Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/039e16b1-e1ae-3c19-8468-2fe22ef13595.roa
File:                     039e16b1-e1ae-3c19-8468-2fe22ef13595.roa (raw, json)
Hash identifier:          pkxFOE6aRJWaz2yR+kfCPsDSeTwspDWxmRfz29uJhzo=
Subject key identifier:   A2:CB:39:22:A5:3E:69:0B:C6:D7:B8:BB:29:B4:6A:9D:06:F7:96:3A
Certificate issuer:       /CN=4e81a256-41ff-4f51-8092-c7fffa4d9221
Certificate serial:       010D0C9F4328584CAA27109F2FE062A576796180
Authority key identifier: C2:2B:67:61:D1:1E:AC:E5:13:26:4F:10:46:D2:FA:CC:7C:45:8B:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/039e16b1-e1ae-3c19-8468-2fe22ef13595.roa
Signing time:             Tue 27 Jan 2026 14:00:36 +0000
ROA not before:           Tue 27 Jan 2026 14:00:36 +0000
ROA not after:            Mon 27 Apr 2026 13:00:36 +0000
asID:                     6922
IP address blocks:        198.216.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:aa:27:10:9f:2f:e0:62:a5:76:79:61:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e81a256-41ff-4f51-8092-c7fffa4d9221
        Validity
            Not Before: Jan 27 14:00:36 2026 GMT
            Not After : Apr 27 13:00:36 2026 GMT
        Subject: CN=8a9e9445-ce6b-4557-8d31-300a759a37bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:cf:b5:64:79:9a:55:c5:f2:81:0e:18:01:f6:
                    e1:a8:60:85:95:20:6e:ee:ff:e7:1f:8e:2b:0c:18:
                    62:88:4c:6d:9c:a1:de:2b:16:0b:95:eb:c4:8d:4e:
                    49:d3:bf:10:42:e9:5d:4e:df:20:9d:ac:e6:45:1d:
                    91:01:69:70:1b:57:a6:50:89:49:4a:74:aa:2e:58:
                    07:d0:9e:57:15:3e:00:2c:c3:b9:43:c4:4b:b0:d5:
                    fc:5a:9d:54:b7:50:41:28:d4:52:8b:75:91:ba:ba:
                    69:71:b8:86:8c:26:90:75:aa:df:6f:71:92:af:9f:
                    d8:69:75:b0:b3:27:41:cc:40:dd:1f:88:a7:4a:4b:
                    b0:19:be:49:e9:b8:b1:5f:7e:9a:32:1b:7f:59:69:
                    ca:69:88:d2:f7:d2:6b:6a:13:9e:12:15:25:e9:a3:
                    dc:59:58:28:97:9c:02:37:6e:6c:a6:85:35:d2:f0:
                    4c:da:06:d5:73:c2:c9:29:09:ec:a2:b2:fc:99:b2:
                    05:62:92:55:37:a8:88:66:0f:29:6d:39:08:c4:2d:
                    c7:c7:f8:e7:a1:c6:03:ed:73:b2:ea:48:5a:96:43:
                    88:22:60:04:d8:31:ae:8d:a5:d2:01:e3:f4:2c:77:
                    c1:aa:a7:94:e9:49:0e:96:a5:a9:8c:11:9a:63:2f:
                    8b:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:CB:39:22:A5:3E:69:0B:C6:D7:B8:BB:29:B4:6A:9D:06:F7:96:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/039e16b1-e1ae-3c19-8468-2fe22ef13595.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.crl

            X509v3 Authority Key Identifier:
                keyid:C2:2B:67:61:D1:1E:AC:E5:13:26:4F:10:46:D2:FA:CC:7C:45:8B:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.216.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:22:32:70:cc:70:2c:02:69:bc:cc:1f:dd:28:69:7d:f7:16:
         15:80:5b:ce:5e:bc:6c:aa:94:ce:45:ef:8a:ae:b2:45:3c:27:
         2d:fb:f9:04:54:87:a6:2c:e5:cb:13:85:76:ae:57:cf:0c:37:
         9e:2e:9f:dd:ee:86:62:eb:60:84:db:f3:5f:f8:dd:cb:f8:b1:
         ba:96:60:e3:9c:a5:89:e4:6d:77:ca:80:88:6e:33:cb:e9:c7:
         8b:b7:32:12:cb:8b:54:8b:44:54:3d:8d:63:7e:d0:7b:be:bd:
         ee:57:2b:68:14:4f:94:20:56:0d:5c:4a:0b:d7:7e:bb:13:cf:
         b6:77:55:63:c2:d8:81:0f:88:a1:a0:7e:cb:43:a8:15:72:0d:
         b8:0e:00:cf:e6:37:1f:ec:88:0c:fe:59:93:15:44:ec:42:a4:
         67:31:94:e9:13:35:be:2d:6e:ad:13:0b:84:58:bd:7f:1a:db:
         2e:1b:f2:a5:00:72:2e:df:37:f7:7d:13:26:07:60:37:44:64:
         8a:82:4e:21:c9:a7:8c:33:2e:38:20:75:22:86:66:3d:da:85:
         4b:10:25:25:dd:f1:bb:fc:d7:b1:bf:da:85:f9:30:31:1d:91:
         34:7c:84:94:2e:d7:80:1d:ea:86:83:71:68:ed:a6:05:4b:b1:
         10:dd:77:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:55:20 2026 by rpki-client