Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9f523c62-6972-3971-a4b5-0eeb1e9a2161.roa
File:                     9f523c62-6972-3971-a4b5-0eeb1e9a2161.roa (raw, json)
Hash identifier:          6EkFnOChVZcJw2wIDk1fVw0ZOujpCKPHRr7z6I5Qqa8=
Subject key identifier:   EE:87:06:EC:7D:4C:87:8E:47:AB:A7:B8:82:4F:E4:69:80:20:FA:0A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CFDE817BA0C415E72ACF20500
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9f523c62-6972-3971-a4b5-0eeb1e9a2161.roa
Signing time:             Thu 26 Feb 2026 14:00:40 +0000
ROA not before:           Thu 26 Feb 2026 14:00:40 +0000
ROA not after:            Wed 27 May 2026 13:00:40 +0000
asID:                     7725
IP address blocks:        162.151.121.128/25 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fd:e8:17:ba:0c:41:5e:72:ac:f2:05:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 26 14:00:40 2026 GMT
            Not After : May 27 13:00:40 2026 GMT
        Subject: CN=d1db2352-778b-4151-b74a-54cde83186c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:09:45:1f:af:8d:10:cd:b7:de:2c:95:58:9e:
                    e0:ce:e1:4f:cc:27:3b:cd:1c:ec:03:0d:23:3e:bf:
                    0b:e6:74:4c:c3:5f:1b:42:34:29:8f:2d:93:15:59:
                    d8:7b:db:cf:10:f9:98:d0:46:bc:66:2c:00:06:bf:
                    47:8f:0f:79:00:03:2d:fd:88:41:3d:bc:90:09:4e:
                    82:62:1f:f1:ed:ec:a4:21:a5:d2:4f:67:64:0b:ed:
                    e8:2b:1a:57:da:ac:e4:c1:3b:a3:d4:be:4e:0f:0a:
                    1a:60:f5:28:6e:fb:39:86:04:2d:14:79:34:a2:9a:
                    32:ee:0b:a7:b1:fd:f6:e5:c8:52:14:73:5e:94:b3:
                    da:a0:c9:5d:13:ed:73:43:74:aa:53:68:ac:cc:61:
                    8d:e1:d2:dc:e1:a5:85:1e:ed:34:88:b5:08:0f:14:
                    eb:d4:11:a2:df:98:41:34:80:4f:1d:f0:5c:94:22:
                    ac:01:08:79:af:a1:bb:7b:e5:e6:40:e1:a0:fe:d2:
                    18:ff:45:06:b2:f9:10:8e:9e:a5:93:f6:e4:68:5b:
                    b5:ef:5e:48:10:a6:f3:b1:75:a0:f3:e3:c0:df:c4:
                    a1:b2:3f:c7:67:a5:8e:ec:02:39:d8:d0:c2:7a:d3:
                    b2:a7:61:02:ed:15:19:e4:da:e3:68:b8:ec:c4:06:
                    69:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:87:06:EC:7D:4C:87:8E:47:AB:A7:B8:82:4F:E4:69:80:20:FA:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9f523c62-6972-3971-a4b5-0eeb1e9a2161.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.151.121.128/25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:9f:f9:95:6b:b0:40:ce:28:b4:e7:61:94:6c:7a:13:fc:df:
         59:92:61:82:5a:a2:79:de:27:07:8c:5e:ce:d9:49:a2:d5:1d:
         f8:a8:70:65:1f:ce:ed:dc:e8:b2:c7:25:4e:9a:6c:e4:43:91:
         0e:0e:0f:3e:b5:1e:59:70:29:e7:a2:b7:93:9d:7e:fd:95:02:
         6f:14:fa:90:f6:2c:3f:1a:5b:c9:40:71:e1:e8:69:d8:5e:84:
         1d:ce:dc:e1:c3:19:12:ae:d7:4d:ed:76:00:6d:08:43:78:42:
         e4:04:99:79:e1:c5:62:f3:e7:40:64:24:71:e8:2e:69:21:32:
         25:74:42:fd:0d:e4:ab:73:be:d3:70:be:4f:83:dd:5c:62:63:
         65:9d:06:9e:f4:b3:e8:7b:4b:54:6b:a5:b3:3e:d3:02:a9:24:
         b1:4d:6f:16:3c:71:e4:d6:3f:6f:a8:84:b3:04:9e:4c:df:f2:
         fe:46:46:06:d8:08:37:8b:80:56:93:65:5f:b7:41:f4:7a:ab:
         51:fa:10:cb:01:c1:13:8c:04:36:c7:11:80:3c:b5:ae:1a:51:
         b9:31:b2:46:3c:f7:78:4b:96:a3:cc:58:b2:7f:cd:fe:85:60:
         64:61:ae:d5:54:fa:69:37:56:9b:72:59:74:a5:d5:45:97:52:
         1e:dd:0b:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:56:49 2026 by rpki-client