Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/898877b9-244c-30bc-8700-b9672336bcde.roa
File:                     898877b9-244c-30bc-8700-b9672336bcde.roa (raw, json)
Hash identifier:          N4uVdn6yl+PDEymNWnS1hKZpjwQbmKpwjVx2kVUZ9bs=
Subject key identifier:   9D:EF:57:75:B0:FA:EB:A9:75:AB:DB:EE:FD:4B:A3:62:E1:E3:29:1C
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584D8EF55962F2BC20B09B9CC948
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/898877b9-244c-30bc-8700-b9672336bcde.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     21859
IP address blocks:        128.1.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f5:59:62:f2:bc:20:b0:9b:9c:c9:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=f81e2b1d-9083-4074-8fa2-a132ae282bd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:22:bc:7d:72:4b:ea:e1:62:bf:3f:59:93:91:
                    d4:ad:ff:fa:f4:b5:dc:ea:d8:21:1d:3e:15:8d:b4:
                    12:78:88:4d:33:7b:e5:22:6a:b4:9e:65:fd:32:54:
                    07:78:8b:bf:6f:ad:e0:5c:dd:15:e2:2b:1d:f5:7b:
                    ff:2a:c2:2b:75:13:c7:af:c7:1e:6c:ee:b1:27:be:
                    6d:0f:bb:08:32:1a:68:b5:20:47:6f:21:8b:63:57:
                    69:45:c6:12:2b:0f:ce:f8:f1:9f:b1:a7:e5:99:2f:
                    f4:60:f4:d4:d8:b2:20:a7:07:13:71:4d:f3:c9:d8:
                    bf:e7:1e:cc:fb:c0:98:60:94:01:6a:1f:83:12:95:
                    a0:a0:08:da:33:87:53:05:dc:a9:ae:d2:27:22:4b:
                    94:64:55:46:d3:68:9e:8a:e6:03:99:94:b3:ec:66:
                    67:69:a3:b5:06:b3:12:47:ca:79:3f:08:86:8b:d0:
                    4c:70:2f:33:55:d0:b2:e4:77:4b:24:6c:da:b9:84:
                    a8:da:17:7e:33:b3:22:aa:64:5a:b1:16:d0:de:ac:
                    bf:13:a4:07:47:51:ea:87:66:34:38:e1:94:03:64:
                    65:c5:b6:e9:c5:bd:b6:9e:46:1c:c0:96:33:97:21:
                    f4:67:2b:61:5d:b3:a5:87:8e:f5:fa:cd:1d:36:39:
                    f3:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:EF:57:75:B0:FA:EB:A9:75:AB:DB:EE:FD:4B:A3:62:E1:E3:29:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/898877b9-244c-30bc-8700-b9672336bcde.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.1.26.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:57:65:b5:28:24:aa:59:29:e1:6e:10:77:57:7b:c1:27:06:
         12:9c:2e:16:a1:74:8f:80:15:97:64:57:2b:71:48:ea:39:73:
         07:30:68:dd:17:bc:9b:1f:58:5e:f3:7d:c6:fe:eb:a2:00:e8:
         b9:c0:17:80:59:b3:41:d8:1d:9d:01:db:98:2a:fd:38:66:84:
         da:5d:a4:0d:7f:2e:06:d3:5b:89:cf:67:c9:30:ce:83:a0:6b:
         a0:0f:9b:a0:d8:d9:6a:ae:e9:7b:3f:fb:0b:90:89:73:2a:73:
         3c:51:8d:0b:c2:3f:87:73:1d:d2:51:be:9f:f6:6e:27:af:24:
         4a:13:1a:f0:26:79:9c:3a:9f:b7:72:0f:12:99:36:a4:7a:83:
         6e:78:bf:67:21:28:4b:c6:93:1b:dc:c6:19:e2:43:23:3d:2c:
         9c:80:3f:c3:db:07:09:15:85:92:9c:fc:34:88:3f:af:9f:0a:
         10:66:1f:97:55:90:40:1c:ed:d6:75:5a:bd:5e:b9:37:04:7e:
         8a:39:4c:b5:92:70:16:4c:68:91:ec:e1:76:e2:8f:4d:2e:ad:
         27:9e:9f:43:7a:53:ee:da:a9:86:ee:a9:3b:25:78:4c:b0:0b:
         80:e8:49:f4:73:09:1a:21:45:92:45:75:46:13:88:e3:02:b4:
         6a:77:5e:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 15:23:59 2026 by rpki-client