Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/f710b903-fe73-3bbb-921e-813757ddcca1.roa
File:                     f710b903-fe73-3bbb-921e-813757ddcca1.roa (raw, json)
Hash identifier:          8Theu+nIizGorlJoEpcwFa96PcsuyQijjp1NmFrj9X0=
Subject key identifier:   6D:17:AD:63:9B:9A:7B:8F:ED:0C:B5:16:A6:72:D1:BD:8D:4F:3E:1E
Certificate issuer:       /CN=45dffcef-d7d8-4b58-b4f5-bbecc695baff
Certificate serial:       010D0C9F4328584CD13C9ED06E34E3EE040F5F30
Authority key identifier: D8:86:A7:E4:41:E2:5A:ED:5C:FA:0B:FA:19:22:87:7B:E8:61:62:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/f710b903-fe73-3bbb-921e-813757ddcca1.roa
Signing time:             Tue 10 Feb 2026 14:00:41 +0000
ROA not before:           Tue 10 Feb 2026 14:00:41 +0000
ROA not after:            Mon 11 May 2026 13:00:41 +0000
asID:                     399437
IP address blocks:        209.50.145.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Feb 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d1:3c:9e:d0:6e:34:e3:ee:04:0f:5f:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45dffcef-d7d8-4b58-b4f5-bbecc695baff
        Validity
            Not Before: Feb 10 14:00:41 2026 GMT
            Not After : May 11 13:00:41 2026 GMT
        Subject: CN=c0151228-eb0f-4b71-93e2-8ed0c19d4e0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:5b:ae:aa:e6:ee:81:3b:8b:b9:97:61:f5:17:
                    00:ab:74:b3:15:e9:19:92:f6:50:59:d0:13:08:7c:
                    72:1c:dd:e9:01:ee:05:e3:46:40:06:93:79:2a:4b:
                    63:aa:6c:f6:b3:ef:af:5b:34:94:0b:a2:83:84:d8:
                    73:af:a3:21:2a:fb:61:98:50:93:cc:91:d3:48:55:
                    3c:ca:2d:81:ee:ef:e4:28:64:c3:77:c9:41:64:04:
                    f4:37:8d:4c:8c:30:26:80:bf:a7:55:27:7a:1d:db:
                    80:60:17:d6:35:7b:ed:bf:51:6c:ac:f4:7f:67:2d:
                    8e:ad:8a:4e:47:b5:b7:f9:57:e6:5b:f3:b9:82:47:
                    c9:f1:8f:d7:bd:df:25:bd:2e:a0:e9:5c:9c:5b:aa:
                    18:06:17:c7:e6:03:4d:ff:d4:61:18:e9:e0:eb:1d:
                    ed:2d:cc:a8:63:fa:3b:e6:7b:ae:aa:3b:6d:e8:91:
                    d9:d6:ea:90:ac:0c:d9:7a:61:3f:66:50:08:81:c1:
                    d3:35:a0:e0:5f:9e:40:54:53:7c:d8:6b:1c:dd:aa:
                    30:e1:b9:c4:53:89:11:23:80:7b:fa:e6:a3:62:f5:
                    38:41:73:62:53:d0:11:79:81:62:bd:43:8e:ae:d5:
                    f8:09:6a:5b:93:0b:61:92:62:1c:57:ad:b6:25:da:
                    34:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:17:AD:63:9B:9A:7B:8F:ED:0C:B5:16:A6:72:D1:BD:8D:4F:3E:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/f710b903-fe73-3bbb-921e-813757ddcca1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.crl

            X509v3 Authority Key Identifier:
                keyid:D8:86:A7:E4:41:E2:5A:ED:5C:FA:0B:FA:19:22:87:7B:E8:61:62:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.50.145.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:ed:71:88:ba:90:99:53:17:63:2b:8e:96:a2:29:b5:6b:1c:
         d2:06:ae:3f:dc:f4:fb:d5:dd:f8:f0:f7:32:b0:d6:32:0c:11:
         94:65:8a:a5:df:84:89:07:5e:35:82:3c:2c:09:6a:ec:6b:1b:
         b4:01:83:59:b2:3a:53:a0:6d:2b:24:36:18:eb:58:cd:c5:49:
         a4:5c:9f:7c:ee:6c:ac:58:93:5f:fc:5c:8b:a9:21:c0:b5:f6:
         4e:42:9d:c2:77:45:79:11:47:cf:04:f4:af:56:54:b7:42:89:
         8e:57:41:92:2c:b8:ab:1a:03:74:ed:e2:4e:b0:68:71:74:08:
         77:0b:2f:1e:82:60:2f:82:af:bd:03:f9:40:e2:bb:06:b0:f5:
         30:24:83:56:bd:58:7a:22:78:a9:66:31:86:5e:44:3d:9f:ed:
         ac:ce:7d:02:b9:6e:ab:74:0e:46:df:49:11:d2:13:0a:a8:ff:
         bb:4d:1d:8e:3d:b2:10:34:ab:8c:e8:5d:de:ae:00:7d:31:3f:
         7f:7b:f1:11:21:0d:b2:81:16:1f:eb:80:a9:8f:5b:3e:b4:69:
         65:be:4c:bd:ff:37:88:22:e4:cf:6c:23:19:0c:25:47:cf:82:
         3e:02:84:74:11:7a:8f:14:e9:a4:ae:4e:db:c3:ff:b9:5a:0f:
         0e:04:62:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 21:37:46 2026 by rpki-client