Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/04db1d8b-564f-3612-8b43-8466388382ed.roa
File:                     04db1d8b-564f-3612-8b43-8466388382ed.roa (raw, json)
Hash identifier:          EIbR+BMiCGvNCtSmq8d++9fcXTKGqNuVbWvMnSCDclA=
Subject key identifier:   A1:74:D2:F7:B7:63:80:9E:CC:E2:30:C8:E0:B5:B1:06:09:61:C8:9E
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584CD4C8BAF54BA25F2DED9A3000
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/04db1d8b-564f-3612-8b43-8466388382ed.roa
Signing time:             Wed 11 Feb 2026 20:30:27 +0000
ROA not before:           Wed 11 Feb 2026 20:30:27 +0000
ROA not after:            Tue 12 May 2026 19:30:27 +0000
asID:                     1239
IP address blocks:        69.33.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Feb 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d4:c8:ba:f5:4b:a2:5f:2d:ed:9a:30:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Feb 11 20:30:27 2026 GMT
            Not After : May 12 19:30:27 2026 GMT
        Subject: CN=33f21659-067c-497c-850f-08132be7c359
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:83:84:83:6c:7e:0a:e9:25:e8:68:cf:4a:90:
                    a4:82:95:2a:05:77:42:9f:88:cd:c4:68:e8:f7:3f:
                    45:fb:d5:3f:db:4f:1e:f7:c6:9b:c0:42:51:71:ea:
                    84:7f:03:c5:ac:81:1e:97:be:32:5e:d2:21:8b:32:
                    05:3d:26:a9:e1:a4:30:df:a0:14:1c:1f:96:97:6f:
                    6d:af:4f:d3:03:54:23:41:24:f2:7d:12:d6:36:1a:
                    87:41:68:fa:ba:fe:ee:99:ed:30:86:33:44:e0:9b:
                    6a:58:6a:ca:ba:be:57:f5:9b:04:9b:ea:7b:86:ff:
                    57:54:d5:23:0c:46:94:2e:3d:8d:7a:f1:6f:5c:3a:
                    9f:3d:a3:e0:31:86:7c:c9:b7:b6:74:65:37:9a:34:
                    cd:92:18:c8:94:5f:1c:83:b8:fd:1b:b9:28:56:4c:
                    59:55:cc:99:96:9f:57:8a:7e:6b:e0:59:f0:29:5d:
                    6d:87:3d:2c:df:4f:a5:a9:a6:83:7d:0a:6d:9b:01:
                    4f:d0:c5:d6:48:71:3b:1b:71:25:79:b4:05:2f:67:
                    94:80:a2:44:27:d2:b8:84:b7:61:c3:1c:80:81:11:
                    88:1a:ac:5d:f9:a7:f5:ce:61:e6:df:de:39:bf:34:
                    c7:ae:94:52:1d:ea:05:ae:07:d0:13:d5:e5:67:3e:
                    d5:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:74:D2:F7:B7:63:80:9E:CC:E2:30:C8:E0:B5:B1:06:09:61:C8:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/04db1d8b-564f-3612-8b43-8466388382ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.33.148.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:f7:dd:2c:7c:03:a3:ff:cf:ff:4d:c6:5c:6f:28:af:56:98:
         6f:f8:96:03:72:93:81:fc:1b:e9:2d:77:ba:f7:03:f7:89:f9:
         19:92:99:65:0c:a3:6f:ed:84:d0:4a:b2:ba:39:b3:c8:84:51:
         69:dd:8a:f7:df:75:8f:fa:19:a6:a6:53:08:11:0a:8c:e6:76:
         f8:0e:51:e9:7d:2d:8f:14:f9:b7:a7:93:a1:0a:e1:5c:1a:99:
         24:0c:a9:1c:21:46:e1:dc:59:a8:52:28:00:d6:6f:04:fd:ad:
         2d:2d:b0:37:4f:09:64:e8:db:43:93:f6:28:1f:dd:d4:aa:4f:
         b6:5a:a1:c5:00:14:99:96:3d:bb:2e:95:08:72:4f:89:ba:09:
         d8:42:08:41:1f:8e:7e:8f:ef:f6:90:49:35:33:fd:21:21:02:
         f3:de:c0:c8:0c:03:5f:3d:30:3d:ae:cf:77:d3:87:ed:26:8d:
         29:4a:8e:6c:cc:a6:ee:cd:80:55:ae:4f:7e:9e:4b:7a:83:e4:
         42:c2:c1:80:2d:b9:37:1c:f8:97:9c:eb:30:8f:bf:df:9b:6c:
         86:db:c1:b5:50:8a:66:00:7f:53:15:60:d3:f8:9e:7b:ca:ff:
         54:d4:82:36:3a:74:f5:d4:29:04:f2:d0:b1:0b:bf:4a:f8:f0:
         04:1a:cb:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 22:28:43 2026 by rpki-client