Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bc90ca9e-6412-4bd6-8621-eeaf44930b1f/61bec44b-5ffa-3389-be66-f3467d23df43.roa
File:                     61bec44b-5ffa-3389-be66-f3467d23df43.roa (raw, json)
Hash identifier:          DvQRlHBfOtO8AUjQfwHuKCp1l941KYBpoAzcIQL7Rlo=
Subject key identifier:   8E:C8:26:D3:03:9A:AD:8F:CB:3D:73:B4:70:30:87:21:B7:25:04:C0
Certificate issuer:       /CN=bc90ca9e-6412-4bd6-8621-eeaf44930b1f
Certificate serial:       010D0C9F4328584CC77747652221986D552469D0
Authority key identifier: 67:58:20:6F:26:16:0E:17:5E:16:42:F0:93:FF:27:C8:4E:B7:89:67
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bc90ca9e-6412-4bd6-8621-eeaf44930b1f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bc90ca9e-6412-4bd6-8621-eeaf44930b1f/61bec44b-5ffa-3389-be66-f3467d23df43.roa
Signing time:             Sat 07 Feb 2026 02:00:31 +0000
ROA not before:           Sat 07 Feb 2026 02:00:31 +0000
ROA not after:            Fri 08 May 2026 01:00:31 +0000
asID:                     14618
IP address blocks:        199.233.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bc90ca9e-6412-4bd6-8621-eeaf44930b1f/bc90ca9e-6412-4bd6-8621-eeaf44930b1f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bc90ca9e-6412-4bd6-8621-eeaf44930b1f/bc90ca9e-6412-4bd6-8621-eeaf44930b1f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bc90ca9e-6412-4bd6-8621-eeaf44930b1f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Feb 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c7:77:47:65:22:21:98:6d:55:24:69:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc90ca9e-6412-4bd6-8621-eeaf44930b1f
        Validity
            Not Before: Feb  7 02:00:31 2026 GMT
            Not After : May  8 01:00:31 2026 GMT
        Subject: CN=adda52bb-73d5-474d-9059-e201c6bf2edb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:df:c2:56:ba:48:51:1f:ae:ac:82:4f:57:6b:
                    99:63:c2:ae:77:53:43:d9:39:05:b5:3a:97:f3:1d:
                    df:47:c1:2d:3d:ac:9f:2a:41:3e:f9:24:66:6b:a0:
                    7e:a6:b6:9c:f8:74:56:40:a2:da:ba:ff:fa:a3:de:
                    ea:09:9f:e2:74:be:4f:39:65:37:6d:f6:b2:4d:1f:
                    d2:22:a3:06:36:e1:f2:c7:e6:c1:06:00:fd:4f:11:
                    db:4e:9f:e0:1b:6c:12:58:47:3b:7c:36:b4:2f:5e:
                    e9:02:b2:92:99:8a:c4:a8:0f:ae:6d:23:40:1d:e8:
                    a7:86:35:bd:79:d0:e0:0a:09:94:e3:fb:98:f0:c3:
                    01:58:64:3a:46:1c:51:91:30:72:d1:0e:57:bd:b7:
                    44:cd:af:d9:b4:15:7f:a1:6d:b6:dc:92:cc:19:f9:
                    e4:95:67:93:c0:44:1c:9c:dd:46:2a:d4:5d:0d:38:
                    63:94:4b:8a:2d:63:30:a3:51:f9:15:25:3d:48:3c:
                    5d:04:63:15:53:14:ce:76:39:58:71:b3:8f:f0:0a:
                    36:6f:d6:14:37:f8:75:5c:ea:60:2c:83:22:38:6d:
                    f7:c5:85:7a:7d:cb:8d:0a:01:d1:fc:8e:a0:90:e9:
                    9c:fa:6d:3a:91:8f:f2:f4:59:ad:71:8f:62:35:d9:
                    5a:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:C8:26:D3:03:9A:AD:8F:CB:3D:73:B4:70:30:87:21:B7:25:04:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bc90ca9e-6412-4bd6-8621-eeaf44930b1f/61bec44b-5ffa-3389-be66-f3467d23df43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bc90ca9e-6412-4bd6-8621-eeaf44930b1f/bc90ca9e-6412-4bd6-8621-eeaf44930b1f.crl

            X509v3 Authority Key Identifier:
                keyid:67:58:20:6F:26:16:0E:17:5E:16:42:F0:93:FF:27:C8:4E:B7:89:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bc90ca9e-6412-4bd6-8621-eeaf44930b1f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.233.102.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:2f:c1:72:57:18:2f:c7:81:b9:7a:5b:99:10:c2:d2:31:f8:
         e3:1f:12:05:f3:2b:eb:d5:dc:bc:f0:30:0c:de:f8:6a:39:e6:
         d3:5c:a5:8c:35:e2:90:21:64:3c:cf:9f:17:f0:53:24:33:49:
         31:ee:a8:70:7f:3f:a5:0b:9d:3d:5c:40:1b:08:ed:ae:a6:13:
         ee:26:0b:f0:ee:51:16:c7:33:85:c6:ce:b9:7a:5f:e1:c4:ce:
         04:f0:ca:a6:61:2f:18:d2:2a:ea:0c:23:68:17:dc:e4:7a:53:
         f7:f1:4e:e0:b7:99:30:b7:c0:03:40:4e:48:13:be:7e:52:be:
         ca:e4:7b:60:77:90:2c:72:2b:5b:46:94:ed:b3:63:1f:be:1d:
         d5:80:97:d2:f1:aa:d6:fb:7b:d7:88:f2:0d:d6:28:7f:47:7b:
         bf:47:17:c1:fe:a3:01:d2:f8:29:8f:a5:8c:3c:75:47:42:d2:
         0d:5e:7d:d3:7d:9b:a2:8c:b4:7f:f6:b2:d1:13:31:b5:e9:8a:
         42:e2:05:ea:d8:09:94:f9:99:d6:5a:a2:25:2a:7e:b3:ef:02:
         eb:c0:f4:c7:5f:81:bd:c8:87:50:21:b9:9d:98:71:14:8a:5a:
         03:5a:83:fe:13:8b:64:84:1d:e4:9c:74:9d:ad:49:1b:89:a3:
         25:a8:44:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 04:54:55 2026 by rpki-client