Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e085fa70-312c-4786-b587-bdb5fc87c36e/f4018e35-f80e-3b6a-a43f-51f8b97f4469.roa
File:                     f4018e35-f80e-3b6a-a43f-51f8b97f4469.roa (raw, json)
Hash identifier:          +Xga/kXSHu1F+3yE7oHZZgkVEIozw0gObrgCNaxyUss=
Subject key identifier:   2D:F6:03:63:D0:DA:0D:76:38:99:16:D6:7D:0E:29:80:43:B7:F3:36
Certificate issuer:       /CN=e085fa70-312c-4786-b587-bdb5fc87c36e
Certificate serial:       010D0C9F4328584C751C25B7D26853D695B31513
Authority key identifier: FB:01:59:26:25:6A:E3:27:F8:7E:FC:D1:9C:57:E2:7B:34:1B:58:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e085fa70-312c-4786-b587-bdb5fc87c36e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e085fa70-312c-4786-b587-bdb5fc87c36e/f4018e35-f80e-3b6a-a43f-51f8b97f4469.roa
Signing time:             Thu 08 Jan 2026 14:00:39 +0000
ROA not before:           Thu 08 Jan 2026 14:00:39 +0000
ROA not after:            Wed 08 Apr 2026 13:00:39 +0000
asID:                     32098
IP address blocks:        199.19.100.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e085fa70-312c-4786-b587-bdb5fc87c36e/e085fa70-312c-4786-b587-bdb5fc87c36e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e085fa70-312c-4786-b587-bdb5fc87c36e/e085fa70-312c-4786-b587-bdb5fc87c36e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e085fa70-312c-4786-b587-bdb5fc87c36e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Feb 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:75:1c:25:b7:d2:68:53:d6:95:b3:15:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e085fa70-312c-4786-b587-bdb5fc87c36e
        Validity
            Not Before: Jan  8 14:00:39 2026 GMT
            Not After : Apr  8 13:00:39 2026 GMT
        Subject: CN=5f42c81f-d985-437c-9ae7-becec0327683
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:cb:a8:70:5e:76:c4:29:d8:fe:a2:85:66:fd:
                    30:91:d4:81:4f:ac:75:69:9f:4b:98:41:da:2c:ad:
                    c9:65:64:dc:31:3a:90:99:e0:e7:2f:cb:fa:8e:ba:
                    ed:02:22:9a:0e:19:57:ae:e9:d8:35:6c:e9:bb:7c:
                    56:9a:c8:8d:10:c2:c0:3c:14:29:7d:88:ed:32:3d:
                    50:d9:b4:5e:8c:fe:3d:12:d1:93:61:8e:51:ac:19:
                    c1:de:c9:d6:1c:4a:d7:20:d9:27:26:c2:2f:c3:e1:
                    ac:e7:11:1b:7d:0a:a6:89:96:77:c1:bf:ef:36:79:
                    09:8a:66:0f:40:49:20:df:4d:a3:d9:8c:42:30:6b:
                    56:38:77:79:13:3e:df:ef:a7:ce:28:44:61:5e:72:
                    ed:f0:d3:7a:9f:05:0a:18:52:4d:fb:04:15:9a:86:
                    ec:c0:25:d9:f0:2b:2f:11:67:16:b5:a1:97:97:1f:
                    2d:4f:3c:56:ad:9a:14:b1:2a:c0:60:d6:6e:52:4c:
                    20:e5:93:ad:f4:ab:74:68:37:d9:14:82:b4:b9:a0:
                    cb:f4:5e:ba:bb:a3:1a:e8:77:cc:0d:fb:17:93:19:
                    6e:28:3d:ed:6e:33:e9:8c:ea:57:4f:d3:d7:de:59:
                    c3:9e:79:09:52:f9:06:16:a2:e7:03:7a:a2:c0:ce:
                    de:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:F6:03:63:D0:DA:0D:76:38:99:16:D6:7D:0E:29:80:43:B7:F3:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e085fa70-312c-4786-b587-bdb5fc87c36e/f4018e35-f80e-3b6a-a43f-51f8b97f4469.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e085fa70-312c-4786-b587-bdb5fc87c36e/e085fa70-312c-4786-b587-bdb5fc87c36e.crl

            X509v3 Authority Key Identifier:
                keyid:FB:01:59:26:25:6A:E3:27:F8:7E:FC:D1:9C:57:E2:7B:34:1B:58:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e085fa70-312c-4786-b587-bdb5fc87c36e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.19.100.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:bf:69:33:d8:01:16:ee:4c:8f:12:18:b6:25:a3:76:a8:b5:
         50:3c:fa:bc:08:e0:37:74:82:70:c3:1a:39:5b:e0:d8:ce:9e:
         dc:fc:6e:6e:43:0b:d6:2b:45:61:d1:51:fe:dd:a6:9b:9d:3c:
         c9:54:8a:64:e0:a8:8a:bf:19:a8:62:97:c7:91:83:f0:f3:6c:
         de:2e:97:e4:72:d9:3c:ca:d1:9d:f4:c7:75:2f:7c:e5:e7:42:
         8c:83:49:bf:d5:d9:dd:10:23:ef:a7:b5:ce:20:ae:4a:8c:c4:
         55:0d:42:95:6b:94:1b:f3:38:39:70:0e:07:84:33:d0:be:7b:
         35:62:17:53:57:ac:26:5f:95:22:13:95:40:80:71:95:28:09:
         a9:e9:d6:98:e1:f0:1b:06:bf:d3:72:54:64:d5:76:2e:32:ae:
         0a:76:30:d6:dc:f1:c2:ec:af:7f:e9:54:04:85:71:5a:fa:d9:
         9c:85:4d:3e:ca:37:57:24:c3:12:66:7a:d9:df:6a:61:37:92:
         11:2e:ec:7e:bc:89:b5:a8:5c:1f:4a:34:7f:46:c8:e8:b8:a3:
         4a:31:6b:56:12:3d:c7:b4:b3:fa:b2:6a:3c:2c:a1:aa:85:77:
         1f:1c:86:73:42:03:f3:b0:36:c5:e3:d5:49:f1:cb:51:06:4b:
         a7:3e:37:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 00:06:25 2026 by rpki-client