Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7cfe4957-5dcc-4e3d-8c92-31413817894b/8bb299e1-dc1c-3f3e-9ee6-1035ce9a1954.roa
File:                     8bb299e1-dc1c-3f3e-9ee6-1035ce9a1954.roa (raw, json)
Hash identifier:          vFBBI+gYrz0QN/GKk5LtageIeNXdIWFvRvoR7ZLyhKY=
Subject key identifier:   3A:F2:6D:5F:D3:F3:FD:E2:BD:2E:F8:49:08:FE:B1:89:C7:12:52:98
Certificate issuer:       /CN=7cfe4957-5dcc-4e3d-8c92-31413817894b
Certificate serial:       010D0C9F4328584CF9B78B5B2B674285458D3B00
Authority key identifier: D0:12:35:01:BC:61:EE:F8:28:4E:16:FF:DF:A0:28:75:E0:DB:63:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7cfe4957-5dcc-4e3d-8c92-31413817894b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7cfe4957-5dcc-4e3d-8c92-31413817894b/8bb299e1-dc1c-3f3e-9ee6-1035ce9a1954.roa
Signing time:             Wed 25 Feb 2026 02:00:32 +0000
ROA not before:           Wed 25 Feb 2026 02:00:32 +0000
ROA not after:            Tue 26 May 2026 01:00:32 +0000
asID:                     31898
IP address blocks:        198.49.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7cfe4957-5dcc-4e3d-8c92-31413817894b/7cfe4957-5dcc-4e3d-8c92-31413817894b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7cfe4957-5dcc-4e3d-8c92-31413817894b/7cfe4957-5dcc-4e3d-8c92-31413817894b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7cfe4957-5dcc-4e3d-8c92-31413817894b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f9:b7:8b:5b:2b:67:42:85:45:8d:3b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7cfe4957-5dcc-4e3d-8c92-31413817894b
        Validity
            Not Before: Feb 25 02:00:32 2026 GMT
            Not After : May 26 01:00:32 2026 GMT
        Subject: CN=af410b22-c74a-4976-894a-bcc52ddbcb8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:e3:e3:44:2b:8c:4b:69:1d:a5:32:92:cd:8f:
                    77:6f:5d:ce:c5:f3:2f:ae:73:6c:0b:ae:dd:f4:1c:
                    34:8e:d0:69:50:3e:66:e0:4a:9a:05:4a:34:a7:50:
                    ac:b8:c8:9e:70:38:f3:f4:f4:8d:38:9e:78:bc:68:
                    c6:ed:80:44:2c:db:8b:46:77:15:6a:67:80:cb:4a:
                    5a:54:88:2f:2a:19:45:a7:e0:cc:c0:56:ad:5f:e9:
                    24:f6:8f:99:6a:f6:40:56:e4:0e:6b:1e:99:9c:5f:
                    51:99:06:48:f7:82:a4:3b:06:19:32:d3:93:23:b9:
                    97:d3:dd:67:6f:58:7c:25:1f:1c:f0:bd:45:1a:46:
                    1f:64:cb:f9:c3:4f:33:d6:20:8c:ad:1b:95:9a:a6:
                    9c:e2:fc:61:98:ac:1c:18:6f:ea:b9:30:d8:81:8b:
                    40:72:25:ff:ea:50:fb:e0:b2:7f:c1:b4:9a:91:63:
                    46:e0:7e:85:f5:4e:88:95:00:d1:10:a3:dc:76:52:
                    40:4e:0b:18:5a:1d:7e:81:78:39:d4:23:a5:60:eb:
                    0b:7f:06:9b:3f:5c:f9:65:8b:c0:e4:68:b2:b0:5f:
                    ac:59:f7:3c:70:4b:90:bb:57:04:64:43:25:14:c4:
                    39:bb:56:06:78:63:ec:30:46:a0:99:fa:57:80:c9:
                    6b:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:F2:6D:5F:D3:F3:FD:E2:BD:2E:F8:49:08:FE:B1:89:C7:12:52:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7cfe4957-5dcc-4e3d-8c92-31413817894b/8bb299e1-dc1c-3f3e-9ee6-1035ce9a1954.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7cfe4957-5dcc-4e3d-8c92-31413817894b/7cfe4957-5dcc-4e3d-8c92-31413817894b.crl

            X509v3 Authority Key Identifier:
                keyid:D0:12:35:01:BC:61:EE:F8:28:4E:16:FF:DF:A0:28:75:E0:DB:63:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7cfe4957-5dcc-4e3d-8c92-31413817894b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.49.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:71:97:b3:f9:a5:ce:c7:24:cf:5e:80:55:72:0a:35:49:c4:
         0b:2f:5e:5c:37:ae:05:4b:2e:01:00:9b:cf:d9:d9:87:20:a3:
         6d:30:fc:5e:6d:e9:9e:6a:31:8c:e5:2a:1b:69:a6:b2:2f:46:
         09:30:af:3e:f9:b8:a3:0b:80:6c:2b:ea:78:18:db:7f:0b:98:
         be:18:65:8e:0b:ff:7a:f8:7b:70:1e:2e:80:1d:5c:de:65:86:
         aa:70:9d:b8:12:40:ad:e6:6a:fa:4f:de:71:be:bd:d2:d6:da:
         80:9b:5d:8b:e9:1e:5b:a4:df:0f:72:2d:98:8f:f0:f5:10:d0:
         34:d5:cf:47:69:c4:7f:6d:d6:44:d7:04:22:2b:8a:2b:4d:9a:
         7f:2e:2c:2f:7b:80:74:94:93:c8:8f:b9:02:24:78:d0:40:af:
         e7:2f:d8:34:02:8f:b5:9a:3a:bd:de:ef:d3:9a:36:d1:a1:9e:
         1d:92:36:f6:80:d8:d9:56:d8:b4:f0:c1:d2:62:13:f3:a8:5c:
         fa:bc:bb:e7:ad:a2:6b:0d:dd:ab:87:33:f1:ea:fe:71:45:bf:
         af:c8:85:04:49:aa:38:a5:d7:bc:36:d8:fc:b4:2c:d5:e7:49:
         31:0e:57:a5:18:b3:8d:cb:4a:a2:dd:b5:8d:88:d4:47:c8:c5:
         b8:b2:1d:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 05:00:23 2026 by rpki-client