Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/49c0bbbd-fa28-4c84-a77b-58f6d8e9f0a7/91183d3f-3174-3b9c-bc6f-9c7502746c63.roa
File:                     91183d3f-3174-3b9c-bc6f-9c7502746c63.roa (raw, json)
Hash identifier:          ihDVNI9GX7aU8GCEe5CLBi2bDGjlXz1EAmgxgnVI+q4=
Subject key identifier:   3D:9A:0F:17:67:9C:6F:7B:F8:FD:8D:C7:2B:25:5F:45:1C:A9:4C:DB
Certificate issuer:       /CN=49c0bbbd-fa28-4c84-a77b-58f6d8e9f0a7
Certificate serial:       010D0C9F4328584CC07C90C1B685033B983EB200
Authority key identifier: 53:94:6A:20:C8:68:7F:32:21:E1:A0:E3:FA:9C:32:E5:87:4A:61:4F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/49c0bbbd-fa28-4c84-a77b-58f6d8e9f0a7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/49c0bbbd-fa28-4c84-a77b-58f6d8e9f0a7/91183d3f-3174-3b9c-bc6f-9c7502746c63.roa
Signing time:             Wed 04 Feb 2026 14:00:39 +0000
ROA not before:           Wed 04 Feb 2026 14:00:39 +0000
ROA not after:            Tue 05 May 2026 13:00:39 +0000
asID:                     16509
IP address blocks:        198.212.50.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/49c0bbbd-fa28-4c84-a77b-58f6d8e9f0a7/49c0bbbd-fa28-4c84-a77b-58f6d8e9f0a7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/49c0bbbd-fa28-4c84-a77b-58f6d8e9f0a7/49c0bbbd-fa28-4c84-a77b-58f6d8e9f0a7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/49c0bbbd-fa28-4c84-a77b-58f6d8e9f0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Feb 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c0:7c:90:c1:b6:85:03:3b:98:3e:b2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49c0bbbd-fa28-4c84-a77b-58f6d8e9f0a7
        Validity
            Not Before: Feb  4 14:00:39 2026 GMT
            Not After : May  5 13:00:39 2026 GMT
        Subject: CN=82269e62-5aaf-4d40-9cff-863aa2ada34c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:29:a2:1f:18:1a:a8:b4:f7:d4:51:c3:b5:3a:
                    0e:51:ec:0c:26:72:3b:8c:33:8f:88:30:52:df:7e:
                    9f:0c:14:6e:65:70:05:0f:75:95:ce:01:c5:a1:3e:
                    af:0a:88:80:d4:6e:21:a0:b9:37:cd:db:44:2a:f6:
                    f5:77:81:f8:d7:fc:b7:c0:35:1f:7a:6d:a5:37:6d:
                    87:d8:9d:27:16:8b:0b:49:a2:bb:c7:b3:93:d8:65:
                    36:ae:ad:b9:fc:9a:3d:bc:1e:c1:7a:41:02:52:62:
                    14:00:0d:e4:a1:92:5a:09:9c:59:b0:a5:2c:e3:1f:
                    c6:ed:f2:fb:0f:33:54:d1:4b:7a:ce:17:51:05:54:
                    c9:f9:e2:2d:8c:4b:6c:41:25:99:d0:fe:ee:7d:86:
                    f7:68:b6:6f:92:f4:19:af:42:b1:fb:b5:0e:30:af:
                    b0:c5:88:d5:95:5d:a4:c3:33:3f:39:a4:98:b7:dd:
                    58:80:61:d0:04:f5:ea:2f:ae:4c:e9:97:d4:a0:43:
                    e8:21:aa:9e:9d:ae:0c:0b:ea:b2:10:7f:23:d3:17:
                    7d:3c:55:f1:02:66:83:9c:58:c1:9c:08:64:a5:eb:
                    2d:f1:69:a2:e5:21:3a:43:61:68:85:ee:33:cb:31:
                    da:4a:d2:07:68:6a:12:a8:b5:8b:8c:95:a1:29:6e:
                    52:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:9A:0F:17:67:9C:6F:7B:F8:FD:8D:C7:2B:25:5F:45:1C:A9:4C:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/49c0bbbd-fa28-4c84-a77b-58f6d8e9f0a7/91183d3f-3174-3b9c-bc6f-9c7502746c63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/49c0bbbd-fa28-4c84-a77b-58f6d8e9f0a7/49c0bbbd-fa28-4c84-a77b-58f6d8e9f0a7.crl

            X509v3 Authority Key Identifier:
                keyid:53:94:6A:20:C8:68:7F:32:21:E1:A0:E3:FA:9C:32:E5:87:4A:61:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/49c0bbbd-fa28-4c84-a77b-58f6d8e9f0a7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.212.50.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:a2:50:ff:62:b1:73:44:cd:38:c0:71:3d:10:10:6d:72:b2:
         f3:98:23:e7:4c:23:31:17:f1:62:33:18:2b:b5:04:37:63:8e:
         f9:9e:0c:a0:6a:14:ee:cf:a3:9a:39:ae:af:3a:88:a2:83:03:
         84:64:98:b9:77:81:85:68:42:21:84:37:d2:38:d2:71:7c:28:
         f8:67:2f:43:3e:40:22:86:2e:d8:9e:ee:b2:3a:11:2c:10:21:
         99:76:30:5e:de:16:1c:6f:25:80:62:6c:c0:e2:31:73:90:24:
         54:23:31:17:16:37:08:8a:67:62:4e:48:54:18:0c:ca:89:ea:
         be:37:60:9b:d9:fd:3f:c7:d7:f6:48:09:80:c1:e4:11:4d:e4:
         f2:c2:ae:d5:4d:37:7a:8b:4c:c2:13:1e:81:12:4e:3a:49:fd:
         fd:f0:a2:2c:33:23:99:6d:4a:96:82:03:af:e5:f0:af:99:8c:
         2a:7f:ff:4c:9a:64:b5:9c:df:c5:93:84:ed:eb:8f:cc:ce:18:
         ca:2e:3c:4e:09:14:b7:e6:b9:6c:ce:77:51:94:c2:f8:d4:30:
         e7:64:17:11:23:72:7d:d9:21:c4:65:59:9f:59:1d:a3:37:b0:
         a0:d9:70:03:2e:c9:d7:73:ac:37:81:24:60:36:bf:4d:56:f0:
         7a:65:62:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 18:42:55 2026 by rpki-client