Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/6a21c2dd-f822-3713-80c4-aa6f2568feef.roa
File:                     6a21c2dd-f822-3713-80c4-aa6f2568feef.roa (raw, json)
Hash identifier:          2UvSyIzobcXzG7C4D9S8riMM4FEage/QeSC3e0o5uTo=
Subject key identifier:   5E:F8:9B:AC:A5:6A:E8:32:25:AC:B8:E6:85:CF:90:56:9F:F6:7B:7C
Certificate issuer:       /CN=341b7e96-a6f0-44d3-aecc-9294d6bccc78
Certificate serial:       010D0C9F4328584CE1FCBDC049BA70F9AC183B80
Authority key identifier: A0:F0:41:78:61:8C:48:96:CF:A9:8C:C6:9A:53:8B:40:50:28:B2:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/6a21c2dd-f822-3713-80c4-aa6f2568feef.roa
Signing time:             Mon 16 Feb 2026 14:00:40 +0000
ROA not before:           Mon 16 Feb 2026 14:00:40 +0000
ROA not after:            Sun 17 May 2026 13:00:40 +0000
asID:                     19551
IP address blocks:        198.143.32.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/341b7e96-a6f0-44d3-aecc-9294d6bccc78.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/341b7e96-a6f0-44d3-aecc-9294d6bccc78.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e1:fc:bd:c0:49:ba:70:f9:ac:18:3b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=341b7e96-a6f0-44d3-aecc-9294d6bccc78
        Validity
            Not Before: Feb 16 14:00:40 2026 GMT
            Not After : May 17 13:00:40 2026 GMT
        Subject: CN=e26b8462-4f31-44c1-b494-a93441dded1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c8:44:fb:da:1d:7c:60:e7:e1:7e:03:ed:12:
                    60:3b:e8:7e:13:82:b3:e8:77:d9:48:1b:95:35:77:
                    69:93:91:0d:0a:2f:db:19:96:94:15:34:be:ae:8d:
                    17:44:60:b4:27:5b:9d:38:74:d7:30:1b:5d:ce:6e:
                    9a:1f:32:bd:5d:20:cd:cb:eb:0d:f0:03:66:b4:1e:
                    53:5b:40:f2:65:ae:b7:8a:ab:13:c0:7e:a3:13:91:
                    33:ac:35:5e:0c:47:37:f8:9d:86:16:e2:8f:94:28:
                    d7:30:bd:e7:54:af:a2:a5:fb:4e:9e:a1:a8:55:69:
                    13:73:65:3e:98:99:ac:da:51:50:00:6f:87:36:c4:
                    45:d4:73:43:80:c2:06:de:a4:ec:87:d4:4a:c9:f4:
                    90:00:ac:cc:b0:f6:4c:f5:5a:11:de:63:96:58:78:
                    78:e7:1c:c4:f8:f8:28:78:a7:86:ca:a7:20:d8:af:
                    cb:97:6e:4d:50:8c:0f:6f:6a:87:4b:73:a6:ef:ee:
                    85:64:a7:59:71:eb:02:a5:35:f9:fa:2d:e8:d3:a8:
                    3c:a0:c3:46:25:81:86:be:f3:0e:22:91:e0:b8:2f:
                    3d:fe:16:ed:0a:e6:20:f9:2f:5b:f4:a3:f7:84:6b:
                    3d:80:61:45:60:70:99:e8:4e:30:2f:e6:82:b1:62:
                    9c:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:F8:9B:AC:A5:6A:E8:32:25:AC:B8:E6:85:CF:90:56:9F:F6:7B:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/6a21c2dd-f822-3713-80c4-aa6f2568feef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/341b7e96-a6f0-44d3-aecc-9294d6bccc78.crl

            X509v3 Authority Key Identifier:
                keyid:A0:F0:41:78:61:8C:48:96:CF:A9:8C:C6:9A:53:8B:40:50:28:B2:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.143.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:f2:f9:50:6c:d2:e9:be:b0:22:00:85:f9:f0:4a:05:a3:c8:
         02:f9:3f:0d:9f:02:ce:7c:52:31:98:85:0e:49:bf:78:60:be:
         84:18:73:91:3d:92:80:67:0c:b8:66:8f:22:9c:f8:36:92:52:
         d5:5d:cd:ff:eb:ce:03:b3:84:df:8a:49:46:49:ea:34:dd:c4:
         01:17:a4:15:f8:75:26:c4:3f:15:c9:70:24:d9:94:d5:a6:b7:
         b7:ed:db:7b:2f:61:8e:35:b7:e6:53:d6:81:31:81:42:b8:83:
         f7:4d:76:6b:41:12:95:6b:d6:5d:fe:60:77:5a:8b:87:a9:48:
         2e:7b:42:ce:0e:43:a6:a3:8d:b7:f6:a6:6e:de:28:07:b8:ef:
         32:04:83:ff:5b:af:3c:43:08:a7:a3:db:89:e0:e8:01:43:77:
         bf:65:7d:af:5c:89:2e:44:90:93:44:e0:f6:48:ef:40:2f:3c:
         35:5a:06:50:be:b3:2e:9f:c5:cf:82:70:ff:ab:5c:01:3d:ba:
         bb:50:2a:4a:b5:60:00:a1:dc:82:db:e3:42:9f:38:03:7d:95:
         cb:b5:06:8e:36:eb:4c:1f:91:b5:46:06:b0:04:ef:3b:76:bb:
         14:37:90:e5:68:ed:23:b6:5c:45:7a:30:e9:da:1c:13:54:c9:
         70:17:91:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:54:34 2026 by rpki-client