Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ff8b5b81-fba0-3f71-93ac-300a8a24844f.roa
File:                     ff8b5b81-fba0-3f71-93ac-300a8a24844f.roa (raw, json)
Hash identifier:          B1JNwW/ag9hiB6zoRaq03dfZF2FbmdwOKdf1mo3vv7U=
Subject key identifier:   AC:56:CF:EB:21:86:93:A7:31:3F:14:89:67:11:62:06:44:AE:31:FB
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584CEDFF99639ABA35276BED1380
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ff8b5b81-fba0-3f71-93ac-300a8a24844f.roa
Signing time:             Fri 20 Feb 2026 21:16:13 +0000
ROA not before:           Fri 20 Feb 2026 21:16:13 +0000
ROA not after:            Thu 21 May 2026 20:16:13 +0000
asID:                     16224
IP address blocks:        206.136.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Feb 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ed:ff:99:63:9a:ba:35:27:6b:ed:13:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb 20 21:16:13 2026 GMT
            Not After : May 21 20:16:13 2026 GMT
        Subject: CN=707885ac-b0a4-4cdc-9b4e-a860b84e9034
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:dd:91:3c:ee:53:a9:2b:f5:f8:b4:5e:54:e5:
                    c1:a2:7c:fe:2b:26:f0:41:d7:95:a2:1f:92:60:2f:
                    15:41:e7:08:3b:83:1a:f0:e8:e5:19:3f:91:c8:e0:
                    a3:aa:ef:72:15:df:59:17:df:a4:77:09:a1:c3:35:
                    9d:00:24:e1:83:32:6d:49:e7:dc:2c:1d:7d:9c:ec:
                    4a:93:9a:a7:b9:fb:b7:a6:3a:2a:40:2c:25:2b:e4:
                    64:8e:68:7f:46:ce:3d:93:f5:50:fa:57:2c:e6:2c:
                    b0:e7:5b:dd:b8:5f:50:45:60:0f:5c:9b:58:89:ab:
                    68:fe:a5:ba:e8:47:0b:77:4c:69:95:06:b7:1f:3a:
                    d5:31:8d:f6:db:18:e6:cf:f8:ba:04:48:78:ba:e7:
                    74:62:27:48:e8:f2:4c:2e:31:bf:9b:0e:ca:93:2c:
                    54:c6:35:f2:f3:a8:0d:19:18:be:bd:cf:1a:b9:99:
                    29:35:40:d7:b6:2e:90:d5:49:7f:b1:b7:c6:8c:84:
                    23:4b:8a:3d:b2:2f:0d:bc:79:ae:0b:e1:85:57:7d:
                    ef:12:b5:37:e6:77:18:25:34:c7:eb:e2:fa:0c:32:
                    82:6a:fe:84:28:67:ba:62:3f:4e:c9:bb:70:7c:44:
                    66:66:ad:8e:2f:e0:10:b1:19:66:e4:b1:94:1d:4b:
                    e6:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:56:CF:EB:21:86:93:A7:31:3F:14:89:67:11:62:06:44:AE:31:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ff8b5b81-fba0-3f71-93ac-300a8a24844f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.136.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:86:c0:69:b4:3b:8a:58:69:15:10:2a:11:17:e1:95:74:2a:
         fe:ed:b7:55:5d:bc:ae:a3:cb:32:63:44:85:17:8a:25:0a:ab:
         9a:cd:fb:7f:6c:04:02:81:9e:ed:03:3a:21:32:02:d2:23:3b:
         2d:b1:10:29:18:e6:45:e7:68:9d:4d:af:ae:8b:9d:c8:7b:33:
         4b:d4:7d:80:2a:bb:4d:70:15:74:e6:29:ef:b2:f9:24:c5:c5:
         c7:c8:aa:6f:4c:77:e5:cf:75:ff:eb:e4:7b:f6:43:48:a8:f7:
         d0:60:83:13:ba:24:1d:86:94:d2:e7:a2:10:57:f5:36:a0:1c:
         bf:77:b4:d7:95:cf:0a:f3:e7:b3:ee:83:2a:8d:8c:58:4e:49:
         6a:85:ef:18:c8:ec:2c:9b:f8:37:a4:b7:2b:07:52:71:ed:00:
         06:31:99:47:01:e7:fd:8b:8c:a2:14:9e:4b:9d:9d:e0:01:19:
         f0:a3:9b:3f:9f:76:1e:15:11:4a:c6:0e:13:81:5d:e6:f2:ba:
         15:72:88:05:ba:85:a0:51:f5:d0:83:d6:de:7b:70:4f:fa:23:
         b8:6d:f2:51:02:45:84:b7:4b:cc:0e:26:14:1d:85:08:f0:8d:
         db:4d:09:db:64:02:23:bb:da:e4:62:41:f9:29:f7:c9:ae:90:
         7a:19:9b:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 12:17:23 2026 by rpki-client