Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ab1561fa-e746-37a1-bf2d-0082d8dfe1ea.roa
File:                     ab1561fa-e746-37a1-bf2d-0082d8dfe1ea.roa (raw, json)
Hash identifier:          /Lu7UgGGHPd+AU5jKfqKfi+LpxXYDdMKWmfOWBUukhQ=
Subject key identifier:   12:76:17:E9:67:AC:34:39:A6:C4:F4:B7:49:45:21:47:0D:41:2A:FC
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584CC789740044FA468D2BA51E80
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ab1561fa-e746-37a1-bf2d-0082d8dfe1ea.roa
Signing time:             Sat 07 Feb 2026 02:37:27 +0000
ROA not before:           Sat 07 Feb 2026 02:37:27 +0000
ROA not after:            Fri 08 May 2026 01:37:27 +0000
asID:                     396982
IP address blocks:        208.76.71.48/28 maxlen: 28
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Feb 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c7:89:74:00:44:fa:46:8d:2b:a5:1e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Feb  7 02:37:27 2026 GMT
            Not After : May  8 01:37:27 2026 GMT
        Subject: CN=e827a825-bb8d-4ec7-ba8d-d9b87c9c4f22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:9f:20:c9:a6:b9:48:07:d2:f3:c0:0d:08:01:
                    61:2e:22:81:fe:64:da:b8:35:2d:04:81:6e:56:4c:
                    fe:e0:5c:0b:6a:a8:67:25:d6:ad:a7:04:56:d0:7c:
                    8f:51:9c:c8:f2:87:63:57:88:0c:c2:3a:d1:b0:b5:
                    f5:86:11:e6:f3:5a:00:a7:95:cb:14:5f:82:a2:5c:
                    0e:9e:4e:f7:0d:f0:5b:d6:0b:4c:12:56:e3:01:db:
                    8b:e4:ee:55:25:74:33:3d:d0:b9:bf:b3:1a:4a:5b:
                    44:26:c6:c3:7d:7c:90:04:ee:35:01:ed:5f:3d:88:
                    93:bc:b7:58:3f:bf:39:c8:8c:f9:59:24:0b:91:eb:
                    d1:35:66:88:60:86:21:cf:d2:05:fe:2d:7b:01:c3:
                    e0:8b:05:7f:e0:04:2e:ed:92:6a:b4:3b:fd:2d:16:
                    e7:62:ac:40:03:36:56:77:57:5f:26:79:d3:7e:aa:
                    78:70:48:4f:69:66:13:2c:6d:1d:15:e9:4d:e6:3f:
                    4a:c5:f3:de:44:97:4a:21:77:5a:10:ed:a9:02:ee:
                    42:2f:5a:fb:d8:de:bf:06:3d:c3:66:f4:af:49:e9:
                    32:87:20:76:3c:c9:6a:f7:27:98:d6:fd:aa:24:63:
                    b4:b7:6d:8b:1d:e1:99:ab:8f:cd:0b:71:51:5b:02:
                    d7:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:76:17:E9:67:AC:34:39:A6:C4:F4:B7:49:45:21:47:0D:41:2A:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ab1561fa-e746-37a1-bf2d-0082d8dfe1ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.76.71.48/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:bb:cd:85:ec:89:78:63:3d:48:15:9e:7f:f0:60:d4:92:b9:
         fa:00:5e:9d:50:9e:36:23:ef:2a:98:5f:f1:c5:75:13:c9:6c:
         43:f7:52:7c:8a:58:c5:61:c5:6c:96:5c:3d:17:db:00:f1:c7:
         81:76:6b:d3:6c:a5:53:70:76:fc:e9:b5:ba:1c:35:a1:40:b9:
         1f:44:da:af:32:22:20:3e:dc:a9:20:e8:f0:a9:f4:eb:b5:cd:
         08:4a:a6:ce:c4:41:af:16:b5:85:50:af:56:80:45:fb:11:b4:
         8c:e0:87:f8:d6:7f:ca:51:d6:4a:e3:11:7f:3e:ec:37:11:10:
         02:c1:8a:4d:32:ba:3f:e1:f4:39:11:60:25:24:37:f9:46:13:
         96:ec:71:0c:cc:ce:16:bc:78:4f:2f:e7:c3:01:6c:22:25:1d:
         82:80:67:06:f8:74:c6:d5:4c:b5:83:c0:5d:53:84:72:a7:64:
         5d:e1:1c:4c:33:91:2d:15:4c:9d:19:36:0b:5b:24:21:72:fc:
         68:81:ae:47:7b:27:d8:0e:87:b6:e1:2e:75:57:eb:ae:ba:c2:
         e9:df:5e:7e:23:79:73:34:26:79:c6:05:43:8a:25:5b:00:98:
         73:12:b8:1f:19:d5:41:18:1b:31:e6:d2:48:f4:28:01:df:12:
         18:23:a0:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 22 22:00:54 2026 by rpki-client