Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ceb51013-50fe-40c8-8358-fbacb2186cda/ccc41170-0c0f-3b56-b819-710416195ea9.roa
File:                     ccc41170-0c0f-3b56-b819-710416195ea9.roa (raw, json)
Hash identifier:          2oCF/7xzAfbED1hyhQ/YKid+HlPGnacQ6OD55OGFlO0=
Subject key identifier:   9F:42:14:0A:F7:B7:87:C4:68:B7:9F:0C:A6:BA:53:DD:F8:3E:59:DC
Certificate issuer:       /CN=ceb51013-50fe-40c8-8358-fbacb2186cda
Certificate serial:       010D0C9F4328584CED2783BB63841E8B5A9CC380
Authority key identifier: 92:D2:A5:78:F5:5E:44:DC:2E:E9:2F:9A:B1:F2:40:C4:0C:81:13:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ceb51013-50fe-40c8-8358-fbacb2186cda.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ceb51013-50fe-40c8-8358-fbacb2186cda/ccc41170-0c0f-3b56-b819-710416195ea9.roa
Signing time:             Fri 20 Feb 2026 14:00:41 +0000
ROA not before:           Fri 20 Feb 2026 14:00:41 +0000
ROA not after:            Thu 21 May 2026 13:00:41 +0000
asID:                     13460
IP address blocks:        192.111.38.0/24 maxlen: 24
                          204.107.64.0/24 maxlen: 24
                          2620:130::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ceb51013-50fe-40c8-8358-fbacb2186cda/ceb51013-50fe-40c8-8358-fbacb2186cda.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ceb51013-50fe-40c8-8358-fbacb2186cda/ceb51013-50fe-40c8-8358-fbacb2186cda.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ceb51013-50fe-40c8-8358-fbacb2186cda.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ed:27:83:bb:63:84:1e:8b:5a:9c:c3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ceb51013-50fe-40c8-8358-fbacb2186cda
        Validity
            Not Before: Feb 20 14:00:41 2026 GMT
            Not After : May 21 13:00:41 2026 GMT
        Subject: CN=77cdc8c2-b4b1-4106-b7ae-1e715a2ccd04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:6c:2f:b1:f2:85:74:85:ba:5b:25:cc:f5:f2:
                    62:d5:e7:eb:7f:2d:af:e7:fe:bb:fd:c4:05:bd:94:
                    35:b8:45:20:b3:4b:24:86:77:1f:3a:05:11:5b:07:
                    8d:3e:6c:95:fe:29:e7:d6:ad:8a:68:d1:00:79:57:
                    e8:ca:e6:63:5b:a2:fb:fb:4f:16:4b:77:ea:b3:0e:
                    f6:68:f5:af:be:cd:ab:e4:cf:11:5e:04:25:74:e7:
                    10:e0:48:3b:8d:dc:62:06:30:6e:f9:fd:1d:12:b9:
                    23:5c:51:f0:31:2d:cd:c9:f4:b4:66:93:3b:b6:57:
                    95:e1:c4:bb:41:f6:bb:85:43:08:2b:a0:7c:c9:f4:
                    82:6e:7c:9a:30:96:57:e1:74:c5:4b:5e:c6:69:3c:
                    92:5b:92:32:85:ce:05:47:8a:70:02:d4:47:8f:05:
                    94:18:d3:fa:ba:64:60:96:4d:42:16:d3:0a:9a:55:
                    bf:b6:c9:a7:18:ee:40:e5:03:da:95:46:50:5e:db:
                    7e:45:d0:3a:d0:d0:b5:98:c8:79:5a:22:10:a7:c0:
                    07:9b:28:f9:f3:1e:eb:07:d2:34:75:15:e4:f3:0a:
                    f7:d6:65:90:ee:05:83:46:bb:81:0a:1c:44:fc:de:
                    14:f1:4b:8b:14:21:5a:02:d7:96:ef:2d:ce:f4:29:
                    86:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:42:14:0A:F7:B7:87:C4:68:B7:9F:0C:A6:BA:53:DD:F8:3E:59:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ceb51013-50fe-40c8-8358-fbacb2186cda/ccc41170-0c0f-3b56-b819-710416195ea9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ceb51013-50fe-40c8-8358-fbacb2186cda/ceb51013-50fe-40c8-8358-fbacb2186cda.crl

            X509v3 Authority Key Identifier:
                keyid:92:D2:A5:78:F5:5E:44:DC:2E:E9:2F:9A:B1:F2:40:C4:0C:81:13:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ceb51013-50fe-40c8-8358-fbacb2186cda.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.111.38.0/24
                  204.107.64.0/24
                IPv6:
                  2620:130::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:14:86:62:6c:d2:ff:38:fd:fe:8f:64:5f:3b:f0:2a:00:35:
         bb:64:ba:fc:58:8e:b7:9f:2b:06:3c:a6:bb:08:5b:4a:91:33:
         27:06:65:0c:c1:22:f3:66:e5:62:eb:22:69:00:c7:fb:04:32:
         61:97:32:53:c5:93:fa:f3:83:05:4d:c5:f7:ae:c4:2a:08:34:
         6c:27:56:09:7a:e3:38:df:cc:51:99:15:d4:75:b0:0c:79:46:
         9a:e9:27:bc:89:14:77:47:6a:21:57:b0:f2:37:87:09:70:ca:
         30:11:f3:8d:c7:07:a8:ef:6c:2c:28:33:8a:6f:84:de:9b:a3:
         bf:4e:f2:b8:ae:13:78:84:41:89:a6:68:77:e6:84:ca:6e:a2:
         d4:9e:a2:dd:7e:90:6e:1a:30:53:98:c6:0f:dc:e8:e0:75:28:
         8a:97:12:f7:41:dc:ba:50:73:c4:3e:6f:cc:38:ab:3b:1f:59:
         bc:6d:02:21:93:d1:f8:0b:2e:99:78:b9:09:e5:2b:b1:f5:f6:
         78:76:f8:65:4f:d7:17:1a:23:56:ff:15:8e:b2:34:85:0a:98:
         45:32:3c:c4:40:d0:6f:ad:2d:0e:93:29:a9:9d:9a:3b:d1:77:
         9a:b5:c4:0f:de:0a:ef:f0:7e:47:10:9e:b1:d6:72:db:0c:22:
         11:a6:ff:ac
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Feb 26 18:18:09 2026 by rpki-client