Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/6812c18d-cfca-3c6c-a713-0132aa046569.roa
File:                     6812c18d-cfca-3c6c-a713-0132aa046569.roa (raw, json)
Hash identifier:          FqRetsbwHARrCJhufqhpUFk6Uw8cjTzXpL6qe/EpwZc=
Subject key identifier:   E7:C2:B0:C3:4E:B6:05:16:FE:23:2C:96:5C:56:BA:0A:30:A3:8C:9A
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584CF1C9610754364309ED374980
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/6812c18d-cfca-3c6c-a713-0132aa046569.roa
Signing time:             Sun 22 Feb 2026 05:50:12 +0000
ROA not before:           Sun 22 Feb 2026 05:50:12 +0000
ROA not after:            Sat 23 May 2026 04:50:12 +0000
asID:                     13335
IP address blocks:        198.89.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Feb 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f1:c9:61:07:54:36:43:09:ed:37:49:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Feb 22 05:50:12 2026 GMT
            Not After : May 23 04:50:12 2026 GMT
        Subject: CN=cf2880dc-eae2-437d-bb61-88cfd1160da5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a4:f6:af:41:78:6d:7b:22:a1:7b:36:68:bc:
                    39:50:0a:5c:9b:30:72:65:6b:1d:ee:cc:26:1f:54:
                    9c:45:59:c4:52:37:00:6d:9a:79:65:31:af:97:28:
                    c5:82:42:47:ee:62:d2:99:1c:1a:f9:7d:81:47:e5:
                    7e:b1:f0:9b:74:ac:ba:f6:b3:0f:fa:b6:48:02:41:
                    a5:3d:23:87:e9:c6:c1:bc:64:75:08:23:ff:b5:ac:
                    8c:a8:a6:57:d2:ab:b2:a2:be:e3:23:bf:7f:51:5d:
                    12:76:25:b8:95:9a:55:3a:d0:d6:6f:ca:58:e7:2e:
                    d9:1b:4a:79:45:0d:f2:af:06:cb:5f:a8:eb:b5:c9:
                    65:af:82:2a:cb:56:62:17:3a:32:a5:5d:a6:3a:1b:
                    77:45:d8:56:3e:72:53:ac:00:bb:63:5c:f9:56:ea:
                    17:4a:f9:2f:f2:6e:95:e7:b6:4e:9a:a0:66:18:fe:
                    5a:bf:db:e7:06:c5:ac:7b:15:b3:88:2a:d8:39:7f:
                    6c:d5:d1:31:f3:48:aa:d0:34:9d:f1:bc:fb:cf:0e:
                    38:e1:5a:86:09:1c:e6:17:1f:7d:8b:f0:48:e6:e3:
                    6e:24:38:21:ec:d2:de:f0:28:53:df:5f:3d:79:ad:
                    6d:45:93:69:bd:8d:ef:00:8a:a4:b1:82:20:18:99:
                    6d:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:C2:B0:C3:4E:B6:05:16:FE:23:2C:96:5C:56:BA:0A:30:A3:8C:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/6812c18d-cfca-3c6c-a713-0132aa046569.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.89.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:91:5d:b2:f0:17:68:d0:4b:af:27:1b:a4:1b:88:8e:af:11:
         bd:c2:b1:a1:6c:98:bc:f5:0a:00:c7:9f:8f:31:9a:6d:ef:b3:
         82:7a:e6:76:dc:14:18:6f:34:3d:55:a1:ec:24:e2:8c:b1:7d:
         69:34:89:13:a5:d3:2f:22:97:b3:11:49:6c:5d:84:b9:64:76:
         50:64:e6:01:70:1c:47:52:4a:fe:0b:89:b1:f4:4f:75:72:f0:
         f9:c1:c0:a1:2a:0e:aa:99:7f:7f:f2:1c:de:70:3c:f0:d9:05:
         e2:f7:ba:51:74:dc:ab:c0:13:4b:e5:81:0e:bf:21:d5:56:f8:
         07:ac:1c:46:cf:14:ad:ba:cc:db:64:e2:5e:c5:b5:1c:5e:7d:
         f8:10:39:d7:a4:43:9c:60:83:d7:a5:e0:4e:d8:b2:b5:ac:17:
         b5:7c:f1:63:00:72:dc:3b:f2:66:9d:23:b9:ea:f2:35:69:31:
         44:27:c1:8e:42:12:fa:d1:9f:bf:d3:dd:5c:20:bf:4e:32:ad:
         86:e4:73:64:1f:37:49:c4:32:7d:c2:a9:98:58:70:75:e0:a8:
         ed:c0:e8:c4:f9:7d:60:d4:9d:bf:86:45:77:ef:7a:fb:78:2a:
         3d:61:1d:27:27:bc:8c:3c:61:30:7e:8a:fc:4d:9d:0c:11:d3:
         e2:87:9a:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 24 05:07:26 2026 by rpki-client