Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fb18968-7aa5-41e5-96b6-c45c25a566e8/2223bf1b-4e49-3a32-be8e-f2210cdd7887.roa
File:                     2223bf1b-4e49-3a32-be8e-f2210cdd7887.roa (raw, json)
Hash identifier:          ItPQAreHbhx0wOQym2SbLwyQjxbAU8DSwQmFvSXOSaE=
Subject key identifier:   44:82:25:5F:4B:86:83:72:24:7B:D2:92:D7:70:80:42:C5:18:EC:F1
Certificate issuer:       /CN=6fb18968-7aa5-41e5-96b6-c45c25a566e8
Certificate serial:       010D0C9F4328584CEBC237436C342DF04CDA7C00
Authority key identifier: C6:9F:AC:EA:70:7D:E0:51:AB:C5:1B:82:39:4D:0E:73:3A:A2:A1:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fb18968-7aa5-41e5-96b6-c45c25a566e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fb18968-7aa5-41e5-96b6-c45c25a566e8/2223bf1b-4e49-3a32-be8e-f2210cdd7887.roa
Signing time:             Fri 20 Feb 2026 02:00:32 +0000
ROA not before:           Fri 20 Feb 2026 02:00:32 +0000
ROA not after:            Thu 21 May 2026 01:00:32 +0000
asID:                     11260
IP address blocks:        24.207.24.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fb18968-7aa5-41e5-96b6-c45c25a566e8/6fb18968-7aa5-41e5-96b6-c45c25a566e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fb18968-7aa5-41e5-96b6-c45c25a566e8/6fb18968-7aa5-41e5-96b6-c45c25a566e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fb18968-7aa5-41e5-96b6-c45c25a566e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:eb:c2:37:43:6c:34:2d:f0:4c:da:7c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fb18968-7aa5-41e5-96b6-c45c25a566e8
        Validity
            Not Before: Feb 20 02:00:32 2026 GMT
            Not After : May 21 01:00:32 2026 GMT
        Subject: CN=a7693f80-8c33-4953-b38f-f3422df74f0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:52:67:a0:b8:70:91:d8:18:1c:89:b9:eb:ed:
                    fa:14:18:e0:31:ee:65:58:07:16:6c:9b:e2:05:a2:
                    74:d5:b5:36:c4:da:44:67:13:ac:34:1b:b8:d7:26:
                    04:47:0c:1a:b3:df:0e:9c:58:7f:ac:dc:8b:0a:24:
                    51:ab:19:3a:86:80:cf:d4:d4:61:86:b5:d1:cb:2e:
                    06:a9:81:6b:c8:b3:f6:12:0f:80:cb:ad:e6:d4:ac:
                    74:8a:70:cb:e9:17:88:40:8c:e6:f4:8e:2a:13:1c:
                    3f:f5:cf:91:7f:a1:ed:72:8c:19:25:f1:02:67:e4:
                    15:0a:ee:58:39:e8:c5:d9:67:30:55:a9:c5:cb:ae:
                    c0:64:d7:20:52:6c:e8:02:4e:5a:89:4b:0e:f4:0b:
                    bf:d7:e4:1c:62:73:42:5a:55:dd:01:94:f4:e3:20:
                    5c:32:76:31:82:f1:1a:f5:ce:5a:c4:61:ef:ae:e0:
                    c5:9f:33:75:01:22:4f:02:98:39:05:2f:37:0e:df:
                    a9:e9:e7:8d:a2:45:88:c0:21:37:8c:42:cb:f5:fc:
                    43:02:bf:35:ec:c3:04:99:75:28:12:ae:58:43:8e:
                    40:9c:0c:e2:8e:ed:67:02:89:c9:eb:88:d2:eb:55:
                    34:f6:85:9d:61:ec:89:99:34:5d:68:bb:e1:4c:77:
                    aa:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:82:25:5F:4B:86:83:72:24:7B:D2:92:D7:70:80:42:C5:18:EC:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fb18968-7aa5-41e5-96b6-c45c25a566e8/2223bf1b-4e49-3a32-be8e-f2210cdd7887.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fb18968-7aa5-41e5-96b6-c45c25a566e8/6fb18968-7aa5-41e5-96b6-c45c25a566e8.crl

            X509v3 Authority Key Identifier:
                keyid:C6:9F:AC:EA:70:7D:E0:51:AB:C5:1B:82:39:4D:0E:73:3A:A2:A1:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fb18968-7aa5-41e5-96b6-c45c25a566e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.207.24.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:89:54:df:46:54:0c:db:23:28:ef:6b:99:3d:27:fd:11:f5:
         c6:04:05:6c:87:76:f9:28:c3:b6:e9:5b:30:39:2e:63:e9:b2:
         20:61:dc:51:e6:d8:92:6b:d7:7d:06:5a:63:c4:d4:f9:b7:a9:
         c1:71:2e:8b:f3:f3:5e:d0:3e:6a:df:27:aa:31:49:2f:7c:f6:
         25:50:af:96:45:62:1b:fa:7f:0a:68:a7:6b:33:82:2a:af:50:
         72:05:61:77:b3:14:99:5e:c0:8d:e2:aa:2d:44:32:35:1e:c8:
         9f:9e:41:a1:fe:3e:69:62:4e:a9:58:84:04:f9:c9:96:73:8c:
         63:85:e6:36:4c:49:c8:b9:7e:fb:02:4e:55:34:ac:14:cf:4c:
         32:9f:d9:67:4c:be:85:f4:69:c8:36:58:4d:e9:0f:1a:1a:23:
         f7:21:51:88:a7:d9:08:5c:05:8e:78:69:a0:0c:78:56:88:5f:
         95:5b:64:7f:4a:b9:fa:cd:87:29:e4:10:09:7b:fd:45:a1:a9:
         8a:51:1d:4e:69:df:e7:92:65:89:fc:01:25:6a:10:9e:ec:db:
         52:8f:bb:61:2e:64:d2:da:9f:ff:04:4d:11:fe:ab:5d:5d:d4:
         0b:58:09:81:f4:c8:1f:f5:c3:16:46:e3:3b:d6:f0:f2:32:cb:
         54:d8:7d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 27 12:43:53 2026 by rpki-client