Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/7358a87f-a0c3-3ff2-8392-3f3d2ecd62cf.roa
File:                     7358a87f-a0c3-3ff2-8392-3f3d2ecd62cf.roa (raw, json)
Hash identifier:          8GjcEmkiCbKQgmDkIUh64iE2WL8V1T3Bcsnr/4E7ZUM=
Subject key identifier:   C3:8C:E4:0C:85:DB:88:AB:1A:67:15:96:88:75:C6:D7:01:78:B7:0E
Certificate issuer:       /CN=390ceb1e-38f0-4690-8e12-fdef0dc0eddb
Certificate serial:       010D0C9F4328584CDF3249664A021521C064EA40
Authority key identifier: EC:88:55:61:E9:7D:FF:FC:46:28:CC:12:12:F1:10:92:D8:74:55:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/7358a87f-a0c3-3ff2-8392-3f3d2ecd62cf.roa
Signing time:             Sun 15 Feb 2026 14:00:41 +0000
ROA not before:           Sun 15 Feb 2026 14:00:41 +0000
ROA not after:            Sat 16 May 2026 13:00:41 +0000
asID:                     395201
IP address blocks:        134.65.192.0/22 maxlen: 22
                          164.152.160.0/22 maxlen: 22
                          169.155.44.0/22 maxlen: 22
                          169.155.168.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:df:32:49:66:4a:02:15:21:c0:64:ea:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=390ceb1e-38f0-4690-8e12-fdef0dc0eddb
        Validity
            Not Before: Feb 15 14:00:41 2026 GMT
            Not After : May 16 13:00:41 2026 GMT
        Subject: CN=fdbd75b9-cc2e-4251-b3f1-7207fbe2792a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:82:67:13:8c:f5:2d:08:81:1e:b8:a3:59:6f:
                    cd:86:ca:8c:e4:24:4a:eb:91:d1:47:72:80:ff:41:
                    e2:74:79:ad:c7:51:5f:bd:b1:7c:bb:d3:a3:be:41:
                    2f:18:54:3e:01:20:7f:1e:10:15:9b:de:ea:9b:c3:
                    7d:46:49:92:0f:67:82:52:2f:0b:b6:c7:8c:e4:09:
                    62:e4:cd:ca:20:04:d4:df:d1:b4:81:bb:cb:88:42:
                    59:3d:4c:c0:f0:df:25:1c:90:fc:5b:c6:db:b7:98:
                    9c:ff:a1:3d:3d:da:04:21:04:92:d3:2b:03:6d:f0:
                    3c:1b:30:99:84:37:76:d4:b6:28:53:f9:25:a3:d5:
                    01:f2:e4:9e:70:ae:bf:48:a3:95:c6:1a:17:e5:5f:
                    ad:5c:b2:58:bd:f6:a2:2f:ed:2d:55:e4:74:2f:6b:
                    76:5d:4f:e4:8f:5e:19:5b:a9:df:9a:b5:85:3a:49:
                    d3:04:32:cf:2f:49:28:89:46:ce:cb:e0:96:19:58:
                    ed:1b:e2:a2:96:d5:d5:c5:13:78:de:43:1d:e2:31:
                    73:24:ce:1c:11:4c:93:4a:c6:46:6e:38:12:0f:b7:
                    2a:c6:56:aa:88:79:c2:03:09:3e:72:fd:7d:4c:f9:
                    74:9b:a9:b2:17:67:64:b2:ab:d6:c7:46:46:7d:75:
                    8a:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:8C:E4:0C:85:DB:88:AB:1A:67:15:96:88:75:C6:D7:01:78:B7:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/7358a87f-a0c3-3ff2-8392-3f3d2ecd62cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.crl

            X509v3 Authority Key Identifier:
                keyid:EC:88:55:61:E9:7D:FF:FC:46:28:CC:12:12:F1:10:92:D8:74:55:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.65.192.0/22
                  164.152.160.0/22
                  169.155.44.0/22
                  169.155.168.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cd:56:02:df:60:14:ac:80:9a:53:fc:e3:6d:3e:de:5e:47:db:
         53:04:eb:0e:09:28:b7:0a:1e:ae:93:64:d9:0f:d8:cf:c6:c0:
         17:52:ad:50:af:2e:29:73:8b:0f:f8:97:be:37:e5:6e:e6:fc:
         ce:5f:be:ed:2f:8e:fd:74:7f:8a:13:86:cd:0d:07:1c:57:6e:
         50:aa:d8:8e:f5:4c:79:b9:d7:1a:96:0e:a0:94:ef:be:3f:57:
         1e:30:a9:6c:08:00:b7:f1:26:9d:dd:b7:1c:40:06:57:40:fc:
         8d:df:52:66:02:ef:2b:93:4e:bf:9c:8e:6f:55:82:56:ed:79:
         45:3e:71:a0:58:a3:e3:dc:c1:c7:55:71:e1:1f:da:6b:dc:51:
         28:89:f0:55:15:e4:90:a2:74:c6:d0:53:f1:3e:f8:c5:ec:5f:
         b5:8f:e8:88:26:ad:e1:ce:a1:0d:36:22:3f:2a:85:ab:c4:a6:
         82:1a:3a:cb:60:53:ce:0c:c6:75:76:f4:8e:12:48:27:1a:0f:
         a9:56:89:78:1f:9f:2b:d7:12:9a:d9:00:85:42:dd:9b:e4:7d:
         ea:40:20:f7:81:82:a3:fe:39:55:1c:c9:34:52:07:26:28:8c:
         3b:f8:62:17:eb:83:68:28:3b:85:9a:2e:90:41:42:f4:09:b7:
         61:c8:cc:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:12:07 2026 by rpki-client