Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/70def14d-b4f6-3eef-92c8-38c6768c3263.roa
File:                     70def14d-b4f6-3eef-92c8-38c6768c3263.roa (raw, json)
Hash identifier:          Y08yxJOglHNoDvIGOzwSYlaHCORI8EQ/3USf7PNNBoc=
Subject key identifier:   BC:FB:7B:5C:3E:25:01:D6:6A:FC:61:44:19:6D:A9:2C:FD:E9:BB:93
Certificate issuer:       /CN=15459be1-f2c7-44a2-ac69-01d238f1b0de
Certificate serial:       010D0C9F4328584CEBC23097D17A873E37B9C680
Authority key identifier: 05:7A:6E:22:70:B2:BA:EC:B1:5B:3C:D3:76:40:05:21:50:33:C5:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/70def14d-b4f6-3eef-92c8-38c6768c3263.roa
Signing time:             Fri 20 Feb 2026 02:00:32 +0000
ROA not before:           Fri 20 Feb 2026 02:00:32 +0000
ROA not after:            Thu 21 May 2026 01:00:32 +0000
asID:                     53488
IP address blocks:        24.246.128.0/18 maxlen: 24
                          64.127.208.0/20 maxlen: 24
                          173.246.192.0/20 maxlen: 24
                          173.246.208.0/21 maxlen: 24
                          173.246.216.0/23 maxlen: 24
                          173.246.222.0/23 maxlen: 24
                          198.185.218.0/23 maxlen: 24
                          205.236.71.0/24 maxlen: 24
                          216.116.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/15459be1-f2c7-44a2-ac69-01d238f1b0de.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/15459be1-f2c7-44a2-ac69-01d238f1b0de.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:eb:c2:30:97:d1:7a:87:3e:37:b9:c6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15459be1-f2c7-44a2-ac69-01d238f1b0de
        Validity
            Not Before: Feb 20 02:00:32 2026 GMT
            Not After : May 21 01:00:32 2026 GMT
        Subject: CN=eb6283c9-9518-47c4-a19b-fd2651b06d5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:f9:20:e6:24:6b:f3:c6:69:75:8b:49:13:9d:
                    05:56:4d:a6:5c:0b:49:33:8b:7b:a4:79:08:35:b5:
                    fc:db:0a:82:4a:db:91:ae:bf:1c:c3:aa:dc:2e:8b:
                    ec:4a:a3:eb:58:cf:0a:ab:6d:17:3a:1a:60:3a:74:
                    ed:6d:a7:f5:cb:a8:f6:8f:4d:ba:0b:ad:8e:97:2f:
                    66:31:61:34:6e:dc:7a:98:18:f6:e0:cd:09:d7:06:
                    40:11:00:ed:31:05:8b:65:3b:fd:b3:fd:df:16:48:
                    45:5d:e1:a1:f1:27:f5:f5:d6:8f:2f:09:55:ad:61:
                    1e:c8:ad:0d:d4:14:c8:89:06:40:f8:3c:cb:7e:08:
                    59:e2:90:40:83:60:d6:b8:bb:85:8a:53:45:a3:1c:
                    14:b0:e1:2b:f8:03:fe:a2:58:96:36:fd:df:49:20:
                    f6:2b:c3:c6:7b:a4:e2:1c:76:97:ba:03:b3:65:d8:
                    07:c2:09:da:88:76:16:54:4f:07:69:85:13:37:62:
                    75:32:be:ff:e9:6d:e2:9b:3d:94:0f:ec:bd:d4:22:
                    28:c0:5d:ed:06:0b:a0:99:89:97:03:96:51:fd:33:
                    19:ee:87:4e:4b:5b:10:1d:7a:5d:48:ce:4d:5a:8a:
                    28:19:91:12:9e:b3:93:83:9d:1f:4f:7e:55:e3:72:
                    af:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:FB:7B:5C:3E:25:01:D6:6A:FC:61:44:19:6D:A9:2C:FD:E9:BB:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/70def14d-b4f6-3eef-92c8-38c6768c3263.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/15459be1-f2c7-44a2-ac69-01d238f1b0de.crl

            X509v3 Authority Key Identifier:
                keyid:05:7A:6E:22:70:B2:BA:EC:B1:5B:3C:D3:76:40:05:21:50:33:C5:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.246.128.0/18
                  64.127.208.0/20
                  173.246.192.0-173.246.217.255
                  173.246.222.0/23
                  198.185.218.0/23
                  205.236.71.0/24
                  216.116.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:b3:e0:7a:5c:d8:04:d8:55:95:fd:3b:4f:75:a3:ea:5a:3c:
         6e:f7:81:5c:cd:7a:1e:9e:8f:37:0a:ce:ee:37:4c:70:4c:1c:
         11:87:ba:76:c5:3e:28:47:73:b5:f8:ca:4d:9d:56:99:1c:ba:
         59:e6:be:7a:a7:9b:ee:53:0a:70:41:1f:f8:49:ce:e8:cc:56:
         da:ff:ba:a0:3e:34:69:a7:0e:3a:a4:1f:50:ae:6f:66:5b:3c:
         8c:c1:90:5c:a4:f8:ca:dc:f1:ec:e7:a6:20:c4:78:d2:f5:7c:
         39:06:08:90:f6:c7:fd:e8:67:94:69:75:d2:d5:f8:ed:78:14:
         c0:10:5f:c0:51:e8:64:00:37:b6:65:09:ba:80:65:bd:7e:ef:
         11:48:39:ad:5f:94:ce:98:4f:f1:a6:3f:1b:0f:9e:3f:4e:d2:
         73:6e:5a:eb:e5:8f:8d:ec:e3:f2:58:cf:58:b5:5a:10:b4:92:
         58:cf:fb:0a:af:f5:9b:8b:83:e2:af:3d:ae:a6:19:f3:85:22:
         03:15:b1:f7:c6:02:4c:01:a3:77:33:1b:4b:48:bc:80:10:b3:
         25:54:cf:02:bd:ff:30:92:5a:d0:a7:99:13:b2:ce:21:27:19:
         53:6e:19:2e:5e:9a:7f:fe:c1:fe:02:d0:b7:a7:c4:2a:23:af:
         7a:7e:30:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 12:27:53 2026 by rpki-client