Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f37ae11d-629c-4443-bc37-2c3eebd09453/42da3bc5-7b65-355e-9290-85a458491b4b.roa
File:                     42da3bc5-7b65-355e-9290-85a458491b4b.roa (raw, json)
Hash identifier:          x+vdKeA43r6qcPXOtg3PK1yDxcMdBzqNbQTV/LxWwEI=
Subject key identifier:   A8:43:37:D7:CC:49:24:18:97:0A:F1:F6:D0:22:10:A4:73:AD:A7:9B
Certificate issuer:       /CN=f37ae11d-629c-4443-bc37-2c3eebd09453
Certificate serial:       010D0C9F4328584CED4FABCF94E6055F920E7080
Authority key identifier: 57:3A:F3:61:F9:E5:C1:3B:27:E6:21:36:E2:F7:1D:A5:6A:DA:B8:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f37ae11d-629c-4443-bc37-2c3eebd09453.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f37ae11d-629c-4443-bc37-2c3eebd09453/42da3bc5-7b65-355e-9290-85a458491b4b.roa
Signing time:             Fri 20 Feb 2026 15:21:45 +0000
ROA not before:           Fri 20 Feb 2026 15:21:45 +0000
ROA not after:            Thu 21 May 2026 14:21:45 +0000
asID:                     4922
IP address blocks:        209.143.11.0/24 maxlen: 24
                          209.143.18.0/24 maxlen: 24
                          209.143.57.0/24 maxlen: 24
                          209.143.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f37ae11d-629c-4443-bc37-2c3eebd09453/f37ae11d-629c-4443-bc37-2c3eebd09453.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f37ae11d-629c-4443-bc37-2c3eebd09453/f37ae11d-629c-4443-bc37-2c3eebd09453.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f37ae11d-629c-4443-bc37-2c3eebd09453.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ed:4f:ab:cf:94:e6:05:5f:92:0e:70:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f37ae11d-629c-4443-bc37-2c3eebd09453
        Validity
            Not Before: Feb 20 15:21:45 2026 GMT
            Not After : May 21 14:21:45 2026 GMT
        Subject: CN=9009634a-89a8-43d0-b753-f727806e1f17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:1e:1f:89:94:b2:60:54:8b:07:72:a5:b0:c7:
                    a3:ff:49:4f:26:76:f8:7d:3d:71:d2:ae:ba:d0:a0:
                    e3:a1:3e:20:24:a7:9b:69:ca:dd:d1:e3:f1:8c:01:
                    81:41:3f:ae:bc:f8:a0:93:f0:ea:d6:5c:9b:8e:31:
                    25:45:55:c5:7d:b7:f1:f2:c7:e5:f7:53:40:86:24:
                    ff:ff:44:dd:80:8b:cc:05:73:90:f0:70:96:a0:eb:
                    a7:5d:57:64:81:f6:38:6f:9a:70:a7:67:16:8f:31:
                    fa:6f:91:0a:ae:c7:ad:17:18:d8:52:f4:4e:e5:d8:
                    20:3b:de:85:13:be:d0:b3:8f:c3:ea:33:7e:7c:23:
                    a5:97:ac:e7:ad:7a:53:1e:d4:e3:a1:a3:2e:ff:ae:
                    5c:93:a4:30:88:c3:c1:f5:68:bc:00:a7:6f:ac:96:
                    9a:56:b3:34:b3:bc:74:27:d2:8c:6c:c0:c3:69:f3:
                    f7:1c:8d:da:85:ce:71:94:9e:f2:f5:81:e2:40:29:
                    6c:e5:1c:13:f1:ab:bd:d4:8e:eb:f7:ec:67:2d:c8:
                    68:b2:16:11:22:01:83:ee:ff:43:d8:d0:88:7d:06:
                    e8:c4:cd:63:b5:fc:4f:6a:4c:88:b4:79:db:68:48:
                    5e:1d:95:bd:d1:58:32:db:98:bf:0a:a5:4a:43:17:
                    a6:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:43:37:D7:CC:49:24:18:97:0A:F1:F6:D0:22:10:A4:73:AD:A7:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f37ae11d-629c-4443-bc37-2c3eebd09453/42da3bc5-7b65-355e-9290-85a458491b4b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f37ae11d-629c-4443-bc37-2c3eebd09453/f37ae11d-629c-4443-bc37-2c3eebd09453.crl

            X509v3 Authority Key Identifier:
                keyid:57:3A:F3:61:F9:E5:C1:3B:27:E6:21:36:E2:F7:1D:A5:6A:DA:B8:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f37ae11d-629c-4443-bc37-2c3eebd09453.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.143.11.0/24
                  209.143.18.0/24
                  209.143.57.0/24
                  209.143.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:ce:98:e0:b6:1d:67:00:e8:cc:c2:cc:16:f4:21:9a:0b:15:
         51:9a:4b:55:82:85:14:6e:f5:bc:0d:01:30:2c:b4:f5:7e:f9:
         36:17:d4:c4:c8:51:3d:d5:5a:df:7c:c6:25:b2:30:4c:d2:75:
         69:51:18:76:cb:54:d0:30:21:f5:05:b0:d5:15:fd:e5:27:23:
         82:65:b6:6a:3a:25:1d:74:0f:30:98:63:1a:96:ce:e4:2f:78:
         ff:a5:85:cf:f4:92:bc:e9:a4:b5:48:87:20:50:6b:fe:63:ce:
         d1:3c:6e:56:62:b6:c1:93:98:86:63:ee:ad:4b:05:08:be:db:
         a1:48:eb:8e:a5:02:e5:27:2a:23:72:3a:29:2b:82:11:41:b7:
         32:d7:8e:ce:bf:44:9f:14:f6:34:bf:da:e5:9b:d3:c1:27:16:
         6e:b6:5a:14:99:6c:23:85:0c:0a:1d:24:aa:71:93:10:a5:18:
         99:41:e5:5a:45:6d:47:eb:bd:a2:0b:df:b7:f1:c8:aa:db:48:
         6a:f2:ed:56:42:6b:e2:92:c6:79:73:40:91:e4:9b:89:4a:c8:
         2c:74:6c:81:e9:4d:12:0b:93:31:54:a1:bf:a9:62:9a:5f:59:
         f8:9f:1d:97:6b:bb:5e:a1:f2:69:26:bc:41:a0:11:6c:8a:b9:
         a0:55:75:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 27 02:18:55 2026 by rpki-client