Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/44079553-10d5-3258-bfe6-683d36cf6241.roa
File:                     44079553-10d5-3258-bfe6-683d36cf6241.roa (raw, json)
Hash identifier:          2iV7pmVIvauz7Ucju1SDQkB9bdjJfj4TYF4HT/9FT38=
Subject key identifier:   6F:90:8D:E5:EB:91:57:A9:1D:BD:A4:A9:6F:62:23:90:5E:65:8A:54
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584CEA5CF9FADE90A2AE3A750240
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/44079553-10d5-3258-bfe6-683d36cf6241.roa
Signing time:             Thu 19 Feb 2026 14:00:40 +0000
ROA not before:           Thu 19 Feb 2026 14:00:40 +0000
ROA not after:            Wed 20 May 2026 13:00:40 +0000
asID:                     7029
IP address blocks:        98.20.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Feb 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ea:5c:f9:fa:de:90:a2:ae:3a:75:02:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Feb 19 14:00:40 2026 GMT
            Not After : May 20 13:00:40 2026 GMT
        Subject: CN=f1877a78-b4c6-4b94-a619-d8643cb7827c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:b0:33:b9:7c:f8:0c:36:6f:b5:d6:39:40:7d:
                    71:e5:1e:d3:5e:40:a4:ac:06:d4:21:dd:7e:43:90:
                    ac:46:ee:7a:0b:88:7e:d7:7e:9b:ca:5a:23:da:4e:
                    4d:8d:cd:e7:33:b8:05:75:fc:bc:1f:01:65:b6:4d:
                    0a:94:bf:f5:f5:60:74:fd:61:08:c4:5b:a6:8d:13:
                    c1:e1:a3:e1:02:34:49:1f:da:8b:95:1a:ed:7e:19:
                    48:b2:b7:23:3d:e2:74:0a:e0:6e:2a:45:29:e1:5f:
                    61:7e:f5:93:bb:15:a6:4f:59:04:e9:c8:3d:09:21:
                    d0:f5:22:1c:d5:97:01:44:0f:2a:72:d4:6d:6c:a1:
                    f4:f6:68:f5:53:a8:b2:f2:64:ef:e8:3f:92:40:26:
                    b1:e4:b3:81:6c:53:6b:cd:ac:1c:a1:e5:d7:fd:5b:
                    6c:58:cb:ca:cf:2d:48:3a:a6:36:67:00:42:33:8e:
                    85:f2:01:81:a0:8d:64:cc:df:98:29:72:44:bf:b4:
                    38:08:03:4c:af:4c:4c:ee:4f:cd:f1:47:e3:fe:9f:
                    43:21:63:a9:9a:d0:fb:8a:94:9e:ff:87:83:37:92:
                    06:a3:21:f6:d3:d9:34:14:a4:d6:7b:2b:73:93:56:
                    4b:1f:65:d0:fa:ee:87:fb:b1:7d:b9:af:e3:e7:cf:
                    cd:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:90:8D:E5:EB:91:57:A9:1D:BD:A4:A9:6F:62:23:90:5E:65:8A:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/44079553-10d5-3258-bfe6-683d36cf6241.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.20.28.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:81:8c:fa:92:a6:c7:b0:ee:5e:d1:db:e4:bc:61:17:d3:7a:
         88:b3:bf:74:df:ab:0e:94:37:ac:c6:44:ab:57:f6:f4:3d:05:
         9a:e5:39:a9:a3:d6:b6:86:14:83:82:ea:ea:f8:7f:0b:4a:fe:
         23:46:ed:56:91:14:6e:bd:23:44:36:36:0e:dd:ba:5d:39:c4:
         e0:2b:0a:b0:83:37:b2:fd:a3:8b:e9:77:77:69:26:fc:6b:6a:
         65:0c:a7:3f:69:40:92:70:6a:98:63:9b:ad:4e:37:01:6e:a4:
         97:99:94:6f:d0:ac:2c:81:86:cc:76:f3:62:10:58:1c:20:2b:
         9e:b9:9a:17:cb:01:69:c5:2c:08:ef:ff:f0:28:fe:bc:85:bc:
         a1:86:c7:db:17:db:c3:02:e8:39:ce:74:e2:66:5f:37:e0:47:
         63:26:cd:aa:b1:a0:74:a4:06:5a:90:23:04:d2:42:3d:0e:bc:
         a0:9f:ec:00:69:cb:13:11:87:4e:0c:22:ef:c7:31:e2:0e:26:
         97:2a:18:bc:2a:0b:81:90:0a:44:ac:f2:33:6f:42:27:3b:fa:
         18:27:49:6a:c0:8c:cf:5a:be:54:85:17:a3:ff:e4:81:4c:f2:
         3f:43:bb:1f:38:91:b4:ba:92:4d:9e:2a:21:b1:9f:09:c1:bb:
         8b:b8:f3:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 07:59:42 2026 by rpki-client