Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1/0df970dd-1000-33b2-94cf-be4c8681560d.roa
File:                     0df970dd-1000-33b2-94cf-be4c8681560d.roa (raw, json)
Hash identifier:          5uwoeP1qZhGYZi9TUPNF+tkgktH67jROGOZsvchrYWM=
Subject key identifier:   07:E7:07:8E:D6:A3:F4:87:B7:E5:6E:25:B3:2E:CA:D5:08:D7:51:A9
Certificate issuer:       /CN=bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1
Certificate serial:       010D0C9F4328584CD13CA9D1BE1DD064A27B4140
Authority key identifier: 31:91:FF:BF:89:94:07:2D:ED:2D:AF:9A:B1:96:60:5D:17:0E:43:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1/0df970dd-1000-33b2-94cf-be4c8681560d.roa
Signing time:             Tue 10 Feb 2026 14:00:41 +0000
ROA not before:           Tue 10 Feb 2026 14:00:41 +0000
ROA not after:            Mon 11 May 2026 13:00:41 +0000
asID:                     54013
IP address blocks:        198.231.26.0/24 maxlen: 24
                          198.231.27.0/24 maxlen: 24
                          204.75.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 26 Feb 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d1:3c:a9:d1:be:1d:d0:64:a2:7b:41:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1
        Validity
            Not Before: Feb 10 14:00:41 2026 GMT
            Not After : May 11 13:00:41 2026 GMT
        Subject: CN=e9e35eb2-dff6-4be9-b831-f660abf3faeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:5c:25:c6:9e:0b:ec:5c:b2:40:9a:cf:a4:ec:
                    36:b3:8d:87:93:69:1f:c1:cb:c8:2f:fb:9f:ea:ef:
                    8f:25:36:cf:c0:17:41:25:09:41:a4:1c:97:f6:4a:
                    b8:5e:2c:03:26:b2:22:dc:94:06:d4:3f:90:76:f2:
                    f6:4d:85:ca:9b:80:24:3e:80:46:11:fa:38:8d:73:
                    45:9d:8c:0b:4f:c5:18:66:e2:9e:5d:c5:a1:ab:2a:
                    93:c1:af:2d:91:02:9d:ed:22:22:48:de:e9:5d:4a:
                    2a:71:a7:06:3a:c4:a3:bd:3d:02:02:8d:2e:e1:0b:
                    a8:74:1f:97:b3:b1:2a:b3:17:ce:77:a8:92:7a:e7:
                    a6:37:88:ee:a3:22:37:2a:b2:b9:10:56:3c:48:84:
                    ae:cf:16:b3:84:3f:ea:fc:88:30:b2:39:47:2e:4d:
                    ed:00:05:41:73:e2:eb:48:b2:1f:fb:49:08:19:36:
                    f9:28:4f:fb:c0:a5:ce:3e:2d:8d:29:41:6e:d9:36:
                    54:32:c2:b5:37:98:93:8d:db:08:3a:e2:35:7a:e7:
                    c1:48:9b:38:52:9e:fc:cc:1b:6c:82:12:aa:0d:3a:
                    2d:4a:6e:e3:10:b9:aa:23:b1:b1:74:a1:0f:96:8d:
                    c0:da:87:03:a6:e0:ee:6e:59:1b:57:2d:15:9c:00:
                    0a:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:E7:07:8E:D6:A3:F4:87:B7:E5:6E:25:B3:2E:CA:D5:08:D7:51:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1/0df970dd-1000-33b2-94cf-be4c8681560d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1.crl

            X509v3 Authority Key Identifier:
                keyid:31:91:FF:BF:89:94:07:2D:ED:2D:AF:9A:B1:96:60:5D:17:0E:43:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.231.26.0/23
                  204.75.157.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:e1:74:d8:c3:28:f5:30:5e:7f:91:dd:27:ba:1b:8c:e9:58:
         19:83:b9:d1:cb:ca:d3:80:a5:59:fd:53:92:9c:2a:d5:74:91:
         d6:f3:b9:df:2e:eb:d8:d1:1a:bb:06:e3:02:a9:1b:f5:25:15:
         43:7e:9a:0c:34:00:b4:b7:f2:9a:ca:22:1d:f8:f6:2e:75:b9:
         94:8d:84:8c:31:bc:c6:8e:54:f4:55:23:10:6c:cd:27:a1:fe:
         4e:71:84:fa:d1:12:2f:34:91:22:e7:fc:70:d8:a3:df:4e:90:
         4c:61:3c:b3:af:cb:6f:10:2c:00:35:6b:a8:e6:ac:ae:c4:94:
         11:68:b0:e2:98:07:32:34:b7:e9:86:e7:c9:d3:4e:ab:48:ad:
         8a:45:80:d2:c9:36:63:27:7e:26:3d:4b:c9:20:dc:a9:7e:51:
         57:7d:e9:08:a7:b4:59:d2:a4:c7:8f:09:92:67:d5:1f:59:4b:
         06:4d:6b:5c:c8:72:9a:ab:8d:53:82:46:f7:1a:6d:c6:4e:ef:
         0d:03:ab:e6:cb:f9:87:40:da:de:ec:8e:92:0b:61:86:81:3a:
         ea:1c:07:2a:a0:5a:af:16:3e:01:67:42:c0:1c:ca:9a:a6:30:
         55:f3:38:a6:20:e0:59:68:7b:94:e2:05:f2:ca:29:2b:0d:9f:
         7f:d6:5b:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 18:40:18 2026 by rpki-client