Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bead80ab-5ec1-3394-a49d-ce2ee81587b5.roa
File:                     bead80ab-5ec1-3394-a49d-ce2ee81587b5.roa (raw, json)
Hash identifier:          ALfbqeNef26gt6u7Qp9NoDpAdp2LD1D+RWNPlzSuWbU=
Subject key identifier:   EC:CD:87:C2:51:10:EB:03:E8:26:24:72:F7:59:1A:8D:66:75:A8:82
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584CE833D4B91849DCB74948DF00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bead80ab-5ec1-3394-a49d-ce2ee81587b5.roa
Signing time:             Wed 18 Feb 2026 19:26:36 +0000
ROA not before:           Wed 18 Feb 2026 19:26:36 +0000
ROA not after:            Tue 19 May 2026 18:26:36 +0000
asID:                     11145
IP address blocks:        198.226.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Feb 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e8:33:d4:b9:18:49:dc:b7:49:48:df:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb 18 19:26:36 2026 GMT
            Not After : May 19 18:26:36 2026 GMT
        Subject: CN=7ffdedd7-6ecd-4797-8bf4-1ad611c5e3a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:cd:a4:e6:e6:1f:d5:b3:5c:6e:7c:66:f9:9e:
                    14:f4:33:1e:e0:a4:d0:e0:11:c5:e9:fd:6f:44:af:
                    7e:79:44:e8:04:36:44:f1:ec:ee:8f:92:f8:1c:db:
                    b2:25:c3:4d:32:f2:82:ee:b5:ee:f2:e9:8a:94:00:
                    8c:85:cf:2f:ae:a5:37:d7:c2:4e:0e:b7:a0:19:a4:
                    8d:4f:de:2a:69:9b:fc:22:6d:aa:3d:f1:d6:aa:24:
                    05:60:c9:96:a0:21:84:73:21:38:46:19:be:2b:cb:
                    59:90:25:30:7e:08:dd:0a:8c:0f:22:15:b0:92:78:
                    51:ec:09:61:f5:73:79:f6:e7:bb:ca:d0:9e:eb:34:
                    45:70:56:aa:9e:4a:cc:ee:c0:9e:9b:f0:b9:1b:a2:
                    34:65:a2:98:71:aa:82:1e:01:10:ce:c0:b4:59:9f:
                    54:5d:c5:d7:c2:44:0b:c9:f5:b3:3f:77:98:b0:a1:
                    aa:51:25:f4:fd:51:96:d3:4e:28:83:3f:dd:3d:03:
                    e1:3a:79:00:5d:5f:4e:f3:cf:3b:c3:f3:35:d5:1b:
                    65:8c:4f:72:c7:01:89:84:33:ff:7d:b9:01:b6:78:
                    bb:ad:7a:7f:a6:73:13:eb:d2:0a:a1:e2:0f:ab:be:
                    fc:c0:13:30:50:e1:4a:d2:d4:9f:d0:3f:82:fc:28:
                    bc:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:CD:87:C2:51:10:EB:03:E8:26:24:72:F7:59:1A:8D:66:75:A8:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bead80ab-5ec1-3394-a49d-ce2ee81587b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.226.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:4c:ee:63:85:57:23:e8:61:44:ac:f9:fe:a3:b3:d7:3f:f7:
         fc:54:48:76:02:c5:9e:d7:7e:db:84:08:04:c2:0f:1e:df:94:
         a9:8e:4d:79:b4:4d:2f:0c:64:76:b8:14:26:84:4c:14:05:87:
         45:e7:99:d1:97:53:f6:6f:0e:a3:f2:97:b2:b9:05:cf:11:99:
         63:7d:50:ec:cf:76:78:8b:f6:08:6d:52:63:e4:62:75:99:83:
         f6:9f:43:b2:e3:4a:c0:fb:50:e5:53:f8:08:20:c4:f0:91:ce:
         67:e9:3b:44:df:7b:47:a8:1e:96:44:97:d5:7b:96:6f:c3:14:
         f7:a8:76:f3:f0:5a:a3:00:28:03:55:c5:96:c4:51:ac:8f:44:
         31:b6:42:4b:c6:fb:42:3b:bf:d8:d5:a1:3a:78:a8:0b:63:24:
         1c:a2:8e:85:a1:12:17:b2:14:8e:c2:9d:32:77:a0:25:39:68:
         67:22:eb:f4:67:b5:97:93:4b:d8:12:06:01:64:b0:44:6e:a1:
         66:8f:0e:30:49:3d:6b:9c:e1:c0:1c:c4:1a:2d:f6:1b:03:d0:
         8d:d3:8a:bc:11:43:9c:6c:df:95:3d:7a:31:bd:56:59:20:30:
         8c:56:ce:3b:09:10:1c:1f:a4:80:f3:26:72:b6:93:75:7e:a5:
         44:6d:34:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 12:16:27 2026 by rpki-client