Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f7e210a1-7b8a-4256-a4d2-c01234095c68/de23b9f9-9256-38ae-8676-20d142523057.roa
File:                     de23b9f9-9256-38ae-8676-20d142523057.roa (raw, json)
Hash identifier:          jxKGXFbtP7LIjFJgZlzNBffLJmPr6j0gx0XnsUwPXtQ=
Subject key identifier:   3B:E5:0D:99:99:71:8F:72:4D:3C:FD:A7:07:11:A8:2C:45:0D:2D:D9
Certificate issuer:       /CN=f7e210a1-7b8a-4256-a4d2-c01234095c68
Certificate serial:       010D0C9F4328584CE6F01C83212F9A24B68C77C0
Authority key identifier: 70:64:A6:51:04:91:5D:5C:1A:88:70:D7:6F:6C:54:2D:27:AB:63:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f7e210a1-7b8a-4256-a4d2-c01234095c68.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f7e210a1-7b8a-4256-a4d2-c01234095c68/de23b9f9-9256-38ae-8676-20d142523057.roa
Signing time:             Wed 18 Feb 2026 08:34:21 +0000
ROA not before:           Wed 18 Feb 2026 08:34:21 +0000
ROA not after:            Tue 19 May 2026 07:34:21 +0000
asID:                     29913
IP address blocks:        205.143.205.0/24 maxlen: 24
                          205.143.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f7e210a1-7b8a-4256-a4d2-c01234095c68/f7e210a1-7b8a-4256-a4d2-c01234095c68.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f7e210a1-7b8a-4256-a4d2-c01234095c68/f7e210a1-7b8a-4256-a4d2-c01234095c68.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f7e210a1-7b8a-4256-a4d2-c01234095c68.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e6:f0:1c:83:21:2f:9a:24:b6:8c:77:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7e210a1-7b8a-4256-a4d2-c01234095c68
        Validity
            Not Before: Feb 18 08:34:21 2026 GMT
            Not After : May 19 07:34:21 2026 GMT
        Subject: CN=d9798d8f-c085-4b10-90a7-48bfba6526a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:bd:92:a0:e5:0d:60:d8:12:a6:15:67:9e:8b:
                    9c:06:56:d3:2f:a6:cb:83:11:88:77:7a:db:33:0d:
                    22:65:a3:81:19:32:4a:8b:79:9d:fd:9a:54:e8:91:
                    6e:75:43:d0:aa:e4:c4:55:e3:2e:c4:e3:e6:fd:f2:
                    79:d5:14:7d:c3:ad:d0:be:e8:ae:18:80:64:b7:94:
                    e2:55:46:b4:d1:6f:5e:ff:e8:a7:6a:ad:da:49:93:
                    4f:b8:94:1b:be:5a:1e:31:10:2e:ba:a6:af:99:a9:
                    5d:ae:6b:33:23:a7:5d:5f:f2:e6:97:fb:4f:9d:94:
                    9d:01:95:e7:18:59:cd:6b:75:60:2d:72:95:96:c7:
                    17:06:59:bd:af:d7:b1:a3:81:f7:2e:0c:c7:ee:4a:
                    5d:3b:5b:a4:1e:ae:88:ec:92:dc:92:03:28:bc:3b:
                    75:3b:bc:f7:38:2d:38:89:6a:2a:94:d6:c1:8d:d8:
                    f8:8d:a7:39:89:23:fd:f6:db:13:66:93:79:fb:74:
                    5d:4e:ac:d8:cd:31:7f:1e:9f:ee:cc:10:33:5b:51:
                    4f:bb:07:86:58:bc:9c:15:64:f1:62:4b:a0:49:dc:
                    d9:92:2b:1d:4b:87:f0:7a:c0:c1:6f:36:de:42:3f:
                    6d:8e:73:d8:a9:b6:41:ed:12:c2:ea:c9:b5:b0:36:
                    f0:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:E5:0D:99:99:71:8F:72:4D:3C:FD:A7:07:11:A8:2C:45:0D:2D:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f7e210a1-7b8a-4256-a4d2-c01234095c68/de23b9f9-9256-38ae-8676-20d142523057.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f7e210a1-7b8a-4256-a4d2-c01234095c68/f7e210a1-7b8a-4256-a4d2-c01234095c68.crl

            X509v3 Authority Key Identifier:
                keyid:70:64:A6:51:04:91:5D:5C:1A:88:70:D7:6F:6C:54:2D:27:AB:63:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f7e210a1-7b8a-4256-a4d2-c01234095c68.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.143.205.0-205.143.206.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:aa:c0:7f:5b:01:56:81:93:2c:e9:96:ae:48:28:b8:f3:82:
         37:a6:1d:d9:49:6a:05:05:d3:02:48:14:4b:44:cf:2f:68:c7:
         8f:42:76:f8:7b:b1:46:3b:02:71:f5:70:f3:9b:29:b0:5e:34:
         54:2b:1c:bd:da:58:44:9d:b9:ca:b8:20:25:b9:c8:10:7c:be:
         79:15:88:d8:54:42:af:ea:0e:59:34:84:b9:51:df:10:a2:cb:
         9f:a6:a6:bd:6d:14:35:34:74:f5:7c:c2:db:a3:8f:3d:9e:2b:
         cf:44:76:d7:50:ec:fe:dc:e6:79:df:b4:64:cc:0e:44:8b:ba:
         b6:f1:86:63:33:a9:78:e9:36:7d:4c:9f:83:29:db:1a:12:db:
         9a:ec:5e:6b:ef:3a:fc:c9:81:d5:5b:93:9e:47:01:40:15:23:
         f6:db:78:1a:17:ee:c0:a7:32:b0:8d:94:3c:99:4f:e5:76:8d:
         f8:a0:98:3e:02:39:80:99:3a:3f:32:a6:53:9b:01:39:9c:70:
         95:24:dd:0d:ec:0f:e9:54:7b:8a:2b:6e:31:70:86:5a:c7:ce:
         5a:6c:88:bb:6c:8b:ca:8f:8e:fa:2a:97:9c:f4:f2:19:6b:ae:
         70:a5:90:59:ae:dc:8d:1f:ca:ba:34:4d:f8:7b:ff:3c:73:09:
         7a:b2:f3:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 07:41:34 2026 by rpki-client