Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/aa71c389-3d29-3ac3-92d7-7520fd101b94.roa
File:                     aa71c389-3d29-3ac3-92d7-7520fd101b94.roa (raw, json)
Hash identifier:          OTEeMAbRhPDlLUzLPwjxWkNWYbLlloznIulHDPJbpWw=
Subject key identifier:   E0:8A:98:CD:E4:5E:E8:91:C8:6A:F2:58:F9:4C:B8:12:C4:2E:92:C0
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584CF1C933AC93E4D3BA7371DD40
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/aa71c389-3d29-3ac3-92d7-7520fd101b94.roa
Signing time:             Sun 22 Feb 2026 05:49:51 +0000
ROA not before:           Sun 22 Feb 2026 05:49:51 +0000
ROA not after:            Sat 23 May 2026 04:49:51 +0000
asID:                     265919
IP address blocks:        198.89.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Feb 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f1:c9:33:ac:93:e4:d3:ba:73:71:dd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Feb 22 05:49:51 2026 GMT
            Not After : May 23 04:49:51 2026 GMT
        Subject: CN=92d421dd-6b74-49db-9c77-d08ad8e9e151
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:7f:7c:90:78:d1:26:13:c6:51:90:c6:c7:29:
                    89:35:c7:20:5a:57:6a:f3:81:c4:a0:8a:52:30:8e:
                    5f:90:cf:2d:2c:5b:cf:76:c5:67:82:e0:45:12:43:
                    a1:5a:4d:87:43:c8:b6:34:4c:6c:e6:2a:12:09:c2:
                    ee:6b:e4:64:ae:2f:a9:ab:bc:87:7d:cf:c7:17:58:
                    1c:df:ae:20:62:0a:f4:12:aa:c2:2e:9d:0a:08:b8:
                    7a:b9:6c:fd:f7:8f:f8:85:74:57:4e:db:39:74:4e:
                    cb:24:e9:09:87:77:47:2f:aa:f1:94:da:e3:18:5e:
                    d7:bd:51:07:86:da:2d:76:cd:60:0a:a0:dc:2d:07:
                    d5:8e:0e:ae:23:14:97:eb:ef:e7:77:ab:8e:a3:6f:
                    2d:87:24:b9:3a:24:fd:b1:17:4b:c5:12:a9:ab:f6:
                    a6:e7:de:b9:69:ea:da:a2:47:04:ee:62:8d:6e:24:
                    11:51:14:63:28:a9:30:09:fa:b2:da:bb:cc:a1:aa:
                    f4:43:36:da:c7:d7:0e:81:28:e2:fa:2f:55:6c:22:
                    a9:6a:cd:36:02:f5:2d:18:b2:6a:e3:e6:4e:f3:77:
                    e0:f7:93:1e:fa:c4:c3:57:39:53:d4:5b:02:17:f9:
                    fd:a4:22:b5:90:b1:75:bb:bd:b4:86:9e:f1:a1:ff:
                    23:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:8A:98:CD:E4:5E:E8:91:C8:6A:F2:58:F9:4C:B8:12:C4:2E:92:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/aa71c389-3d29-3ac3-92d7-7520fd101b94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.89.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:14:52:b2:24:3e:d6:75:8e:6f:50:5b:ad:e1:31:c9:d5:f5:
         58:cc:9c:91:9e:47:ab:f9:17:3b:0e:3e:71:d4:41:6c:08:ef:
         00:72:9d:55:c5:e3:df:7b:50:c2:33:93:22:55:c3:81:f6:51:
         6a:47:f5:f0:60:89:02:b8:29:e3:44:76:69:e5:5e:32:be:0a:
         a9:a2:b5:e1:65:a8:d9:c5:2f:c1:c2:56:54:79:3b:77:ec:58:
         d9:e1:96:70:12:96:d1:ab:a2:9c:16:75:bb:22:ff:15:9b:ac:
         2e:7b:01:cb:61:9e:a4:be:62:11:f7:c1:29:ca:35:26:c8:26:
         5a:81:21:29:34:fe:66:e0:c5:b6:a6:2b:9c:5d:57:75:8d:aa:
         6a:e8:a5:84:54:fd:5a:1b:30:6a:12:21:75:34:28:4f:df:12:
         2e:89:e7:a4:30:c9:e4:71:cc:64:61:d9:03:96:26:45:73:31:
         a3:26:5c:2d:c4:30:37:16:21:30:9c:c6:ed:a8:9f:d9:01:0b:
         9c:3a:71:c7:c6:9d:59:04:99:45:11:99:5c:02:b5:f8:52:9c:
         d0:47:52:cd:44:2b:a2:11:63:04:34:7e:ad:14:cf:79:96:f1:
         60:9e:e4:40:d6:ea:12:26:2e:27:47:62:ee:c7:d4:a1:ad:5f:
         d3:4d:7b:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 24 05:06:56 2026 by rpki-client