Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/04e7e50d-763f-326a-ab05-ccfc9ffa530b.roa
File:                     04e7e50d-763f-326a-ab05-ccfc9ffa530b.roa (raw, json)
Hash identifier:          BTJhNXCYfFaUXVJODrA7u3COhYHuxmAlvXb75O+aSHg=
Subject key identifier:   FD:D5:0D:C9:2A:A6:E2:43:AA:AF:EC:BD:68:19:E7:09:77:07:FE:8C
Certificate issuer:       /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92
Certificate serial:       010D0C9F4328584CD6D210B95C43794048E10240
Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/04e7e50d-763f-326a-ab05-ccfc9ffa530b.roa
Signing time:             Thu 12 Feb 2026 14:00:40 +0000
ROA not before:           Thu 12 Feb 2026 14:00:40 +0000
ROA not after:            Wed 13 May 2026 13:00:40 +0000
asID:                     4540
IP address blocks:        204.8.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d6:d2:10:b9:5c:43:79:40:48:e1:02:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92
        Validity
            Not Before: Feb 12 14:00:40 2026 GMT
            Not After : May 13 13:00:40 2026 GMT
        Subject: CN=b550169a-cd1e-4829-b255-ee9c4f2abf55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:b0:cd:27:18:3a:15:2b:25:4a:c6:bd:b4:64:
                    cb:64:75:7f:3a:fc:40:3e:7a:83:d2:9d:f7:38:bb:
                    7d:50:18:b1:ed:9d:56:2b:34:7a:7a:1d:cf:a8:f7:
                    0e:34:12:20:ce:63:68:b6:e9:29:70:4a:37:e0:50:
                    72:40:72:6b:a7:ef:e7:00:ea:40:f1:97:09:71:31:
                    3f:7a:92:f0:cf:a3:f6:86:39:38:62:71:33:08:bc:
                    95:a4:17:fb:21:d5:48:ec:0f:fd:a2:a7:94:cc:65:
                    e0:8b:55:d5:74:28:20:b5:b5:fe:35:67:7f:9c:56:
                    e0:f9:9e:a1:47:7d:96:b9:2e:01:70:8d:03:cd:19:
                    28:5b:e8:e2:c5:fc:ff:06:eb:9b:43:aa:a9:0b:9f:
                    d9:e9:2a:98:e9:74:a4:5e:4e:3a:a3:14:e0:3e:5b:
                    8f:d6:34:bb:35:f3:dd:0a:1b:43:79:ce:0e:51:75:
                    ce:8b:55:ad:63:05:8e:2e:57:3e:f7:4f:3b:af:b2:
                    b2:43:65:3c:e3:a5:88:7d:41:e7:25:22:96:ac:7d:
                    f8:06:f1:84:6a:7e:22:17:8f:22:f9:c6:36:08:74:
                    35:d4:67:06:28:af:a3:db:30:0b:30:36:2d:8e:cf:
                    26:09:2f:27:41:31:a9:89:83:d9:b8:58:a4:6f:80:
                    13:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:D5:0D:C9:2A:A6:E2:43:AA:AF:EC:BD:68:19:E7:09:77:07:FE:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/04e7e50d-763f-326a-ab05-ccfc9ffa530b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl

            X509v3 Authority Key Identifier:
                keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.8.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:71:a1:96:2a:47:d0:d2:5b:42:49:d2:dc:e6:97:5a:a6:b0:
         b9:74:1d:ee:29:70:c2:98:84:2d:1a:aa:b0:ef:82:6a:63:21:
         87:b3:8c:b5:00:45:a8:53:c6:23:aa:9a:fa:15:6b:53:79:9b:
         b6:43:00:91:ac:ee:3b:34:42:72:a7:bf:00:15:eb:fc:14:2c:
         b6:de:00:c2:ba:18:68:83:ac:4a:24:96:33:58:6f:57:16:8e:
         bd:b9:11:ab:ea:10:7c:00:3e:c8:a9:ae:73:b9:c3:88:5f:ce:
         b1:9e:0f:60:34:66:70:ee:3d:41:97:2d:e3:88:e8:e1:b1:ba:
         c7:ab:cf:cf:dd:f2:4f:df:9c:2e:a2:64:3f:16:da:d0:a6:5b:
         b1:c6:81:d2:a2:61:aa:62:c5:25:81:71:59:78:26:66:81:09:
         1c:7e:8d:25:fb:3e:ed:f8:8a:69:47:11:d3:75:17:8f:43:45:
         bb:b2:cb:9a:19:7f:cc:61:53:0f:08:b3:14:e2:59:45:de:76:
         65:d0:22:53:fa:d6:05:0d:15:3a:a6:20:33:bd:db:39:70:62:
         c3:3e:bb:2d:f5:fb:01:dd:6e:bd:67:d6:0a:92:5e:4b:41:9b:
         82:51:0e:b7:43:a8:b2:37:ef:f5:cd:70:63:aa:ba:92:0b:6d:
         59:8c:8a:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 27 07:34:21 2026 by rpki-client