Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/26eaef1a-80b9-36a1-b3e4-ebe5e68309b2.roa
File:                     26eaef1a-80b9-36a1-b3e4-ebe5e68309b2.roa (raw, json)
Hash identifier:          lb7zUHdy46p4K0trehQufve3EqEY0EV99EgCuB9MkIA=
Subject key identifier:   9E:46:78:00:0B:D1:D2:0C:C2:A6:D6:A8:68:4A:11:9C:29:29:5E:F0
Certificate issuer:       /CN=91544e97-45e8-44e4-8b14-5bf7804e5988
Certificate serial:       010D0C9F4328584D100D02278268CE3BE7EC7940
Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/26eaef1a-80b9-36a1-b3e4-ebe5e68309b2.roa
Signing time:             Thu 05 Mar 2026 02:00:32 +0000
ROA not before:           Thu 05 Mar 2026 02:00:32 +0000
ROA not after:            Wed 03 Jun 2026 01:00:32 +0000
asID:                     15164
IP address blocks:        199.200.88.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:10:0d:02:27:82:68:ce:3b:e7:ec:79:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988
        Validity
            Not Before: Mar  5 02:00:32 2026 GMT
            Not After : Jun  3 01:00:32 2026 GMT
        Subject: CN=dc8c658d-5d60-4641-99ab-3ccdc12249ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:5c:07:f8:e2:9e:52:a7:92:54:fc:7c:dc:32:
                    02:d8:5f:aa:96:a3:8c:4d:e3:67:c3:c7:4f:a5:11:
                    30:45:4f:e4:f7:a8:78:d3:f5:3f:73:ca:91:c6:af:
                    ec:50:36:87:a5:3d:1d:cb:a9:c2:d2:a8:11:d4:cd:
                    9e:04:46:58:8c:b0:74:68:17:b1:90:91:1b:39:96:
                    5c:04:dd:2f:ef:eb:df:7b:25:37:8c:29:c7:95:0f:
                    c4:97:3b:61:7d:dd:53:5a:54:35:2f:ac:75:ab:2d:
                    00:5f:8d:98:25:35:af:0c:8e:26:70:f9:3d:4a:95:
                    94:50:c3:ce:99:3b:cb:fa:c4:34:61:da:34:c6:2a:
                    fc:69:03:5c:fa:37:2e:eb:bb:1e:7a:1d:0f:c4:ee:
                    55:45:fd:bf:95:53:ea:24:7b:e8:60:68:84:f7:0f:
                    e3:df:8b:c4:92:2b:eb:1d:f6:a5:f3:6a:da:d6:d4:
                    c4:33:17:a5:5b:ce:bc:dc:85:d7:17:3b:5d:41:47:
                    74:c2:8a:ed:be:4a:0f:fe:8d:a7:7c:2e:63:f0:16:
                    57:59:ab:a5:3d:27:04:f8:d5:44:ac:64:e4:fe:2a:
                    5f:ea:2b:4f:01:ac:fe:d2:df:55:1e:49:c9:76:b7:
                    5d:2d:3a:8c:6e:7c:5d:eb:3b:5b:c1:05:ee:9c:cd:
                    e9:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:46:78:00:0B:D1:D2:0C:C2:A6:D6:A8:68:4A:11:9C:29:29:5E:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/26eaef1a-80b9-36a1-b3e4-ebe5e68309b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl

            X509v3 Authority Key Identifier:
                keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.200.88.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:0e:66:8c:28:ce:52:6d:c3:9d:60:66:db:5a:57:8c:ed:16:
         b4:6d:67:9e:77:6c:9c:91:0b:21:fd:8c:6d:64:4f:2f:fd:5d:
         b1:24:82:06:d1:14:21:19:a6:73:b5:a2:c7:09:02:57:62:3d:
         10:99:be:fb:7e:b2:91:2e:00:c0:60:79:b4:5e:49:0f:34:fc:
         7a:79:bb:c8:01:8f:0a:3f:da:83:7b:d9:68:e0:17:92:d6:19:
         7a:28:1b:f5:63:d9:40:78:ad:a6:63:a2:d0:f1:5b:8d:a6:ff:
         ce:84:8f:79:86:99:2c:a5:96:b8:d4:12:2e:46:55:14:7f:e8:
         fc:3c:4e:41:46:bc:be:28:30:53:b7:97:b4:34:d4:65:95:ed:
         45:7d:60:ea:f9:eb:ef:9c:db:9b:a6:d3:32:9f:b6:bc:14:ad:
         7c:8f:7e:f1:ec:58:38:40:00:55:2a:0d:e4:eb:5e:ec:83:4f:
         b1:6a:8d:6c:e5:a2:7d:d5:c9:fc:af:9a:c6:8a:07:7f:d1:ba:
         3d:38:50:4a:f9:e0:c9:dc:67:9e:d0:3f:64:fc:71:50:67:ae:
         a9:c3:8b:58:f4:ee:8c:ca:e5:e7:84:e0:bc:05:7f:8a:a0:b8:
         9d:da:d7:b8:f6:a0:5a:fc:c9:ec:1b:a7:2d:65:a5:6a:88:4d:
         34:da:a0:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 13:32:06 2026 by rpki-client