Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40b39b2a-cdef-4445-ace8-bb39d43cda5d/7cca8c9b-95b3-3789-93a9-141f27073aeb.roa
File:                     7cca8c9b-95b3-3789-93a9-141f27073aeb.roa (raw, json)
Hash identifier:          /S/9Gz0F3tyoplKMZF5ssO8Fh70ukhypQ6mZb3t80EA=
Subject key identifier:   6B:1A:85:D3:B2:1F:3D:D8:2A:6B:3E:5F:9D:14:F9:41:2D:A3:08:61
Certificate issuer:       /CN=40b39b2a-cdef-4445-ace8-bb39d43cda5d
Certificate serial:       010D0C9F4328584CCD0C922D2110AC69BB3B1700
Authority key identifier: DA:82:75:7B:6B:78:B8:76:D7:46:CA:D8:81:7A:BF:9A:0B:16:5B:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40b39b2a-cdef-4445-ace8-bb39d43cda5d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40b39b2a-cdef-4445-ace8-bb39d43cda5d/7cca8c9b-95b3-3789-93a9-141f27073aeb.roa
Signing time:             Mon 09 Feb 2026 02:00:31 +0000
ROA not before:           Mon 09 Feb 2026 02:00:31 +0000
ROA not after:            Sun 10 May 2026 01:00:31 +0000
asID:                     14618
IP address blocks:        204.8.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40b39b2a-cdef-4445-ace8-bb39d43cda5d/40b39b2a-cdef-4445-ace8-bb39d43cda5d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40b39b2a-cdef-4445-ace8-bb39d43cda5d/40b39b2a-cdef-4445-ace8-bb39d43cda5d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40b39b2a-cdef-4445-ace8-bb39d43cda5d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 26 Feb 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:cd:0c:92:2d:21:10:ac:69:bb:3b:17:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40b39b2a-cdef-4445-ace8-bb39d43cda5d
        Validity
            Not Before: Feb  9 02:00:31 2026 GMT
            Not After : May 10 01:00:31 2026 GMT
        Subject: CN=9d81587e-b1c7-4151-95e6-551b1757d34f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:03:fe:98:bf:bf:ac:cb:04:06:0e:80:cb:bf:
                    63:a2:14:94:ba:27:ba:70:11:26:63:3a:10:2b:c1:
                    be:ad:5d:5b:f6:34:d0:8d:6b:ca:5c:19:99:71:85:
                    9e:0d:f5:83:ca:7c:4b:8f:67:2c:92:87:50:43:82:
                    1a:00:38:61:17:12:42:2b:55:6a:c3:ba:f2:05:e4:
                    6d:77:40:91:b7:bc:d8:76:6b:c8:d9:56:88:3c:2c:
                    6b:8b:bf:aa:12:dc:9d:cf:94:71:bb:dc:e4:0e:b0:
                    73:3a:bf:87:e2:2d:96:e1:ca:b8:d9:d9:af:3a:9a:
                    c0:9c:bf:53:70:59:db:c5:27:0b:8c:66:a7:fc:22:
                    f3:96:0d:f6:31:59:e5:3d:e2:69:d2:b5:64:92:a1:
                    02:9b:ee:0f:0e:ef:b6:22:33:db:1c:23:a2:a3:31:
                    8f:bc:a9:21:a3:a1:ef:37:50:02:d4:ee:75:bb:c7:
                    89:38:46:63:6f:93:45:1f:b3:32:d0:c4:00:df:82:
                    ba:f5:a4:15:c4:a1:ed:70:e5:36:24:04:a1:c7:93:
                    4e:c4:e4:72:b9:d9:71:ca:95:e4:c8:aa:21:bb:95:
                    6f:24:41:c3:a9:24:af:d9:71:40:55:ad:3a:38:9e:
                    45:eb:d0:4c:d9:eb:81:cf:8b:eb:ea:1c:74:f0:36:
                    e9:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:1A:85:D3:B2:1F:3D:D8:2A:6B:3E:5F:9D:14:F9:41:2D:A3:08:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40b39b2a-cdef-4445-ace8-bb39d43cda5d/7cca8c9b-95b3-3789-93a9-141f27073aeb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40b39b2a-cdef-4445-ace8-bb39d43cda5d/40b39b2a-cdef-4445-ace8-bb39d43cda5d.crl

            X509v3 Authority Key Identifier:
                keyid:DA:82:75:7B:6B:78:B8:76:D7:46:CA:D8:81:7A:BF:9A:0B:16:5B:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40b39b2a-cdef-4445-ace8-bb39d43cda5d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.8.173.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:39:ba:97:9a:48:f2:9b:31:3d:ef:75:a3:83:35:87:84:9e:
         fb:1a:69:b7:e6:ea:7d:df:ff:e4:c4:e8:bf:b7:df:d4:e4:5b:
         ee:16:e2:f2:0d:ab:ae:6d:21:28:29:87:25:ff:85:14:ef:89:
         9d:55:44:e0:98:8c:06:db:6e:4a:12:7a:76:47:d4:b4:82:68:
         95:3b:8e:35:63:a8:0b:b8:69:6f:b9:34:dd:9b:fa:18:29:19:
         b7:4b:ae:6d:2c:50:5d:9f:bb:cb:7d:3e:ac:09:ae:cb:d4:41:
         75:e1:ca:ff:72:22:89:0c:fb:d6:cf:e5:8b:15:8d:0c:9b:32:
         2e:7f:18:81:49:00:1c:c5:62:1b:e0:e3:64:30:12:e0:e3:88:
         7d:f4:e8:be:22:0b:18:d7:c0:b8:e5:7f:9a:3b:8a:da:b3:17:
         2d:bc:51:93:db:a3:a8:e7:4e:a2:ce:31:68:54:94:68:06:8e:
         2a:90:21:a6:8b:6e:cb:64:a0:d2:a8:81:ce:73:b7:f0:ff:90:
         d4:f5:df:eb:4b:bd:a1:3f:e3:bb:cd:ca:80:f8:8e:29:21:66:
         94:8b:4e:1c:bc:b5:3e:da:85:21:b0:49:4b:e3:33:f1:e6:a7:
         64:84:74:ae:2c:f8:6b:f3:f1:37:32:c3:ea:27:16:13:ad:6a:
         9a:2d:4e:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 18:42:58 2026 by rpki-client