Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f71ab410-ccbd-4ac3-8b4e-4b3c9a119054/f41e6b84-988b-3d43-95bb-4dbf0cc93a37.roa
File:                     f41e6b84-988b-3d43-95bb-4dbf0cc93a37.roa (raw, json)
Hash identifier:          ycI/aAi1i8hsCE4kFNZT6khHfxfKNWnm+WRWw4RGIbw=
Subject key identifier:   0F:2E:C1:68:32:2E:8C:3A:4A:D0:70:E6:88:D1:8D:99:4E:27:A4:B4
Certificate issuer:       /CN=f71ab410-ccbd-4ac3-8b4e-4b3c9a119054
Certificate serial:       010D0C9F4328584CEE8CB9DB11C534BD4B41BE00
Authority key identifier: AC:B8:8F:B9:35:55:7B:9D:8B:C9:5E:6F:E8:3F:01:AA:77:1C:F2:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f71ab410-ccbd-4ac3-8b4e-4b3c9a119054.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f71ab410-ccbd-4ac3-8b4e-4b3c9a119054/f41e6b84-988b-3d43-95bb-4dbf0cc93a37.roa
Signing time:             Sat 21 Feb 2026 02:00:32 +0000
ROA not before:           Sat 21 Feb 2026 02:00:32 +0000
ROA not after:            Fri 22 May 2026 01:00:32 +0000
asID:                     401413
IP address blocks:        209.23.64.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f71ab410-ccbd-4ac3-8b4e-4b3c9a119054/f71ab410-ccbd-4ac3-8b4e-4b3c9a119054.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f71ab410-ccbd-4ac3-8b4e-4b3c9a119054/f71ab410-ccbd-4ac3-8b4e-4b3c9a119054.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f71ab410-ccbd-4ac3-8b4e-4b3c9a119054.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ee:8c:b9:db:11:c5:34:bd:4b:41:be:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f71ab410-ccbd-4ac3-8b4e-4b3c9a119054
        Validity
            Not Before: Feb 21 02:00:32 2026 GMT
            Not After : May 22 01:00:32 2026 GMT
        Subject: CN=4a14ec67-87ef-420f-ba2f-3233c999b28b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f6:46:06:a2:c5:de:28:0c:4f:12:bb:c2:e1:
                    59:9b:0e:5c:12:6c:be:27:fc:18:d8:94:dd:e6:bc:
                    7a:ef:ae:30:86:66:d8:5c:64:3d:f5:40:ef:f0:8c:
                    b4:c4:7c:c2:68:ad:51:20:ec:53:95:a9:5b:08:8e:
                    a5:62:cf:82:ef:24:c5:78:aa:b9:1f:b4:80:98:09:
                    a0:d1:6f:71:41:34:5b:6c:01:19:46:64:2a:0d:a7:
                    de:d4:e2:2d:c0:3b:87:cc:69:6c:4e:b1:66:b8:b9:
                    83:e5:75:47:b7:6f:75:45:39:a7:d8:e2:22:ac:c3:
                    5e:db:6c:f3:e2:92:0c:61:31:2d:91:e3:79:79:80:
                    84:d4:4e:e2:0d:13:d1:9c:c0:6c:36:ee:eb:a3:c5:
                    1d:70:38:d3:a7:e0:99:5f:9d:e6:0d:7a:5e:81:fe:
                    ab:df:a8:a4:f7:03:b8:a5:49:b4:a8:8a:5c:3e:74:
                    87:f7:5e:3d:7c:76:33:30:b4:e4:ea:d1:7b:0f:60:
                    58:68:42:41:80:54:eb:27:b6:a6:cb:d2:6b:81:c0:
                    b5:5c:1e:5e:32:b5:e2:18:f1:4f:71:7c:c5:b9:a1:
                    e2:7b:85:7f:99:1b:30:e9:76:2a:33:41:dc:41:bb:
                    5f:df:70:35:1c:ef:f3:e6:3b:6e:47:a8:dc:dc:df:
                    83:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:2E:C1:68:32:2E:8C:3A:4A:D0:70:E6:88:D1:8D:99:4E:27:A4:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f71ab410-ccbd-4ac3-8b4e-4b3c9a119054/f41e6b84-988b-3d43-95bb-4dbf0cc93a37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f71ab410-ccbd-4ac3-8b4e-4b3c9a119054/f71ab410-ccbd-4ac3-8b4e-4b3c9a119054.crl

            X509v3 Authority Key Identifier:
                keyid:AC:B8:8F:B9:35:55:7B:9D:8B:C9:5E:6F:E8:3F:01:AA:77:1C:F2:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f71ab410-ccbd-4ac3-8b4e-4b3c9a119054.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.23.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:68:08:0c:55:74:2a:a2:5f:fd:da:03:cc:3a:b6:57:56:6f:
         cf:79:c3:cd:9b:bb:e2:83:6c:87:83:21:21:13:6b:6a:70:b1:
         06:49:dd:72:f3:fa:b9:86:01:12:36:be:92:a2:1e:d0:89:6d:
         84:76:3f:19:19:13:21:f3:a3:0f:e0:0d:a0:6a:c2:4f:eb:e0:
         df:9f:85:a0:44:40:bb:72:3b:c9:9c:a1:c9:2f:f5:b0:31:81:
         cc:53:78:8e:f5:01:7d:92:e1:60:c8:a7:87:3b:0c:d0:62:b1:
         c1:5a:81:16:7b:75:9d:13:56:57:9a:08:10:be:8a:30:9f:02:
         b6:c3:a6:ef:c4:d5:b0:6c:0f:e3:59:91:51:7d:02:80:52:61:
         45:f9:53:3c:59:54:79:ce:86:b5:af:b7:52:01:bc:92:2f:02:
         ae:9c:b6:05:34:c3:f5:0d:2d:be:c2:dd:81:d1:84:37:49:32:
         76:8d:41:d8:18:df:ef:bb:6c:96:69:4b:54:03:03:fe:b7:73:
         19:50:fc:83:99:88:40:57:52:76:cc:bc:29:f9:06:7c:38:2b:
         b9:1d:29:25:15:b8:7e:c9:92:80:ca:0d:22:e9:65:b3:20:bb:
         4f:f6:d4:59:cd:d1:de:e4:a1:d7:cb:39:ec:4e:eb:5c:37:aa:
         7e:c5:c9:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 22:52:13 2026 by rpki-client