Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/26254462-2ddc-4c43-8ad7-6fc9c843ddf3/c898ae40-4c6d-3666-9f10-c83397f991ad.roa
File:                     c898ae40-4c6d-3666-9f10-c83397f991ad.roa (raw, json)
Hash identifier:          SEB6En2RIk+lq0mAWNYbekNYORK26+7h+g0BlU3ZiGk=
Subject key identifier:   0D:3F:4F:C3:29:38:F0:E4:C4:58:81:08:44:D9:07:60:4C:F7:E2:8B
Certificate issuer:       /CN=26254462-2ddc-4c43-8ad7-6fc9c843ddf3
Certificate serial:       010D0C9F4328584D1B1A0D0338F9DFCA63831A00
Authority key identifier: 46:21:E9:FF:9D:C3:9C:BF:3E:42:07:DB:FC:31:C2:FF:88:3B:63:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/26254462-2ddc-4c43-8ad7-6fc9c843ddf3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/26254462-2ddc-4c43-8ad7-6fc9c843ddf3/c898ae40-4c6d-3666-9f10-c83397f991ad.roa
Signing time:             Mon 09 Mar 2026 01:00:32 +0000
ROA not before:           Mon 09 Mar 2026 01:00:32 +0000
ROA not after:            Sun 07 Jun 2026 01:00:32 +0000
asID:                     136744
IP address blocks:        209.209.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/26254462-2ddc-4c43-8ad7-6fc9c843ddf3/26254462-2ddc-4c43-8ad7-6fc9c843ddf3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/26254462-2ddc-4c43-8ad7-6fc9c843ddf3/26254462-2ddc-4c43-8ad7-6fc9c843ddf3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/26254462-2ddc-4c43-8ad7-6fc9c843ddf3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1b:1a:0d:03:38:f9:df:ca:63:83:1a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26254462-2ddc-4c43-8ad7-6fc9c843ddf3
        Validity
            Not Before: Mar  9 01:00:32 2026 GMT
            Not After : Jun  7 01:00:32 2026 GMT
        Subject: CN=26617be5-f691-48f6-afd3-16072fb37509
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:f5:4f:1d:5b:8e:88:48:dd:8c:ef:ed:9d:ee:
                    85:00:9c:8b:54:2b:9e:4a:11:39:2f:01:b5:fa:4d:
                    82:e8:6f:44:38:5c:da:86:f9:b8:df:b0:4b:59:7c:
                    65:3e:f8:07:e4:04:73:bf:41:8c:73:70:f3:84:be:
                    97:1d:ed:90:2a:12:ff:ca:3c:c7:d4:f0:fe:c9:a2:
                    b8:1d:81:af:c9:d5:92:61:73:0f:9d:97:b9:8a:fb:
                    40:1b:4e:59:c0:2e:83:0e:9b:2f:ef:0e:51:b3:73:
                    87:a7:42:b3:71:e3:34:ed:fb:6c:b2:7e:65:b2:03:
                    a9:20:f7:1c:cb:31:ad:a6:21:48:b9:4d:4c:23:f4:
                    74:a5:86:f6:2e:66:1c:24:f2:bb:ac:34:c8:eb:9e:
                    0e:ad:7f:7d:1b:e0:97:da:f3:97:b0:d7:ad:8b:2d:
                    70:fd:17:26:ba:b7:6e:c4:04:94:93:8a:16:fc:4a:
                    9d:e4:19:c5:5d:f7:5d:89:db:16:f7:56:cc:4e:cb:
                    45:43:9c:19:a7:f5:30:d0:45:30:ce:c7:c4:7a:a1:
                    e1:f6:b5:4c:a9:7d:0b:7d:63:1f:c9:75:f1:7f:ff:
                    07:44:4c:61:4f:53:de:b8:60:fd:28:5b:3c:11:93:
                    fc:a2:bd:1d:39:40:fb:13:73:d6:90:47:b4:30:16:
                    ff:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:3F:4F:C3:29:38:F0:E4:C4:58:81:08:44:D9:07:60:4C:F7:E2:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/26254462-2ddc-4c43-8ad7-6fc9c843ddf3/c898ae40-4c6d-3666-9f10-c83397f991ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/26254462-2ddc-4c43-8ad7-6fc9c843ddf3/26254462-2ddc-4c43-8ad7-6fc9c843ddf3.crl

            X509v3 Authority Key Identifier:
                keyid:46:21:E9:FF:9D:C3:9C:BF:3E:42:07:DB:FC:31:C2:FF:88:3B:63:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/26254462-2ddc-4c43-8ad7-6fc9c843ddf3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.209.51.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:2a:f2:84:b1:43:f1:07:67:2e:81:88:89:d5:23:cf:6c:12:
         5e:ba:a1:16:9b:93:6a:1e:e6:1b:c3:25:d2:fd:51:39:45:ed:
         ea:44:af:f8:b1:99:81:74:bd:7c:ee:1d:9a:45:57:94:30:81:
         37:9f:6e:45:b9:82:6b:eb:55:6d:3b:41:d1:16:5c:bd:53:d3:
         62:f8:ca:73:b8:14:de:20:bd:9f:55:aa:7e:09:76:4c:65:0c:
         9d:1d:96:6a:10:9e:63:77:51:e9:5a:b9:78:9d:97:4f:67:ae:
         05:df:77:09:fd:26:c0:ee:9a:89:bd:55:f2:26:a3:35:40:33:
         df:bc:69:05:0c:40:c3:bc:55:70:ac:fa:26:6c:90:2b:41:59:
         8c:fb:9a:0c:07:7c:c3:d0:eb:de:3e:d5:e1:f8:75:9e:6f:3b:
         0e:44:23:43:68:b3:c3:4e:d5:af:47:e0:e8:7f:ed:fc:53:d1:
         3f:ea:5e:83:9e:27:62:96:3f:a9:e5:02:76:95:c3:de:2a:f1:
         4d:c8:df:d1:66:ef:45:1a:11:4b:c8:8e:8a:31:dc:66:14:73:
         2c:63:5f:cd:46:03:6c:7d:78:de:47:e1:34:6d:4f:bc:16:d0:
         e9:d1:aa:f1:b0:2c:cf:d5:da:c6:78:cb:3c:d4:a0:0b:42:20:
         d5:98:72:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 15 05:51:51 2026 by rpki-client