Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15164b64-0a30-43c7-b7d1-dda370c303f8/b1dcaee6-3a64-3eb9-8096-09e542e0fb54.roa
File:                     b1dcaee6-3a64-3eb9-8096-09e542e0fb54.roa (raw, json)
Hash identifier:          gCEOWBcsV9wQ9d33ZysjlnMpOYK4A56xx4rsLwyUYCM=
Subject key identifier:   70:54:F4:B7:26:AB:3E:E4:8E:51:74:A5:89:8E:B7:00:2D:78:19:26
Certificate issuer:       /CN=15164b64-0a30-43c7-b7d1-dda370c303f8
Certificate serial:       010D0C9F4328584CD6D21420834AF701DA9FD340
Authority key identifier: 60:FC:2D:3B:F2:7B:1B:67:6C:0F:C3:29:85:FE:B2:B9:05:43:B3:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15164b64-0a30-43c7-b7d1-dda370c303f8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15164b64-0a30-43c7-b7d1-dda370c303f8/b1dcaee6-3a64-3eb9-8096-09e542e0fb54.roa
Signing time:             Thu 12 Feb 2026 14:00:40 +0000
ROA not before:           Thu 12 Feb 2026 14:00:40 +0000
ROA not after:            Wed 13 May 2026 13:00:40 +0000
asID:                     11135
IP address blocks:        199.102.136.0/21 maxlen: 24
                          2607:d9c0::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15164b64-0a30-43c7-b7d1-dda370c303f8/15164b64-0a30-43c7-b7d1-dda370c303f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15164b64-0a30-43c7-b7d1-dda370c303f8/15164b64-0a30-43c7-b7d1-dda370c303f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15164b64-0a30-43c7-b7d1-dda370c303f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d6:d2:14:20:83:4a:f7:01:da:9f:d3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15164b64-0a30-43c7-b7d1-dda370c303f8
        Validity
            Not Before: Feb 12 14:00:40 2026 GMT
            Not After : May 13 13:00:40 2026 GMT
        Subject: CN=c56a10c8-a21a-41c5-9cbc-d735f68a99d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:85:fb:8d:1b:25:bf:2a:4e:82:8f:06:c5:90:
                    c4:e7:21:89:60:50:08:ca:6c:10:0a:79:af:c4:b5:
                    c4:de:0f:24:95:3e:90:20:2b:1e:6e:a3:a1:27:18:
                    97:92:b7:fc:61:49:54:d7:5c:4e:63:7d:39:78:90:
                    69:25:8b:fc:1d:53:0b:6a:72:42:69:ab:a1:7f:a3:
                    60:a8:f7:45:dd:ef:36:a1:05:17:b5:7d:44:67:40:
                    96:25:5e:9a:b4:fb:b1:66:04:ba:bd:bc:66:b7:2b:
                    05:03:d7:0f:ac:7e:95:e7:1c:06:e6:71:39:99:b9:
                    72:94:b0:1a:84:68:bb:f7:96:f9:e6:83:25:f1:c6:
                    01:d3:ba:bf:63:a8:bd:7c:53:30:27:52:37:c2:4b:
                    32:37:8a:61:8f:17:74:fd:21:e2:bb:bc:0e:91:e6:
                    53:2c:bb:3b:70:9b:5d:9c:b7:74:7a:d3:fe:07:37:
                    3b:0f:c5:fa:e6:9d:de:41:8c:0c:89:6e:df:75:fc:
                    9b:e1:24:ae:d2:de:e0:ad:bc:b5:cf:62:c1:65:68:
                    3d:8b:98:81:d8:33:f4:ab:9f:7d:df:45:07:b6:c5:
                    ff:8d:1f:99:cb:46:22:6b:98:42:ff:f1:46:c5:db:
                    36:64:14:f3:ec:c6:0d:37:31:65:07:1f:46:47:41:
                    e3:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:54:F4:B7:26:AB:3E:E4:8E:51:74:A5:89:8E:B7:00:2D:78:19:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15164b64-0a30-43c7-b7d1-dda370c303f8/b1dcaee6-3a64-3eb9-8096-09e542e0fb54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15164b64-0a30-43c7-b7d1-dda370c303f8/15164b64-0a30-43c7-b7d1-dda370c303f8.crl

            X509v3 Authority Key Identifier:
                keyid:60:FC:2D:3B:F2:7B:1B:67:6C:0F:C3:29:85:FE:B2:B9:05:43:B3:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15164b64-0a30-43c7-b7d1-dda370c303f8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.102.136.0/21
                IPv6:
                  2607:d9c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:86:77:c3:b3:53:a1:12:c9:2d:6d:e7:eb:f9:74:c6:4f:4e:
         8c:1c:29:da:23:b1:26:6e:e0:22:3a:9f:6e:c4:39:4f:df:46:
         d0:93:ef:86:9d:28:1b:0f:29:49:46:24:a2:cc:57:6a:6d:66:
         0c:00:fc:f0:25:18:a9:95:6a:3d:2f:fe:5d:0c:a5:64:f9:37:
         c2:de:96:f8:7a:7b:40:ff:19:46:51:26:87:b7:e5:a3:84:61:
         29:ef:46:72:d2:3b:cb:fc:27:b1:90:d7:9e:e1:b0:b2:e9:fc:
         20:51:29:9e:02:98:87:3d:93:71:4c:a7:fd:2f:e9:2d:10:f4:
         5b:42:5f:25:ea:2d:df:f5:0a:8e:c7:9f:ae:04:ce:bc:bf:fe:
         12:e7:79:6d:38:84:59:5d:f6:e8:ab:40:00:e3:30:5f:07:92:
         71:4d:4d:fb:3e:67:ae:80:66:27:90:fe:c5:e7:30:31:d0:6f:
         e0:f6:bc:5d:3e:ee:32:a1:d4:c2:3c:63:01:8a:13:dc:a2:ee:
         d7:f2:e1:c9:71:49:13:9f:ee:87:52:eb:cd:93:7b:d3:6a:cf:
         ff:2b:3c:48:1f:e9:2f:cc:93:a1:2e:68:d1:ab:cb:7c:28:85:
         ad:ac:73:0a:de:e3:9b:76:83:d6:77:16:ec:ac:a6:eb:6a:cd:
         b9:e2:b3:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:25:59 2026 by rpki-client