Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/ec60ded0-1bfa-3e2e-af74-4a81ae7eaf1d.roa
File:                     ec60ded0-1bfa-3e2e-af74-4a81ae7eaf1d.roa (raw, json)
Hash identifier:          Y64CrsI5MonYFmXjCHMN34z1GFa49XEkaCC3w1Xlidk=
Subject key identifier:   09:62:7B:45:B2:55:BD:11:65:09:F1:4D:DB:21:2E:A8:76:B2:19:80
Certificate issuer:       /CN=7b143713-7923-4e4d-9476-b8e5ce1ca9c9
Certificate serial:       010D0C9F4328584CD0DBA5E1B2B2B31B17DDBD80
Authority key identifier: 61:D5:32:E9:6D:BB:CA:2E:A4:34:67:90:E5:3E:1C:8C:AF:B2:D9:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/ec60ded0-1bfa-3e2e-af74-4a81ae7eaf1d.roa
Signing time:             Tue 10 Feb 2026 10:45:20 +0000
ROA not before:           Tue 10 Feb 2026 10:45:20 +0000
ROA not after:            Mon 11 May 2026 09:45:20 +0000
asID:                     19905
IP address blocks:        198.23.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Feb 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d0:db:a5:e1:b2:b2:b3:1b:17:dd:bd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b143713-7923-4e4d-9476-b8e5ce1ca9c9
        Validity
            Not Before: Feb 10 10:45:20 2026 GMT
            Not After : May 11 09:45:20 2026 GMT
        Subject: CN=0efead16-73e0-4d00-845f-5cd2ca9c33fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:4e:db:7d:ee:96:48:fa:fd:bc:c7:56:0b:d1:
                    ed:cc:b1:cd:aa:49:0e:22:74:96:b6:6a:5e:d4:8c:
                    34:c8:7f:e4:09:9e:cb:d7:64:d2:a0:f8:62:09:c9:
                    cc:c0:3d:3f:a5:66:7f:91:13:3e:1d:f0:e0:27:95:
                    d6:ac:f7:99:24:82:01:01:38:29:6f:a1:d5:6b:97:
                    31:aa:a6:ea:7d:ae:c1:09:9c:d0:a5:b5:a2:b3:62:
                    3e:4b:e2:8e:6f:f2:11:8e:cd:8f:dc:59:46:a0:fa:
                    a9:c5:89:3f:13:ca:e5:94:ce:be:38:c7:67:f2:8d:
                    74:77:fa:70:ef:6f:1a:01:f0:67:f2:f0:95:46:31:
                    f2:b1:31:98:27:b5:de:c6:70:14:18:de:97:eb:42:
                    f4:00:11:21:53:a4:5e:c8:24:06:2b:21:59:94:a0:
                    30:db:eb:77:f3:51:4f:dd:a1:b8:70:b1:05:11:36:
                    c1:cc:a8:b7:a6:9b:f8:86:77:f4:5a:7a:e4:29:c8:
                    73:96:69:7f:76:1c:4a:0e:36:a6:e1:f8:aa:c8:ee:
                    ae:d1:7a:f7:9a:fd:5b:2e:34:53:50:24:01:2a:86:
                    8c:87:ae:73:f3:07:52:23:ef:c8:b8:07:22:e4:c3:
                    38:75:29:15:e4:a5:50:73:91:c7:4d:36:99:a8:8f:
                    78:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:62:7B:45:B2:55:BD:11:65:09:F1:4D:DB:21:2E:A8:76:B2:19:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/ec60ded0-1bfa-3e2e-af74-4a81ae7eaf1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.crl

            X509v3 Authority Key Identifier:
                keyid:61:D5:32:E9:6D:BB:CA:2E:A4:34:67:90:E5:3E:1C:8C:AF:B2:D9:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.23.49.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:c0:65:40:4d:93:fe:b1:3a:08:ad:b0:f2:b2:7c:f5:9d:01:
         7d:c5:c3:0b:d8:78:0d:b5:7d:21:0c:65:3d:c5:5b:bd:ac:0a:
         62:6b:62:57:2e:4d:81:26:dd:fc:bc:ce:05:e9:6a:d8:44:88:
         0f:69:50:8f:05:58:c3:1e:cc:18:e4:05:31:cb:c1:71:9e:a7:
         fc:83:df:50:8a:db:41:fd:6e:1b:32:f3:0e:48:3c:7a:ef:56:
         68:aa:86:2a:53:22:8d:c9:88:00:e1:03:55:8c:0a:e1:aa:27:
         5d:36:2e:70:c7:62:fd:c6:b2:e5:8f:2d:45:94:59:d6:49:d4:
         12:74:ee:b5:30:72:9f:bc:59:1e:30:46:63:04:27:96:eb:86:
         37:2d:1a:81:07:18:f8:d2:e7:64:41:d8:2e:e5:59:57:cb:e5:
         fb:dd:3e:4b:43:06:2e:b4:25:5d:4b:73:a4:ec:37:22:b7:e7:
         5b:c9:bf:b1:f6:d4:c1:25:d2:27:ac:9b:42:ce:55:c4:39:6a:
         aa:0c:d3:a2:c6:df:1e:4b:2c:32:96:c3:ec:2b:04:96:f7:85:
         c0:05:4f:30:2d:9c:74:b3:ef:7e:f3:fd:6f:e3:d1:ef:52:3b:
         db:47:cd:14:80:95:7d:26:26:56:6a:e0:10:db:d2:42:91:17:
         f3:b8:85:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 23:46:43 2026 by rpki-client