Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/0ed91783-7295-3054-a231-e44a75457220.roa
File:                     0ed91783-7295-3054-a231-e44a75457220.roa (raw, json)
Hash identifier:          hSKlEph2LydZCoUHrWkuf9T/hcrVztInYRkcR8uQC8Y=
Subject key identifier:   B3:E3:42:2B:0F:6A:5B:49:EA:32:C4:14:6F:F5:34:81:2C:38:F2:AC
Certificate issuer:       /CN=ff6475f1-b52e-4c86-8d20-188751c350e8
Certificate serial:       010D0C9F4328584CAE573272CAB14CB3CC8F2640
Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/0ed91783-7295-3054-a231-e44a75457220.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     13213
IP address blocks:        216.224.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Feb 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:57:32:72:ca:b1:4c:b3:cc:8f:26:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=c178de8b-8b59-404e-921c-39155663525c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:85:35:14:f7:05:20:1b:34:c0:44:a8:c9:d3:
                    17:8e:37:6b:6d:de:87:54:ea:ec:07:bb:34:b9:90:
                    44:be:ab:40:ca:74:7b:4d:d1:06:47:f1:3e:55:2b:
                    ee:22:4d:b7:92:a5:4b:e1:bd:1b:28:a0:39:38:08:
                    21:d9:94:b5:aa:ac:18:91:7b:f8:f8:02:79:34:44:
                    48:12:c0:7f:93:17:f3:68:93:82:92:f2:fb:db:bc:
                    6e:c5:46:cc:00:4d:5f:35:f6:48:74:3b:0a:cf:95:
                    7a:d6:a7:d3:06:d9:98:31:6f:85:86:7c:5a:d3:8a:
                    6a:a5:ec:12:6b:ae:a2:5f:b6:15:3f:9f:78:de:da:
                    9e:e1:bd:99:9a:41:30:5a:ed:21:65:49:da:09:8b:
                    95:4d:b8:37:18:2b:38:e5:58:a6:81:4f:cd:55:d5:
                    46:1d:7c:5c:07:19:16:a7:c5:1e:51:00:d4:c9:2c:
                    9b:a8:93:35:9c:79:5d:2b:f6:5e:db:7f:27:c7:5d:
                    94:77:f8:f2:ec:75:2a:18:33:18:59:d6:78:eb:87:
                    d0:18:a1:67:c7:21:1a:94:37:9b:c2:dd:01:a1:e7:
                    d0:07:51:63:76:80:8a:8a:84:ed:3a:8d:4d:27:52:
                    dd:15:cf:48:bb:71:89:fe:75:86:9e:4b:36:92:69:
                    62:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:E3:42:2B:0F:6A:5B:49:EA:32:C4:14:6F:F5:34:81:2C:38:F2:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/0ed91783-7295-3054-a231-e44a75457220.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl

            X509v3 Authority Key Identifier:
                keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.224.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:55:32:02:75:be:5d:de:90:88:16:9b:92:40:a6:63:b1:1a:
         94:0a:a8:e8:f4:ae:45:a3:8c:08:f6:3c:f6:02:54:ad:3f:da:
         74:11:30:cb:7c:60:81:4b:51:a9:5a:07:5c:db:62:e2:77:ea:
         27:3b:6b:cc:53:34:8e:34:a5:06:92:75:99:9d:85:08:46:d1:
         ac:1d:51:89:fe:ad:ef:b1:7a:1a:aa:9d:22:aa:2e:27:4b:3a:
         46:50:1c:23:c0:91:04:65:45:52:c8:b6:81:79:a7:88:24:7a:
         44:3a:6e:ba:6b:1f:55:0d:ab:89:63:76:61:c1:3c:63:cc:6f:
         62:76:cc:2b:18:60:02:7b:fa:49:bd:3c:ac:fd:c6:87:47:af:
         e1:0a:b3:9e:55:47:f4:ef:64:d9:cb:bd:9f:f6:41:03:7a:a9:
         f7:3e:40:87:0e:99:99:d1:16:e4:5b:5d:e1:86:71:c3:55:a7:
         9f:d2:2c:cb:80:99:e5:0e:27:ce:0d:f6:87:88:7f:eb:4f:94:
         6c:60:cc:f9:6f:d1:06:39:d1:ac:70:39:b9:0c:e9:d1:14:de:
         68:da:f6:56:50:db:37:35:b4:e8:74:9e:f6:49:1f:c8:d7:b5:
         fb:c4:63:d6:31:5d:54:3e:77:8f:f1:8b:ee:00:3b:3b:95:9d:
         79:05:72:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 17 19:04:47 2026 by rpki-client