Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/26cf911c-d09c-3286-b449-7126b98375ec.roa
File:                     26cf911c-d09c-3286-b449-7126b98375ec.roa (raw, json)
Hash identifier:          iJY2XI9EhkQ6ytOVGlDFXmblU467Iy25zUCGO5snrjU=
Subject key identifier:   C7:06:5A:21:12:69:73:03:35:7C:5B:5A:95:E9:13:8B:6E:D3:45:9B
Certificate issuer:       /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial:       010D0C9F4328584CC7772E4498A113BF3BD7F380
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/26cf911c-d09c-3286-b449-7126b98375ec.roa
Signing time:             Sat 07 Feb 2026 02:00:31 +0000
ROA not before:           Sat 07 Feb 2026 02:00:31 +0000
ROA not after:            Fri 08 May 2026 01:00:31 +0000
asID:                     31898
IP address blocks:        173.199.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Feb 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c7:77:2e:44:98:a1:13:bf:3b:d7:f3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
        Validity
            Not Before: Feb  7 02:00:31 2026 GMT
            Not After : May  8 01:00:31 2026 GMT
        Subject: CN=9231b37e-2cac-4059-8742-b1201d50b007
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f1:d0:be:9a:f3:7f:98:42:c6:de:fb:88:e9:
                    32:77:b6:f6:ce:98:5f:d3:31:28:f5:c0:52:8c:d1:
                    45:cc:98:d0:2e:1c:70:0c:b4:be:ca:04:1c:83:2b:
                    41:11:76:d0:62:aa:ce:fd:61:a3:cf:62:f9:a8:53:
                    e4:e5:ff:8d:f4:02:0a:8f:2d:b7:bb:21:d1:85:56:
                    e9:05:31:d5:52:d4:cd:70:ee:75:93:c3:94:95:f0:
                    57:5e:80:df:62:3f:43:20:04:3c:22:e7:54:36:43:
                    4f:17:eb:cd:56:c6:3b:73:c0:ab:91:ae:d3:17:49:
                    0f:be:f7:91:1a:31:43:4e:b2:7b:74:7b:13:f2:ad:
                    4c:86:4b:bb:b1:c1:cd:90:7e:6a:5b:75:f4:0d:6b:
                    b2:c6:7d:ab:e8:fc:9c:4e:ad:79:ec:5e:9f:7b:fa:
                    2a:c2:01:62:47:1a:ea:d0:f8:86:67:ab:84:79:52:
                    4a:31:40:25:28:19:52:52:5b:e0:0b:a5:99:c3:14:
                    0e:df:b7:c0:83:1c:02:dc:64:a6:60:8a:b0:8d:d5:
                    f2:8c:97:72:bb:73:dc:10:71:8d:60:d2:57:63:9e:
                    d1:2e:8f:ac:1d:c5:fe:96:ed:c7:99:6f:a0:9d:11:
                    41:af:79:d9:31:dd:54:83:99:cc:bb:07:ee:ae:04:
                    56:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:06:5A:21:12:69:73:03:35:7C:5B:5A:95:E9:13:8B:6E:D3:45:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/26cf911c-d09c-3286-b449-7126b98375ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl

            X509v3 Authority Key Identifier:
                keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.199.28.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d2:67:d3:1e:2d:aa:ff:d9:26:6b:43:05:1b:7a:cb:93:dc:3f:
         91:af:4f:99:5d:1b:bf:fa:e3:62:1d:5a:9c:f9:29:02:77:08:
         f9:96:3d:6d:ef:6d:9f:33:d6:93:e5:c5:a7:ed:45:4b:09:dc:
         8f:23:60:a3:9c:62:9a:37:be:27:50:b2:08:9d:8e:cf:7c:2e:
         82:78:66:c6:b8:66:c1:cc:f6:af:53:75:68:6f:24:03:37:d5:
         48:50:1e:58:65:b6:b6:d6:dc:6a:28:26:a0:29:e4:37:1f:27:
         c2:60:9c:ee:c1:8c:cf:ef:aa:b7:c3:dd:10:6d:92:4d:c6:7c:
         1d:cf:e5:4f:5f:e1:46:c3:7e:90:3b:77:83:61:5c:36:fb:37:
         71:05:f8:2e:ff:8e:61:1d:8d:d7:57:b2:1e:23:4a:10:75:84:
         e3:39:7a:07:6c:e2:ca:7e:ad:04:d7:f6:0f:29:a7:da:c3:4c:
         58:43:72:a1:15:4e:60:6e:e4:7e:f3:fa:8d:f0:d8:1d:2c:89:
         dd:e1:b1:74:92:0e:4a:51:e8:d2:79:56:36:2f:a8:3b:ed:2f:
         31:b2:ff:5e:90:da:84:0e:2a:83:7e:3f:60:dd:48:83:8c:5e:
         59:73:ed:62:77:66:47:53:81:5d:47:b9:a1:10:6f:58:9f:34:
         fd:45:86:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 03:30:53 2026 by rpki-client