Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/2ed8c46e-bbd7-306c-bd51-09e1938178a9.roa
File:                     2ed8c46e-bbd7-306c-bd51-09e1938178a9.roa (raw, json)
Hash identifier:          XwiQjNAl5jvTPUg0gbrmhE45ChS5LkcSXSCfUN3wLoQ=
Subject key identifier:   39:41:56:EE:94:34:BE:EF:42:8B:00:22:E3:2B:FB:9D:E7:C8:B2:88
Certificate issuer:       /CN=ccaa9c27-6b68-45a8-b777-4c7b00482ab8
Certificate serial:       010D0C9F4328584CE8F77CAAD3E4262E0FE40000
Authority key identifier: A2:41:EF:5B:9A:6A:4B:E6:91:56:9C:87:8A:A8:6E:DC:54:B2:7F:86
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/2ed8c46e-bbd7-306c-bd51-09e1938178a9.roa
Signing time:             Thu 19 Feb 2026 02:00:32 +0000
ROA not before:           Thu 19 Feb 2026 02:00:32 +0000
ROA not after:            Wed 20 May 2026 01:00:32 +0000
asID:                     0
IP address blocks:        206.82.110.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Feb 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e8:f7:7c:aa:d3:e4:26:2e:0f:e4:00:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccaa9c27-6b68-45a8-b777-4c7b00482ab8
        Validity
            Not Before: Feb 19 02:00:32 2026 GMT
            Not After : May 20 01:00:32 2026 GMT
        Subject: CN=642f369c-5c8b-48eb-bf55-c28817de7816
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:04:9d:11:00:33:f1:7b:c6:93:69:1e:78:3b:
                    90:52:f7:60:78:9d:ad:a0:db:f5:48:a4:af:79:56:
                    cf:f6:a6:92:fe:45:a5:3b:47:95:62:7b:35:63:e8:
                    4a:5b:94:5a:0b:c4:4f:54:3e:c0:3b:94:38:83:9f:
                    ca:dc:59:14:9a:6c:95:27:94:7a:6d:ea:4b:07:18:
                    f6:4f:40:b4:f4:d9:51:e0:a7:12:07:9d:d8:2b:12:
                    e5:64:e5:cb:bd:24:2d:84:20:7f:ff:f4:b9:b9:df:
                    dc:64:18:f5:81:93:d9:d7:7c:e5:30:a3:28:00:bc:
                    a1:30:2e:5b:a1:1f:eb:bc:5e:ec:ac:ed:18:d2:f5:
                    b0:23:1d:72:ec:0c:e3:66:d3:23:aa:c1:c0:8f:d7:
                    f9:86:23:c6:b9:91:e4:44:4e:5c:65:9f:0f:fc:f8:
                    08:57:60:d3:32:8e:ad:8a:ac:b9:be:7e:88:d2:b2:
                    7e:2b:a7:ca:28:c7:61:64:71:f1:06:92:44:98:a3:
                    be:4b:66:87:e4:e6:7e:55:5c:52:72:38:1c:a6:fb:
                    7a:66:86:4b:c1:c8:87:e3:27:8e:53:d0:9c:13:ef:
                    24:57:78:e4:d6:33:f7:e4:61:04:3c:ce:63:2d:b0:
                    7b:92:fa:56:47:74:9c:c6:97:8d:f3:93:a6:77:d2:
                    16:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:41:56:EE:94:34:BE:EF:42:8B:00:22:E3:2B:FB:9D:E7:C8:B2:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/2ed8c46e-bbd7-306c-bd51-09e1938178a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.crl

            X509v3 Authority Key Identifier:
                keyid:A2:41:EF:5B:9A:6A:4B:E6:91:56:9C:87:8A:A8:6E:DC:54:B2:7F:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.82.110.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:28:8a:73:ef:03:46:15:1d:9b:0c:1d:54:1d:eb:7b:5b:3e:
         77:52:0d:3f:fa:9c:44:95:1b:df:0d:61:d1:05:7a:65:c3:f9:
         4a:70:9d:db:62:2f:4e:d6:c0:78:43:20:76:a7:53:80:ba:dd:
         e5:d9:4e:15:b3:c8:c5:de:47:58:40:7a:85:63:63:2b:10:cc:
         39:62:da:43:08:bc:2a:13:1f:5e:ea:39:a8:7f:b5:83:c6:36:
         c7:02:cb:67:80:cd:ea:eb:96:fb:f9:f4:39:8e:b5:92:78:f7:
         9f:55:55:da:8d:f3:9b:e9:0d:22:50:39:0e:05:37:20:5f:74:
         70:37:f2:c2:c9:ec:e5:fc:2c:ba:08:91:20:c1:c4:ca:d5:40:
         a4:94:c8:59:1b:a9:6d:ed:5d:c0:a5:35:b8:c1:e0:67:ea:cd:
         9a:70:bb:a7:0e:f3:6d:a9:38:70:03:c0:2c:79:83:bb:b9:16:
         2f:c0:f2:8c:9e:91:8f:cd:86:f0:eb:d4:c0:b4:c8:48:53:55:
         16:0a:bd:25:ad:a6:a7:6a:59:e9:14:b9:32:a5:3c:64:8d:53:
         68:2a:32:c7:24:7f:14:fa:9c:e4:c1:a1:8a:91:1f:3f:b6:c0:
         9b:62:46:b7:45:28:6b:6f:92:6b:dc:f4:d5:ca:f3:6b:82:b7:
         2b:e8:2e:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 03:44:35 2026 by rpki-client