Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba/888b4e53-c390-3724-b441-2f69dabf74f6.roa
File:                     888b4e53-c390-3724-b441-2f69dabf74f6.roa (raw, json)
Hash identifier:          r1QBaGewx2T9f35sHw8QI4vBxJ0/kY0eFGbvvP6Mz6g=
Subject key identifier:   8F:35:BD:81:1A:38:F6:3B:31:4D:43:10:34:D4:7E:B9:CB:0D:D5:69
Certificate issuer:       /CN=05ec8359-4ede-4036-8702-23e5dd37a9ba
Certificate serial:       010D0C9F4328584CC611F54C56186DCE5F302B00
Authority key identifier: 36:0A:E8:03:24:2B:BA:C6:75:78:32:2C:14:A5:B9:5D:11:5A:00:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba/888b4e53-c390-3724-b441-2f69dabf74f6.roa
Signing time:             Fri 06 Feb 2026 14:00:40 +0000
ROA not before:           Fri 06 Feb 2026 14:00:40 +0000
ROA not after:            Thu 07 May 2026 13:00:40 +0000
asID:                     21859
IP address blocks:        209.97.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba/05ec8359-4ede-4036-8702-23e5dd37a9ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba/05ec8359-4ede-4036-8702-23e5dd37a9ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 24 Feb 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c6:11:f5:4c:56:18:6d:ce:5f:30:2b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05ec8359-4ede-4036-8702-23e5dd37a9ba
        Validity
            Not Before: Feb  6 14:00:40 2026 GMT
            Not After : May  7 13:00:40 2026 GMT
        Subject: CN=f4b2ba1e-3155-4f4e-8cea-bd0da1b52250
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f7:ba:86:f4:2b:0a:e9:2f:f9:a2:ae:73:25:
                    c2:77:87:20:b9:e9:df:dd:9e:b3:30:fb:56:3d:14:
                    50:ee:37:98:66:fe:9f:32:7c:75:b6:0e:2e:ed:b2:
                    76:65:e6:84:20:8b:96:7c:17:03:b2:9b:b1:24:0d:
                    e0:07:da:bf:4e:92:1c:8c:67:5c:e3:7c:65:70:16:
                    9c:5e:9a:3d:85:2b:16:ca:fa:1f:5f:4b:8b:9c:8f:
                    b8:33:81:ea:5c:4b:13:09:fc:a1:d2:ed:54:22:8a:
                    b6:5d:5c:1d:6b:09:9f:fb:5a:e6:c9:ff:3d:a2:59:
                    68:66:da:f2:b7:52:8c:64:a1:1e:df:de:e2:84:d8:
                    d9:b4:7a:cd:55:81:15:fa:be:7f:21:17:d7:b8:27:
                    05:d3:99:54:9a:09:db:bc:41:7a:f7:51:fa:37:5c:
                    b6:b8:7c:2b:21:0e:2f:de:b7:cf:d4:73:11:34:ef:
                    81:57:95:47:d6:17:7b:f0:93:f0:3e:4b:47:b1:37:
                    21:ed:64:1a:6f:9d:dc:1e:e5:ab:a7:99:e9:34:0c:
                    d0:5a:e2:79:2c:1c:13:40:b8:66:4e:6f:0a:66:36:
                    44:97:5c:df:28:f3:0f:f1:29:55:b8:9f:89:b6:38:
                    c1:cb:96:52:f4:6a:00:a3:fe:c8:22:95:c2:d0:99:
                    ac:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:35:BD:81:1A:38:F6:3B:31:4D:43:10:34:D4:7E:B9:CB:0D:D5:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba/888b4e53-c390-3724-b441-2f69dabf74f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba/05ec8359-4ede-4036-8702-23e5dd37a9ba.crl

            X509v3 Authority Key Identifier:
                keyid:36:0A:E8:03:24:2B:BA:C6:75:78:32:2C:14:A5:B9:5D:11:5A:00:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.97.218.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:74:af:00:a6:47:d2:9d:43:c7:98:51:7c:64:61:c1:8d:25:
         33:a7:da:15:a9:af:1e:95:1b:e0:c5:d3:f2:51:b7:82:eb:54:
         77:29:aa:4d:d0:69:84:04:17:03:40:f2:1f:6f:8c:d2:0a:c0:
         d6:33:6d:8a:c1:ff:49:98:78:c5:90:97:1b:c0:98:11:b8:73:
         43:e7:87:ae:7b:8f:23:ef:83:76:e2:34:e1:31:b2:54:66:0c:
         54:84:26:c5:cb:ef:35:03:07:41:94:43:e7:50:dd:6a:34:8a:
         e3:3a:82:00:ee:af:2f:d1:1f:6d:92:50:91:dd:6a:98:d5:4b:
         f7:8a:5d:bb:1a:12:8d:5b:c2:a0:7a:00:b1:26:5f:f0:e8:16:
         8c:c5:0a:5f:19:1e:77:5a:46:38:49:a1:fb:b0:93:0a:95:a7:
         b6:60:70:59:bb:bc:44:7c:bb:97:2b:48:b3:22:22:e9:50:1f:
         e9:48:6e:dc:d8:8f:6d:8e:f8:76:ce:70:c8:b2:ed:5e:a4:0d:
         16:73:1a:7e:fc:64:43:62:63:77:52:a4:52:63:da:7b:51:93:
         63:bc:71:42:3b:85:15:c4:4f:f6:6e:03:b1:51:52:49:be:b8:
         2f:70:c5:de:7d:e6:bd:4c:f1:55:bb:44:e5:86:b3:72:c6:9c:
         93:b0:97:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 22 19:23:01 2026 by rpki-client