Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa/37fd6b0c-fc80-340d-8f7b-960124f34643.roa
File:                     37fd6b0c-fc80-340d-8f7b-960124f34643.roa (raw, json)
Hash identifier:          LD0GIzIM+rGufZuyLXiAyS2d5TK0rs4XbH+zfE/mR8M=
Subject key identifier:   AF:24:81:80:9F:6F:33:2F:B7:9E:48:F2:0D:09:BA:E2:03:7F:50:D7
Certificate issuer:       /CN=58eef8b8-39c9-495c-b889-44faff13a8aa
Certificate serial:       010D0C9F4328584CE4C77D4AB1C9541F19485080
Authority key identifier: DE:BF:6C:F6:E8:31:1E:71:6D:D2:54:66:13:3B:78:89:15:E9:01:2D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa/37fd6b0c-fc80-340d-8f7b-960124f34643.roa
Signing time:             Tue 17 Feb 2026 14:00:41 +0000
ROA not before:           Tue 17 Feb 2026 14:00:41 +0000
ROA not after:            Mon 18 May 2026 13:00:41 +0000
asID:                     397016
IP address blocks:        130.250.138.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa/58eef8b8-39c9-495c-b889-44faff13a8aa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa/58eef8b8-39c9-495c-b889-44faff13a8aa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 26 Feb 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e4:c7:7d:4a:b1:c9:54:1f:19:48:50:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58eef8b8-39c9-495c-b889-44faff13a8aa
        Validity
            Not Before: Feb 17 14:00:41 2026 GMT
            Not After : May 18 13:00:41 2026 GMT
        Subject: CN=b3b63f59-c067-410c-91e4-d6a9c3bd485c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:b5:4a:f3:61:ff:65:5a:ec:4a:f6:6d:b9:64:
                    c6:c8:b4:77:86:58:36:e4:2f:f4:2d:c8:9f:1d:e4:
                    b5:29:8e:46:1d:84:42:75:fc:c3:2a:c7:6d:4d:a0:
                    ca:c2:ca:45:cd:a2:97:13:78:94:da:f8:c9:7b:b3:
                    ed:98:ee:bb:12:be:23:c3:a7:89:59:85:7d:95:cb:
                    66:35:0e:4e:b5:a1:bb:db:83:5c:ae:1f:79:02:a1:
                    41:fa:d9:97:06:53:01:67:44:83:b3:36:56:3d:15:
                    d1:c4:b1:b3:6a:b2:1c:6d:95:93:e0:8d:0a:bf:65:
                    d7:98:86:10:73:d8:77:a7:15:00:67:24:ae:bb:10:
                    d5:48:29:d7:d7:b2:a4:d3:f8:72:94:d9:0f:fb:a0:
                    b0:5c:53:df:53:53:95:df:bb:15:bc:73:d1:ff:5a:
                    79:33:36:f2:47:51:cf:39:b9:5f:19:45:72:84:a0:
                    f2:92:8a:dd:a5:dc:48:84:62:a5:db:4d:bc:23:2a:
                    72:fa:92:29:ae:48:65:b4:fb:35:c0:17:61:2e:a3:
                    d2:8c:68:5a:26:f8:78:66:66:fc:cf:a4:74:56:59:
                    95:26:c8:67:7b:e5:4c:ca:86:61:b4:5e:2a:02:d8:
                    16:e5:45:11:73:00:72:43:8e:68:af:c7:6e:20:4e:
                    fc:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:24:81:80:9F:6F:33:2F:B7:9E:48:F2:0D:09:BA:E2:03:7F:50:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa/37fd6b0c-fc80-340d-8f7b-960124f34643.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa/58eef8b8-39c9-495c-b889-44faff13a8aa.crl

            X509v3 Authority Key Identifier:
                keyid:DE:BF:6C:F6:E8:31:1E:71:6D:D2:54:66:13:3B:78:89:15:E9:01:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.250.138.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:df:e8:05:38:01:5b:7f:c8:34:54:0b:77:8a:60:23:e4:d8:
         74:4d:03:42:d5:2c:61:17:d4:0d:d7:19:bf:73:ff:b9:1e:78:
         c4:57:25:7f:0f:d3:26:48:e1:15:f7:9c:e3:86:b2:13:75:ec:
         77:39:d7:25:37:e9:2a:c3:da:09:47:5e:45:cb:67:67:52:35:
         e6:fd:51:dc:cc:67:a7:a4:4a:bf:46:d7:ad:a6:87:c8:8d:75:
         6b:d9:c2:36:0b:83:8f:f1:32:76:8d:10:3d:4e:77:d0:64:43:
         28:21:36:69:04:fc:5c:2d:78:99:63:ba:a3:a6:9a:e9:0f:ba:
         a2:55:51:7e:50:64:69:c5:c2:90:ad:8d:fa:bf:22:5d:b3:c4:
         06:74:f4:20:36:f2:aa:a9:fc:7d:04:10:8a:58:fb:19:c7:f6:
         f1:25:d7:4f:69:a9:17:47:48:3d:73:c1:4f:34:2c:d9:0b:45:
         39:eb:d6:1c:8b:77:d0:fd:69:37:05:25:0a:15:d3:24:ed:a6:
         00:49:af:91:20:a7:bf:f9:10:d7:25:0e:84:ff:ea:66:57:29:
         46:c8:b4:20:8e:9b:d9:40:41:06:fa:eb:12:d8:48:27:e2:33:
         e6:22:80:6d:89:ff:29:e8:16:ae:f1:9e:7a:16:92:98:ee:ff:
         ce:83:a9:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 18:44:17 2026 by rpki-client