Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6/d56b03a7-0ec7-338a-8b08-d12daae44607.roa
File:                     d56b03a7-0ec7-338a-8b08-d12daae44607.roa (raw, json)
Hash identifier:          tu+l3aj8AoKdQk5Bd3uXJQrRBpI01IsVeyo0YIo6zuI=
Subject key identifier:   22:B2:70:CC:7B:44:B5:6D:FC:10:B1:4A:B7:48:C6:32:83:08:B9:6D
Certificate issuer:       /CN=e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6
Certificate serial:       010D0C9F4328584CE4C77181DF84F4BD992CB102
Authority key identifier: 16:5B:E6:6E:A9:0A:32:DE:82:B4:13:55:3F:BB:38:BE:04:F7:67:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6/d56b03a7-0ec7-338a-8b08-d12daae44607.roa
Signing time:             Tue 17 Feb 2026 14:00:41 +0000
ROA not before:           Tue 17 Feb 2026 14:00:41 +0000
ROA not after:            Mon 18 May 2026 13:00:41 +0000
asID:                     7345
IP address blocks:        135.109.194.0/24 maxlen: 24
                          135.109.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6/e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6/e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e4:c7:71:81:df:84:f4:bd:99:2c:b1:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6
        Validity
            Not Before: Feb 17 14:00:41 2026 GMT
            Not After : May 18 13:00:41 2026 GMT
        Subject: CN=2c3220a7-0362-4c04-aef1-0a1c54297da8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:c9:78:32:e5:7a:d7:f7:66:e0:30:ea:ce:ed:
                    2d:9a:f3:df:27:cb:c2:6d:88:74:48:3f:f1:5a:d1:
                    f4:75:67:3a:4c:ae:38:96:41:6e:f5:86:85:a5:ee:
                    ae:a6:89:be:7d:77:29:43:62:50:db:a6:7e:ad:55:
                    ce:f7:e2:62:a8:6b:78:1a:e1:fb:2e:0a:12:c3:c6:
                    ca:22:b3:e6:9d:f3:c2:31:23:7c:10:9b:16:77:b1:
                    40:52:dc:37:ac:f9:8f:af:f3:87:e1:d2:95:2d:cd:
                    43:60:c6:d8:30:01:89:ce:43:a5:87:0f:9b:7f:75:
                    7d:d4:7a:15:19:15:40:0e:dd:f8:f4:34:f9:52:36:
                    96:04:de:94:40:a5:52:9c:36:b2:98:4d:61:19:a6:
                    b7:73:12:64:d3:86:1b:e5:e3:65:75:fc:e4:cb:55:
                    45:39:f1:69:b3:46:db:06:36:44:31:37:07:28:fe:
                    fa:84:e6:a0:e8:db:55:fa:08:fa:67:e7:5e:31:b3:
                    79:51:1c:43:fe:8b:f7:5b:40:16:c8:c8:9c:f3:c4:
                    63:cf:e9:8b:c5:84:7d:f5:cb:b3:0c:9d:aa:0a:c7:
                    16:d5:4c:07:6e:ec:fa:2c:f7:cb:48:09:0c:84:30:
                    e8:55:84:a8:79:de:48:a3:c0:bc:e7:98:76:24:bf:
                    23:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:B2:70:CC:7B:44:B5:6D:FC:10:B1:4A:B7:48:C6:32:83:08:B9:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6/d56b03a7-0ec7-338a-8b08-d12daae44607.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6/e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6.crl

            X509v3 Authority Key Identifier:
                keyid:16:5B:E6:6E:A9:0A:32:DE:82:B4:13:55:3F:BB:38:BE:04:F7:67:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  135.109.194.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:fa:9f:48:cd:28:ff:f0:af:f3:a7:a4:20:43:2c:11:85:53:
         31:66:e9:d3:57:7a:dd:52:27:4c:33:04:87:e6:06:3d:5d:ea:
         9f:c8:44:d7:d6:44:77:28:90:bb:ff:6d:b9:da:16:cf:f9:4b:
         d5:11:ae:f4:75:c8:39:d3:f3:8e:9b:64:7f:b0:f0:9c:c2:1c:
         ca:93:9b:40:2f:61:08:6f:13:eb:b9:75:86:5a:6e:41:25:2e:
         58:5b:e2:30:ea:a5:dc:0e:97:cf:b0:a6:22:c8:e5:51:d8:76:
         01:b0:f7:d7:ff:9d:b6:11:9d:03:4c:86:21:c7:94:d5:58:8b:
         e2:b2:21:7d:99:29:9a:a5:66:59:15:47:c4:86:9c:43:98:1a:
         29:b0:7a:a7:de:9e:1b:df:96:52:6d:83:8a:3a:cd:99:01:b2:
         a1:f0:d6:90:f4:6f:ee:1b:1b:30:03:3f:3a:a5:ce:61:24:ce:
         6f:50:3f:e6:c9:7f:49:b0:a7:1d:a1:e0:db:25:71:14:b8:5f:
         79:bc:0c:68:85:55:e0:8f:d1:ab:be:2f:55:00:bf:09:fb:71:
         63:03:95:4a:59:96:79:c0:00:e8:21:5f:16:d9:08:d0:34:e8:
         66:7e:70:44:2a:d1:14:a6:d1:5a:e3:09:7f:83:98:e8:d7:23:
         47:b2:a1:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:33:16 2026 by rpki-client