Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fac4bf11-5ec6-4df2-b8d1-535b6c3c7279/1f43c0f2-41ea-3483-8aa5-4f506df31112.roa
File:                     1f43c0f2-41ea-3483-8aa5-4f506df31112.roa (raw, json)
Hash identifier:          hzGCCLCjGaYwuW9rjzeid24YhnCZpPV+CrZugvNdlac=
Subject key identifier:   C7:B9:A6:D9:32:D7:C9:AE:87:EE:08:74:C9:11:54:B4:F2:73:CB:C5
Certificate issuer:       /CN=fac4bf11-5ec6-4df2-b8d1-535b6c3c7279
Certificate serial:       010D0C9F4328584CDDCCF3D12BD9EFC7AD0EA800
Authority key identifier: F5:1E:31:A4:4F:90:79:91:BF:60:FF:EB:85:12:43:B0:01:70:C7:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fac4bf11-5ec6-4df2-b8d1-535b6c3c7279.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fac4bf11-5ec6-4df2-b8d1-535b6c3c7279/1f43c0f2-41ea-3483-8aa5-4f506df31112.roa
Signing time:             Sun 15 Feb 2026 02:00:32 +0000
ROA not before:           Sun 15 Feb 2026 02:00:32 +0000
ROA not after:            Sat 16 May 2026 01:00:32 +0000
asID:                     396982
IP address blocks:        208.76.24.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fac4bf11-5ec6-4df2-b8d1-535b6c3c7279/fac4bf11-5ec6-4df2-b8d1-535b6c3c7279.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fac4bf11-5ec6-4df2-b8d1-535b6c3c7279/fac4bf11-5ec6-4df2-b8d1-535b6c3c7279.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fac4bf11-5ec6-4df2-b8d1-535b6c3c7279.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 24 Feb 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:dd:cc:f3:d1:2b:d9:ef:c7:ad:0e:a8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fac4bf11-5ec6-4df2-b8d1-535b6c3c7279
        Validity
            Not Before: Feb 15 02:00:32 2026 GMT
            Not After : May 16 01:00:32 2026 GMT
        Subject: CN=36b2f4d8-66ce-45e9-ab81-c5d030124d8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:13:c1:dd:1c:db:8c:4b:63:87:36:3a:9d:5a:
                    51:9b:37:33:2b:93:ae:b9:5b:3e:82:49:20:6f:86:
                    2e:db:d2:61:99:05:f2:ba:58:b2:31:06:cf:f1:a7:
                    fe:aa:1f:d3:00:9c:72:6c:8a:32:f2:d9:64:33:d0:
                    77:78:05:4f:0d:f6:cc:a4:40:92:83:b5:aa:06:24:
                    0e:a3:a6:93:30:f0:e3:81:63:39:c7:89:6a:06:26:
                    03:37:35:a8:54:be:91:17:9c:01:98:e8:86:af:41:
                    ec:55:e7:78:c6:dd:6c:48:86:02:2f:1a:df:8e:47:
                    09:a3:4c:74:dc:f8:32:10:cb:7e:9b:f0:b8:fa:3d:
                    53:f3:5f:a9:bc:d3:7f:63:ab:be:6f:6f:d6:43:cf:
                    2a:c3:bf:c1:91:15:09:2f:5b:64:d4:60:c0:d5:d7:
                    2f:25:b5:88:1f:fe:4e:bc:8f:35:79:50:9c:dd:df:
                    51:72:72:ed:23:4e:22:46:00:c2:86:34:1e:63:cb:
                    83:e6:2e:5c:1f:e1:85:05:ca:b3:dd:10:f0:0d:49:
                    b4:76:8d:f7:ef:c5:36:69:ab:09:9a:61:ac:f7:b1:
                    db:d0:65:dd:e7:c5:2a:37:f9:3f:a2:3e:35:5f:d8:
                    5b:6a:72:02:a0:51:35:3a:86:b4:5f:51:10:f6:84:
                    20:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:B9:A6:D9:32:D7:C9:AE:87:EE:08:74:C9:11:54:B4:F2:73:CB:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fac4bf11-5ec6-4df2-b8d1-535b6c3c7279/1f43c0f2-41ea-3483-8aa5-4f506df31112.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fac4bf11-5ec6-4df2-b8d1-535b6c3c7279/fac4bf11-5ec6-4df2-b8d1-535b6c3c7279.crl

            X509v3 Authority Key Identifier:
                keyid:F5:1E:31:A4:4F:90:79:91:BF:60:FF:EB:85:12:43:B0:01:70:C7:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fac4bf11-5ec6-4df2-b8d1-535b6c3c7279.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.76.24.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:b4:d3:dc:b5:7b:1f:ee:ab:43:79:c3:60:56:fd:46:b3:d3:
         e7:5a:28:fa:09:66:3d:6b:43:f5:b2:53:1b:a0:f6:44:e4:ee:
         d8:bb:17:da:51:39:f7:ab:2f:93:8e:9e:af:ac:10:0e:64:b1:
         59:3c:8c:87:2c:98:d3:d6:ed:86:34:e3:c5:ad:16:88:5a:55:
         ea:08:d8:bc:04:f7:ea:ee:c8:b5:a7:f6:15:b6:19:dc:c5:62:
         82:a2:83:0d:09:cb:5c:f3:46:62:57:a0:d5:c8:f0:8c:0c:f6:
         c5:4d:ae:b7:ba:5c:13:b5:b8:72:23:3f:eb:ef:4a:95:b3:f7:
         68:25:2e:d9:14:30:37:1e:cd:fc:26:69:e8:8c:6a:19:0a:c6:
         1f:5b:f0:3c:22:a8:39:dd:72:8f:76:ee:96:aa:a5:c0:4c:f6:
         36:d7:25:f3:56:cd:97:3f:cc:aa:40:fa:9d:dd:92:a6:7f:17:
         0a:48:04:ba:fa:00:5a:49:b7:e2:1e:f9:c7:b5:81:dd:52:47:
         2f:6d:3e:16:27:c8:ee:74:a1:bf:2a:b2:29:41:88:1b:4b:80:
         22:91:74:37:10:0a:06:22:d5:63:f3:26:0f:e1:e4:53:2a:31:
         64:6d:b6:bc:f2:95:9f:71:7a:18:07:e8:7d:7e:c4:e3:ec:73:
         19:ae:40:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 22 22:02:57 2026 by rpki-client