Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5c47470a-2cfa-35e8-9598-8eb630e520c1.roa
File:                     5c47470a-2cfa-35e8-9598-8eb630e520c1.roa (raw, json)
Hash identifier:          SD8wZl5lfqztXgQJzeJMVo5RlcB6WOslVJshqL/7MLQ=
Subject key identifier:   1B:22:12:59:3C:14:E6:D8:E8:15:6B:12:AF:2F:97:68:70:46:3A:14
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584CAFBC738FFC5E7C1CD1285A80
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5c47470a-2cfa-35e8-9598-8eb630e520c1.roa
Signing time:             Thu 29 Jan 2026 14:00:40 +0000
ROA not before:           Thu 29 Jan 2026 14:00:40 +0000
ROA not after:            Wed 29 Apr 2026 13:00:40 +0000
asID:                     31898
IP address blocks:        207.135.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:af:bc:73:8f:fc:5e:7c:1c:d1:28:5a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Jan 29 14:00:40 2026 GMT
            Not After : Apr 29 13:00:40 2026 GMT
        Subject: CN=857c08fe-000c-410a-b5ca-81d48453f816
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:4d:15:01:5a:ce:44:51:1b:ac:9b:4f:eb:88:
                    37:34:39:98:f1:96:ce:76:36:45:7c:6b:af:3a:5d:
                    ed:17:ac:09:e3:ae:de:70:6e:06:98:0d:65:1d:0f:
                    d7:7b:39:cd:ee:c1:e7:c6:81:99:52:e2:43:e9:f2:
                    45:cf:d6:32:94:b1:a2:2c:1a:c9:8c:08:ee:4c:a0:
                    35:65:63:64:e6:01:39:45:a4:32:5d:d0:ec:09:2d:
                    9a:c7:7d:6f:8b:57:3d:f4:80:88:33:8f:bc:a5:08:
                    b2:d1:a4:48:2f:f9:13:c4:e0:60:bc:a8:40:0c:bf:
                    33:d7:a7:e8:88:29:c3:65:ce:e9:69:d3:83:fe:9f:
                    08:69:12:07:f0:45:fd:dd:f3:ad:73:d3:a1:d7:5c:
                    6a:6d:c8:12:7f:84:35:a4:bc:89:9c:28:85:cb:60:
                    b0:10:07:da:72:19:85:ae:85:4f:99:3e:2b:7f:00:
                    f7:11:3f:30:43:0e:a0:1f:51:5d:98:7b:9c:35:0d:
                    18:d1:56:c2:e2:a1:b8:57:f8:5e:ea:06:d0:3b:98:
                    d7:65:e7:d0:2c:2d:36:c5:fb:85:b8:13:5a:b9:68:
                    ce:87:d7:94:70:8d:a4:64:ec:13:e0:fd:e1:44:46:
                    81:cd:f2:86:18:96:f0:c1:0e:f6:65:19:f9:e2:1d:
                    e1:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:22:12:59:3C:14:E6:D8:E8:15:6B:12:AF:2F:97:68:70:46:3A:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5c47470a-2cfa-35e8-9598-8eb630e520c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.135.26.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:4e:de:55:df:53:7b:2a:ee:40:12:67:99:4e:16:ce:65:7a:
         b2:a2:94:f7:30:8a:3a:3d:86:6d:f3:9e:d9:5e:1b:b6:ac:cd:
         df:33:2e:66:66:93:cc:35:d1:b7:e7:0c:7d:b7:84:fc:dd:e3:
         d7:d1:5e:ee:95:59:32:ed:d6:dc:98:39:ec:f8:69:e8:1e:ec:
         9c:1a:69:2d:90:b9:20:72:2e:3d:da:0b:d4:31:b1:83:09:b8:
         bd:1d:01:7b:69:c9:d3:70:11:33:fe:00:5d:ef:34:c6:28:ce:
         47:f5:c4:fb:1d:26:9e:4b:16:c4:1f:20:26:5b:58:e1:be:71:
         3b:f1:9e:5c:97:71:3d:7e:41:ae:b7:d0:0a:a3:7d:12:95:8a:
         98:76:92:12:5c:2c:c6:7d:d1:d6:d6:79:bb:46:b9:d4:15:13:
         1f:8d:a3:94:d2:87:e2:59:75:1c:f2:86:c8:94:65:49:12:1e:
         bb:8c:f9:81:ba:ae:14:12:ef:09:56:57:8f:d2:03:a6:23:e4:
         e5:e5:d5:c2:94:b0:3a:06:f7:92:35:99:b1:57:95:31:c0:cb:
         c0:98:66:41:de:3e:37:86:54:b7:10:77:d2:3c:dc:6b:f9:4c:
         01:07:04:92:83:d4:69:45:44:81:b2:c1:b3:52:91:70:7d:eb:
         9d:95:67:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 03:30:38 2026 by rpki-client