Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4233913-8c3d-4df4-bd7d-495f7afba2ac/5a2c7a03-706c-3753-821e-9e8765fd223c.roa
File:                     5a2c7a03-706c-3753-821e-9e8765fd223c.roa (raw, json)
Hash identifier:          F43hVSzT4Ukuj3g+o22BtjWSoZU0YcLG7v0lni5etEU=
Subject key identifier:   CB:A9:B1:EA:CB:AA:9D:85:83:A9:C5:AD:33:12:69:2E:BA:E9:3F:68
Certificate issuer:       /CN=e4233913-8c3d-4df4-bd7d-495f7afba2ac
Certificate serial:       010D0C9F4328584CF5878ED30C8FE1605DEF43C0
Authority key identifier: 23:E9:67:A1:5B:A9:96:F3:5E:F7:44:E1:D1:D6:08:7E:0E:EC:60:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4233913-8c3d-4df4-bd7d-495f7afba2ac.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4233913-8c3d-4df4-bd7d-495f7afba2ac/5a2c7a03-706c-3753-821e-9e8765fd223c.roa
Signing time:             Mon 23 Feb 2026 14:00:41 +0000
ROA not before:           Mon 23 Feb 2026 14:00:41 +0000
ROA not after:            Sun 24 May 2026 13:00:41 +0000
asID:                     10930
IP address blocks:        209.251.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4233913-8c3d-4df4-bd7d-495f7afba2ac/e4233913-8c3d-4df4-bd7d-495f7afba2ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4233913-8c3d-4df4-bd7d-495f7afba2ac/e4233913-8c3d-4df4-bd7d-495f7afba2ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4233913-8c3d-4df4-bd7d-495f7afba2ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 26 Feb 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f5:87:8e:d3:0c:8f:e1:60:5d:ef:43:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4233913-8c3d-4df4-bd7d-495f7afba2ac
        Validity
            Not Before: Feb 23 14:00:41 2026 GMT
            Not After : May 24 13:00:41 2026 GMT
        Subject: CN=1bbb5198-154b-400f-8253-cbd04d56076b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:3d:57:fd:30:6f:cf:ab:17:ce:86:61:27:bb:
                    cf:fc:8b:bb:a1:21:57:13:bb:53:a8:21:70:38:02:
                    62:f7:81:4d:52:c0:ba:cb:8a:69:f4:0f:ea:45:9f:
                    60:4c:e5:03:bc:9a:c6:80:57:cf:ab:6e:18:2e:4a:
                    85:8e:5f:8a:7e:88:38:64:90:1c:d5:ee:4b:99:ed:
                    ec:a3:fe:43:3f:79:13:da:2c:72:39:5d:ce:d3:d2:
                    7f:31:98:1d:aa:e6:44:72:d2:4e:ef:67:88:c7:0f:
                    11:5d:35:a5:9e:31:4c:42:01:4e:64:b0:a5:4b:ab:
                    31:97:b8:7a:f8:a4:84:fd:7f:ba:6b:da:ee:ed:33:
                    ff:e6:53:66:62:b5:b6:ff:ba:b9:1a:d5:07:47:06:
                    9b:24:ae:77:06:7e:5d:ad:29:8d:3c:c4:78:50:6b:
                    fe:e6:11:e3:b1:f4:ae:7d:a4:a4:d5:b4:6f:25:82:
                    ac:17:86:e9:d3:2f:5b:f6:ee:b2:fe:2f:80:0c:e0:
                    c5:6d:05:5d:8b:30:05:5c:e6:ac:9f:ad:f0:ec:17:
                    4d:58:c9:5f:cf:4c:6d:9a:c0:3f:b8:53:3e:0b:b3:
                    ff:b4:38:5a:e8:48:cc:dd:e1:64:20:ff:bc:46:84:
                    b8:b1:e5:f2:b1:fb:d4:b7:ce:b2:ab:0b:dc:df:a5:
                    d2:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:A9:B1:EA:CB:AA:9D:85:83:A9:C5:AD:33:12:69:2E:BA:E9:3F:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4233913-8c3d-4df4-bd7d-495f7afba2ac/5a2c7a03-706c-3753-821e-9e8765fd223c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4233913-8c3d-4df4-bd7d-495f7afba2ac/e4233913-8c3d-4df4-bd7d-495f7afba2ac.crl

            X509v3 Authority Key Identifier:
                keyid:23:E9:67:A1:5B:A9:96:F3:5E:F7:44:E1:D1:D6:08:7E:0E:EC:60:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4233913-8c3d-4df4-bd7d-495f7afba2ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.251.228.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:10:a6:6a:2a:73:df:bb:58:52:fb:f1:96:c2:44:dd:c6:25:
         92:61:60:53:a8:19:f7:6c:8f:80:14:17:33:26:fa:a5:53:76:
         b6:87:13:46:64:95:87:12:cf:3e:35:bd:3e:50:5b:4c:05:b0:
         12:18:38:2e:4d:d3:e0:ea:cd:1b:31:0c:4e:67:ea:ca:36:c4:
         bb:b4:8c:95:cf:83:d1:92:aa:43:29:34:f1:1b:1b:e7:c9:0b:
         a3:2f:77:89:25:a3:6c:45:c0:1f:78:53:90:a2:32:01:da:57:
         ae:19:d2:7c:30:b5:f1:81:bc:5d:4e:e3:88:a5:c5:08:8e:7b:
         d6:87:de:c1:82:8f:f6:e9:d9:d6:03:0a:08:14:06:56:d3:49:
         5d:5c:34:59:92:7d:01:99:96:28:cb:38:ac:e7:8f:44:16:a6:
         fb:0d:6c:9a:c4:0b:85:42:43:e4:56:af:b8:4c:28:de:69:45:
         91:09:de:d5:61:9a:6c:cf:ee:55:fe:3a:3d:4e:8c:87:8f:6d:
         8e:cf:b1:df:c0:18:c3:15:90:90:a8:55:5c:e1:77:01:52:46:
         36:a7:45:48:89:7a:78:41:1c:f4:5f:cf:80:25:cd:f5:34:ae:
         f5:64:14:54:3c:d7:f5:b1:67:b9:e3:e7:40:d4:5e:73:9b:fe:
         45:60:f1:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 18:41:49 2026 by rpki-client