Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/ca03faf0-39c1-3ee2-88a3-9bc25ce9e59c.roa
File:                     ca03faf0-39c1-3ee2-88a3-9bc25ce9e59c.roa (raw, json)
Hash identifier:          cIFCFdyGgajDoHu8+Yak1fco272Yac3cei+/9v0o+pI=
Subject key identifier:   EB:4D:29:67:D8:5D:74:12:E9:B9:DD:0F:7C:AA:0C:C9:F1:F6:B8:68
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584CF5D66BB679D3F9354F340180
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/ca03faf0-39c1-3ee2-88a3-9bc25ce9e59c.roa
Signing time:             Mon 23 Feb 2026 16:39:43 +0000
ROA not before:           Mon 23 Feb 2026 16:39:43 +0000
ROA not after:            Sun 24 May 2026 15:39:43 +0000
asID:                     834
IP address blocks:        64.69.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Feb 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f5:d6:6b:b6:79:d3:f9:35:4f:34:01:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Feb 23 16:39:43 2026 GMT
            Not After : May 24 15:39:43 2026 GMT
        Subject: CN=700082e8-2127-4a2b-8090-5c1d4d6e1599
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:44:1c:01:b6:60:78:d5:c8:32:a7:fa:1d:e4:
                    0e:ea:b9:68:ce:2f:0a:26:9f:51:4f:c7:f4:f0:8f:
                    4e:26:cf:c5:dd:cf:49:ac:30:22:3e:b7:f0:1c:bd:
                    8d:d9:af:78:71:aa:bd:84:f6:df:98:4e:27:89:bd:
                    f3:4f:0f:a3:06:be:f2:4c:b2:88:44:9c:c1:20:e7:
                    16:25:f3:3d:6b:2d:81:44:37:eb:dd:0a:05:4e:44:
                    8d:bf:63:48:f2:c9:16:fa:af:1c:ec:a3:df:e6:dc:
                    4b:55:dc:fa:24:a0:e5:33:b2:f4:66:c7:b4:99:b1:
                    e6:ff:40:cb:74:ff:6c:5a:65:80:ac:41:4f:2a:30:
                    97:e7:3e:2e:cf:7b:6d:49:6a:36:f8:22:76:e4:0c:
                    30:df:84:a0:48:26:2b:7d:e3:96:42:ed:76:b1:81:
                    36:f1:18:58:bb:af:3c:30:2d:ca:1c:bc:78:ac:cb:
                    b4:14:34:59:a6:a6:ff:71:da:ec:be:c6:05:5f:50:
                    55:c2:5b:d1:a4:ec:3d:8b:7a:74:e2:7f:5a:16:52:
                    20:ac:de:83:4d:11:a6:80:d0:d0:ff:fa:76:1e:74:
                    3c:ba:13:fd:6b:78:34:ee:00:7b:4c:44:17:23:8e:
                    af:ef:5e:90:bc:48:35:29:a1:d9:16:e5:98:75:56:
                    11:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:4D:29:67:D8:5D:74:12:E9:B9:DD:0F:7C:AA:0C:C9:F1:F6:B8:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/ca03faf0-39c1-3ee2-88a3-9bc25ce9e59c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.69.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         de:6b:64:b4:94:55:f1:89:0d:58:33:69:e6:b1:be:9a:de:9d:
         43:7c:b2:19:03:f1:f1:37:d5:7e:4e:b4:a7:13:05:4f:3e:5b:
         7e:64:1b:19:1d:9b:98:23:d4:92:1c:1c:65:d3:b7:60:1e:29:
         f4:fe:43:e9:87:a4:3e:a7:27:8a:e0:9f:49:dd:23:9c:24:a8:
         e9:12:99:27:7c:e9:c6:e1:bf:9d:9a:78:e6:e0:82:ee:66:c3:
         a1:2a:d8:9e:cc:5e:fe:d7:a2:66:f9:84:a7:25:e2:10:d9:d4:
         63:25:12:71:6b:86:9b:81:ed:cb:00:db:7d:8c:3f:31:ec:f9:
         15:a5:2f:64:8e:72:e4:7b:62:99:42:2a:43:12:f0:76:89:6e:
         0a:1c:ef:c2:7a:85:58:6f:7b:e7:06:86:d9:2a:50:42:a1:83:
         63:44:0f:2c:c3:5e:57:99:b2:bc:41:f9:6a:6e:2e:b4:ae:b2:
         63:3f:90:e5:6f:ba:d9:be:dc:39:54:d6:d5:88:f3:fc:7d:72:
         1f:7f:c5:60:bc:84:5c:e4:4e:07:ba:9d:e8:bc:6c:db:e1:a3:
         e1:5d:d0:9b:d2:c8:7f:fc:03:40:76:f2:52:6c:40:02:cb:b3:
         bc:01:cb:fa:1a:b1:0a:01:6c:2d:d7:2f:02:44:a1:b7:5e:7f:
         53:c0:72:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 24 05:06:10 2026 by rpki-client