Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/7a8272ff-ce53-350c-ba43-dc92e803e1c4.roa
File:                     7a8272ff-ce53-350c-ba43-dc92e803e1c4.roa (raw, json)
Hash identifier:          QeMJpBl/TNVesJVUWljrQkzPoUJqTYjQ2s319UqmNjg=
Subject key identifier:   2B:94:CA:B2:81:F1:74:74:22:6D:65:C0:96:B4:79:79:C5:52:DA:B2
Certificate issuer:       /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Certificate serial:       010D0C9F4328584CF2BCE14E7BDA83B0B77262C0
Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/7a8272ff-ce53-350c-ba43-dc92e803e1c4.roa
Signing time:             Sun 22 Feb 2026 14:00:41 +0000
ROA not before:           Sun 22 Feb 2026 14:00:41 +0000
ROA not after:            Sat 23 May 2026 13:00:41 +0000
asID:                     836
IP address blocks:        24.38.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f2:bc:e1:4e:7b:da:83:b0:b7:72:62:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
        Validity
            Not Before: Feb 22 14:00:41 2026 GMT
            Not After : May 23 13:00:41 2026 GMT
        Subject: CN=b8dc0797-38a5-40f9-a425-678f49304028
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:68:97:9d:d0:ce:fa:1e:9f:f1:29:da:e7:6e:
                    8d:ab:99:03:23:a1:7c:22:3e:ad:43:7b:c1:e2:c6:
                    6b:4a:5b:c5:5a:77:04:dc:76:90:65:a8:c0:8c:85:
                    45:74:2f:b2:68:de:6d:08:10:0b:27:c5:53:70:ac:
                    69:91:f9:29:da:74:c1:c9:ec:b8:49:9a:90:dd:52:
                    39:01:88:f1:2f:ce:fe:3f:a4:89:e8:f2:d3:7e:4c:
                    d5:20:a2:d6:e6:8a:2b:da:ab:b1:da:93:73:bf:01:
                    a6:16:9b:c4:07:aa:dd:c5:0b:c3:29:e2:04:d6:bb:
                    06:3a:8a:83:61:bf:c8:55:4a:3a:d0:22:a1:8d:77:
                    cf:88:38:11:32:70:85:7c:42:be:64:d4:9f:39:1d:
                    e6:f8:ed:4c:a2:00:74:66:7b:4e:b0:8d:a7:8c:8f:
                    50:e7:e5:17:ee:3d:1f:f3:07:63:7e:1a:a4:b4:cd:
                    c4:dc:28:c4:2c:5e:ee:40:4d:6e:34:95:89:1f:d6:
                    62:f5:44:d2:70:e0:79:7d:b0:1f:64:9e:77:22:f2:
                    6f:8c:d5:82:11:c0:5f:0f:96:74:2a:e2:85:c1:09:
                    2c:42:a6:18:4b:ab:d1:cd:c0:85:3b:d3:f0:9e:44:
                    49:2b:37:9d:bb:fb:5b:bf:80:b2:e9:97:6a:38:17:
                    75:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:94:CA:B2:81:F1:74:74:22:6D:65:C0:96:B4:79:79:C5:52:DA:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/7a8272ff-ce53-350c-ba43-dc92e803e1c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl

            X509v3 Authority Key Identifier:
                keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.38.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:44:63:10:01:e6:59:f6:9e:f7:e4:77:16:a4:53:12:53:42:
         1a:24:2b:21:0a:ee:20:7d:71:68:a1:85:4b:00:1d:04:1f:d7:
         67:31:71:54:f0:ad:cb:28:b6:46:ce:de:bf:6e:26:a0:c8:04:
         aa:a0:13:aa:04:63:7e:2c:45:0f:4f:dd:ff:e5:ac:67:cb:0f:
         e1:13:59:95:0d:9f:6e:13:33:8d:a8:32:62:67:e5:46:e4:62:
         55:f9:c2:1d:64:b6:0b:9b:a4:55:83:da:d3:44:7f:24:47:56:
         6c:e8:3f:30:72:91:41:6e:a2:9d:56:12:b6:ef:d0:ca:a8:51:
         cf:ec:65:41:41:31:8d:15:fb:dd:d1:dd:7e:d1:e4:18:5c:a9:
         85:87:8a:61:03:5b:b3:40:f7:1b:5c:50:cf:2f:59:92:c1:ec:
         08:e6:b2:7e:b8:c8:e2:12:88:a2:d8:d2:82:22:b0:99:4b:9e:
         85:1e:c5:84:ea:1a:36:b1:89:8b:25:47:b3:5e:16:4a:bd:aa:
         cd:1b:99:81:80:00:1a:b3:0d:6d:3e:b1:34:94:52:67:9e:84:
         fc:b3:fb:0d:97:c0:37:58:03:0a:77:2c:03:57:bc:a0:87:f1:
         e2:2e:4c:64:81:37:69:94:a9:f8:72:ef:0d:37:34:2e:5d:cb:
         fc:4a:30:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 15:02:43 2026 by rpki-client