Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8039d905-9f19-3add-aaa6-10583e1ee4d3.roa
File:                     8039d905-9f19-3add-aaa6-10583e1ee4d3.roa (raw, json)
Hash identifier:          CA2i9IpkzyS1goqlGV/7x2yuVfMLyidUbpzdZa26lss=
Subject key identifier:   D8:34:70:B5:5B:35:74:9B:D3:B3:39:53:63:15:21:F8:97:FE:CF:52
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CFDE8ED04A0ECE7F0FACE6580
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8039d905-9f19-3add-aaa6-10583e1ee4d3.roa
Signing time:             Thu 26 Feb 2026 14:00:40 +0000
ROA not before:           Thu 26 Feb 2026 14:00:40 +0000
ROA not after:            Wed 27 May 2026 13:00:40 +0000
asID:                     33491
IP address blocks:        162.151.184.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fd:e8:ed:04:a0:ec:e7:f0:fa:ce:65:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 26 14:00:40 2026 GMT
            Not After : May 27 13:00:40 2026 GMT
        Subject: CN=6bab6821-a35d-43df-b98e-1ce790e3d9e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:2f:20:3a:b2:52:18:9a:5a:80:0f:fb:3b:75:
                    48:3c:09:a6:10:b2:a9:ad:70:55:19:e2:31:da:d6:
                    f5:7b:5c:ac:60:c6:ff:49:c5:b1:19:53:20:a2:e3:
                    4d:52:80:da:f7:42:a0:2c:ce:b4:02:32:37:c3:8f:
                    71:52:37:45:b7:07:4b:90:50:aa:ee:7a:6e:c5:31:
                    c2:e2:2c:4a:e3:83:bf:82:1a:c7:77:ac:dd:72:2d:
                    5c:1f:bb:1e:53:fc:60:0a:3b:8b:15:09:97:ac:f8:
                    27:e9:5e:e7:cb:e4:98:e0:71:79:d5:45:65:06:ea:
                    f9:1f:92:7a:ff:7b:ac:42:58:ab:69:0c:e9:48:f7:
                    57:e0:30:cc:d7:1d:86:ce:0e:47:82:75:f0:95:0c:
                    fb:fc:78:68:c1:f3:32:c1:93:c6:d4:74:b0:62:71:
                    1f:e5:d2:78:e6:b0:e8:80:be:ae:b1:9b:24:fd:a9:
                    c4:b7:47:cc:90:dd:cf:24:f9:b0:86:3b:22:12:c8:
                    59:30:c5:e2:b9:e7:aa:2a:9d:74:d9:8a:9c:43:cb:
                    9b:1c:a6:56:f8:1e:4b:76:f4:2a:b7:2b:8b:85:df:
                    1c:05:dc:de:ef:22:a2:ad:24:ec:ce:90:74:21:c2:
                    27:a6:c4:5f:6c:0c:bf:ba:ca:62:e6:97:4a:67:5a:
                    7b:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:34:70:B5:5B:35:74:9B:D3:B3:39:53:63:15:21:F8:97:FE:CF:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8039d905-9f19-3add-aaa6-10583e1ee4d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.151.184.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:d3:c2:de:f6:cc:32:0f:55:16:79:f6:21:b6:dc:85:2f:ca:
         9a:c9:3a:50:48:92:fa:d7:cb:b9:4f:51:c9:70:4d:9b:9b:00:
         aa:b6:2f:95:5b:a4:d5:6f:07:d9:c1:eb:11:74:54:e5:04:41:
         0f:87:0c:93:15:a0:24:24:c0:37:ef:4c:8e:67:c8:c1:05:9d:
         6e:8e:92:8d:87:91:af:49:69:df:06:63:4f:36:09:ca:6b:6f:
         c8:85:75:d9:ea:7d:f8:71:00:70:df:52:5c:47:cd:6f:82:b9:
         68:46:bb:a0:c8:0d:27:8b:d9:f7:25:48:b3:4f:ae:73:f1:5a:
         61:05:1a:e4:59:a2:0b:7a:08:06:e0:fa:4f:cf:6d:3a:67:35:
         ce:ed:ac:1c:e5:69:11:a0:f0:5e:ea:c7:f8:76:c0:7d:10:7a:
         ee:68:44:8f:2d:85:4a:b4:ec:c6:b0:45:9f:ed:70:e0:28:27:
         8f:d4:6a:2c:2c:dc:27:52:66:19:b7:85:8b:6e:ba:d3:86:c9:
         2e:bc:31:50:75:67:1d:5e:31:11:9d:df:ee:4b:f9:28:37:6f:
         89:5e:0a:35:7e:72:3b:09:9e:13:05:b3:a1:54:2b:6b:21:05:
         22:b0:78:83:8d:f6:98:fb:a2:d3:1b:f1:c8:fb:3a:12:5c:4b:
         73:a6:de:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:12:19 2026 by rpki-client