Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ecb79349-c2c5-3e1a-b870-5737e013da06.roa
File:                     ecb79349-c2c5-3e1a-b870-5737e013da06.roa (raw, json)
Hash identifier:          xsPlm7rzmxRLiJRjLbetG9ZTJKgKgCbxD7hRfkTJ3SM=
Subject key identifier:   7E:BE:0C:5A:EB:93:E6:27:41:70:40:5B:EF:1A:92:C7:05:95:F1:60
Certificate issuer:       /CN=ac9a6201-fe8c-49a4-985d-5463076b397d
Certificate serial:       010D0C9F4328584CF9B7824C0E7637E3FCBD4980
Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ecb79349-c2c5-3e1a-b870-5737e013da06.roa
Signing time:             Wed 25 Feb 2026 02:00:32 +0000
ROA not before:           Wed 25 Feb 2026 02:00:32 +0000
ROA not after:            Tue 26 May 2026 01:00:32 +0000
asID:                     54989
IP address blocks:        209.198.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Feb 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f9:b7:82:4c:0e:76:37:e3:fc:bd:49:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d
        Validity
            Not Before: Feb 25 02:00:32 2026 GMT
            Not After : May 26 01:00:32 2026 GMT
        Subject: CN=310aea7a-18d1-4862-9346-7d75f50eafef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d7:25:ca:72:b2:05:75:04:da:18:bd:5f:6b:
                    f0:95:33:a1:00:c7:53:9f:fd:a5:49:65:28:ff:89:
                    b4:63:99:20:15:e7:b8:2a:35:ed:78:ee:ec:5c:aa:
                    1d:16:3a:63:07:27:62:85:b5:b5:99:23:47:ec:41:
                    28:f6:63:db:b0:cc:80:9a:c5:c6:78:6d:a1:f3:ce:
                    11:ed:11:30:0c:48:3a:6b:fe:01:27:82:52:cf:1a:
                    47:17:f3:65:4c:75:d8:7c:b7:2d:f8:2b:8a:36:ae:
                    61:79:03:60:da:ba:9d:c9:d4:05:6e:0a:2e:fc:86:
                    a8:93:0a:59:a3:ff:a1:1d:e1:d3:f2:46:e9:44:2b:
                    cc:bb:e3:03:8b:be:7c:5f:94:1a:b9:7a:9c:cf:b3:
                    58:34:cc:ad:90:33:54:88:63:94:e1:1b:ea:24:7d:
                    7e:be:88:19:09:54:64:20:ea:31:2c:ff:dc:11:0e:
                    7e:ac:75:6f:0a:84:6e:ca:df:5d:8d:de:b4:54:af:
                    32:be:7d:95:b4:11:9c:ef:81:5c:aa:ed:c9:a6:70:
                    be:36:72:69:30:80:dc:06:13:8a:bd:88:21:61:53:
                    dd:75:6b:f4:76:00:a0:40:af:2f:d9:5b:02:96:ad:
                    4b:49:b1:e6:82:a8:0e:b9:b0:27:a8:f1:4d:48:9f:
                    2a:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:BE:0C:5A:EB:93:E6:27:41:70:40:5B:EF:1A:92:C7:05:95:F1:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ecb79349-c2c5-3e1a-b870-5737e013da06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl

            X509v3 Authority Key Identifier:
                keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.198.81.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:f3:d3:9c:fc:ff:d8:b8:a4:e6:ed:10:6d:e2:93:5b:b3:1f:
         24:e5:f7:44:a6:fe:a7:7b:ea:2a:6d:dc:01:89:e8:c1:ac:f2:
         d6:e3:66:f4:99:da:9d:ad:f8:21:26:88:2b:82:07:ef:15:73:
         10:8a:b9:e8:5d:2f:32:ae:2f:4e:6f:74:94:c1:df:22:fd:90:
         d9:c0:c6:6d:33:01:52:05:cc:49:9b:9f:a9:b3:33:90:87:95:
         9f:f7:30:48:af:b5:54:b7:17:5f:90:03:b0:b8:40:f9:ff:29:
         6f:5b:f1:6a:19:62:8f:e8:a7:d1:0e:33:55:c3:09:99:a2:7c:
         fb:53:09:96:01:ac:51:33:af:45:4e:d0:86:ea:9f:12:62:59:
         8e:00:0d:5c:4d:e8:d3:c9:2d:41:ad:8d:00:4d:72:dc:f3:73:
         8c:50:57:8d:dc:ce:f7:ea:ce:17:6c:93:a7:8a:a3:18:cc:aa:
         67:2f:b3:0e:37:ec:63:c5:40:92:6a:d1:3b:5d:8d:62:7b:04:
         e4:10:b4:91:8b:50:98:75:0f:05:3e:6d:4d:56:6a:3e:1d:a8:
         15:6e:e7:ee:02:6e:8e:d8:8b:32:31:2a:64:2d:a6:85:b8:d7:
         01:04:b5:66:c9:54:a5:a3:56:f0:1d:1d:6a:28:d2:a8:a7:4b:
         ee:98:09:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 15:03:53 2026 by rpki-client