Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5/8224a7d5-4b3b-3daa-8e24-fb36d7355ee4.roa
File:                     8224a7d5-4b3b-3daa-8e24-fb36d7355ee4.roa (raw, json)
Hash identifier:          4uyJ4MRXrboXW8RgC7C2bKctEHM+nrOLUxlsuaJKT6g=
Subject key identifier:   16:CF:69:F9:50:A7:C9:C0:DF:3C:3A:F7:7A:AE:72:41:2D:2C:A1:E0
Certificate issuer:       /CN=8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5
Certificate serial:       010D0C9F4328584CBDB1E9A69FA0C8EAC6F03F80
Authority key identifier: 92:04:3A:A3:CA:F8:0F:3C:8D:45:A1:49:B5:5F:4B:AD:F5:C3:D9:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5/8224a7d5-4b3b-3daa-8e24-fb36d7355ee4.roa
Signing time:             Tue 03 Feb 2026 14:00:39 +0000
ROA not before:           Tue 03 Feb 2026 14:00:39 +0000
ROA not after:            Mon 04 May 2026 13:00:39 +0000
asID:                     6509
IP address blocks:        199.212.24.0/24 maxlen: 24
                          205.189.32.0/24 maxlen: 24
                          2001:410:101::/48 maxlen: 48
                          2001:410:10a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:bd:b1:e9:a6:9f:a0:c8:ea:c6:f0:3f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5
        Validity
            Not Before: Feb  3 14:00:39 2026 GMT
            Not After : May  4 13:00:39 2026 GMT
        Subject: CN=a61e81a4-1f8c-4c64-bded-36ae045d104e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:08:cc:72:a0:b0:72:c7:d2:50:ec:23:0b:68:
                    bc:65:b7:e8:93:99:94:1a:e2:55:13:1a:b4:b6:2f:
                    e2:1a:0a:b1:40:bf:a8:cf:17:be:c7:d5:f8:7d:ca:
                    16:1d:94:bc:80:04:47:76:ce:0d:44:c4:bc:24:2a:
                    ff:8d:56:d5:31:28:55:31:a7:82:b9:fc:e1:12:23:
                    04:b9:91:b0:c9:67:f1:ff:3b:a7:27:82:03:82:8d:
                    0e:54:cd:1f:5c:f0:85:38:bb:f1:70:5a:48:e7:3e:
                    ec:d5:c5:45:02:50:ec:c2:94:98:d3:d5:af:1a:3c:
                    c1:5a:f4:6b:57:26:2e:5f:a0:f0:74:1a:c4:59:2a:
                    70:f9:4e:5a:35:ef:5a:aa:c3:1f:c3:72:4a:73:37:
                    60:36:8f:eb:af:62:85:c0:69:4c:96:d9:af:a0:46:
                    4b:c4:09:52:0a:c3:81:ce:a2:0f:8a:79:4b:1f:0a:
                    90:ad:ea:d0:34:14:fb:5f:c2:1c:08:e5:ce:c3:52:
                    4c:25:5e:cc:0a:68:46:0e:76:b8:9e:72:b6:f6:dd:
                    e1:59:51:1c:b0:e5:20:d5:c6:7c:a4:bf:bb:9d:2f:
                    9a:6c:d0:38:99:98:6f:a0:de:57:7d:ca:47:20:b9:
                    c0:1f:d3:13:55:9b:16:b3:f8:51:1f:4d:30:50:39:
                    99:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:CF:69:F9:50:A7:C9:C0:DF:3C:3A:F7:7A:AE:72:41:2D:2C:A1:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5/8224a7d5-4b3b-3daa-8e24-fb36d7355ee4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5.crl

            X509v3 Authority Key Identifier:
                keyid:92:04:3A:A3:CA:F8:0F:3C:8D:45:A1:49:B5:5F:4B:AD:F5:C3:D9:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.212.24.0/24
                  205.189.32.0/24
                IPv6:
                  2001:410:101::/48
                  2001:410:10a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:5e:c7:75:da:70:a7:c0:3f:ad:fc:43:da:72:dc:b6:b9:ea:
         7d:00:e6:a1:a5:90:5c:bd:fe:02:a3:b1:3f:5a:43:86:e9:d9:
         dd:2f:a0:3c:66:6d:2e:4d:b2:f1:99:1e:d6:96:0a:7a:98:45:
         fb:23:c6:37:e3:5a:ea:8d:5d:fd:7c:be:0f:3c:82:83:a9:50:
         0e:8d:2b:af:15:4c:64:3b:47:4a:b1:d7:c8:f6:b9:f5:06:d0:
         cc:79:a0:37:4d:21:8e:70:48:2a:72:c1:c2:67:f5:c7:6a:df:
         66:15:c7:05:d4:be:d2:e7:72:69:52:e3:3d:f8:6a:d4:a5:e0:
         16:87:50:22:4e:e8:57:39:e3:6a:ff:87:6c:c1:5f:a5:53:0e:
         9c:58:79:66:e9:10:2a:d9:1a:ae:c4:37:86:a0:ca:8c:e3:60:
         ca:58:d8:d1:23:a2:d6:30:b0:87:02:0c:15:c4:16:e0:4e:57:
         01:f4:ea:27:3c:51:ea:77:9d:11:8b:d2:1d:79:67:c4:c8:24:
         3d:ea:c0:7d:24:f7:a7:0e:c9:b7:51:ca:d6:92:be:7c:40:f1:
         9b:10:6d:ee:4e:ad:10:6b:d5:bb:3e:5a:1a:f7:ff:d6:2d:c0:
         f2:1e:8e:7e:a8:32:26:cf:bd:20:38:cd:15:56:a5:cf:f7:eb:
         4d:c5:8e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 27 10:00:13 2026 by rpki-client