:3c:0b:b5:8b:5c:73:7a:54:
                    3f:d3:81:62:11:de:57:44:f5:63:ed:53:9a:31:12:
                    23:03:8e:bb:26:b9:ba:84:0e:2e:8d:5d:0d:22:0c:
                    21:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:69:C6:A8:29:43:AA:9E:E4:2A:E2:7E:B1:CB:C6:F6:8E:C8:AE:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48416e40-8d51-4528-a6af-36dd93cf14ee/cdae90d2-7bca-300b-89a5-2f31e2182fd3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48416e40-8d51-4528-a6af-36dd93cf14ee/48416e40-8d51-4528-a6af-36dd93cf14ee.crl

            X509v3 Authority Key Identifier:
                keyid:58:AC:61:1D:B9:A7:A5:FA:3D:50:CF:48:51:9B:FC:14:FA:A4:C6:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48416e40-8d51-4528-a6af-36dd93cf14ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.66.87.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:ef:35:ba:60:68:e4:42:d8:8b:d2:64:2e:24:7c:1f:89:d8:
         7f:67:39:3c:b0:57:42:f6:0f:55:c3:2d:06:6d:76:b1:df:bb:
         66:cb:dc:5b:66:fd:87:d1:ed:21:bb:20:71:eb:3d:be:7a:e7:
         ef:cc:ab:c9:a0:6d:77:05:19:44:4e:9a:44:5a:a8:35:3f:55:
         f6:33:df:a6:72:5c:35:1b:1b:9c:30:19:23:5b:25:85:71:ff:
         75:c3:f3:ff:dc:48:1d:ea:f5:6a:ce:16:0f:6e:73:9f:f1:c2:
         0b:95:05:e9:92:d7:a2:7c:37:57:46:03:ed:a8:51:af:49:3d:
         6d:49:2f:5a:f7:52:f9:35:85:59:e2:b2:48:ea:60:a7:43:5f:
         e3:c1:c8:c4:e7:25:e9:cf:a1:47:5b:cb:43:ee:8a:63:cd:fb:
         3c:ec:0f:d9:42:94:83:4d:45:5c:16:9c:32:61:cd:98:e7:4d:
         41:a7:e8:5f:35:b1:81:27:97:38:17:ff:7e:8c:73:99:51:4a:
         0d:c0:8a:b5:77:d6:26:dc:08:d5:4d:b3:f6:78:97:fe:3c:85:
         28:bb:b2:ae:17:6c:64:2e:5d:39:c4:ec:65:cb:af:b6:5c:ab:
         0b:20:d2:39:70:c5:24:e1:95:3d:e4:f0:77:f3:b1:30:c8:e1:
         1d:b4:7b:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:00:42 2026 by rpki-client