Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/8aa4cda8-06f3-3a77-8cff-5e8603ce4b61.roa
File:                     8aa4cda8-06f3-3a77-8cff-5e8603ce4b61.roa (raw, json)
Hash identifier:          O+cz/lIpaArGhZE2cOHkN0pSVcUbsps/VRUna7xtAJs=
Subject key identifier:   1C:9A:5F:9B:40:E5:1B:C9:66:29:E2:BE:3C:F6:09:53:AE:E4:31:6B
Certificate issuer:       /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial:       010D0C9F4328584CD99CCA96EDE38AF629206C00
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/8aa4cda8-06f3-3a77-8cff-5e8603ce4b61.roa
Signing time:             Fri 13 Feb 2026 14:00:41 +0000
ROA not before:           Fri 13 Feb 2026 14:00:41 +0000
ROA not after:            Thu 14 May 2026 13:00:41 +0000
asID:                     22781
IP address blocks:        173.255.168.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d9:9c:ca:96:ed:e3:8a:f6:29:20:6c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
        Validity
            Not Before: Feb 13 14:00:41 2026 GMT
            Not After : May 14 13:00:41 2026 GMT
        Subject: CN=9b721f18-4286-425a-9137-cd08595419c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:f9:6a:86:c0:46:54:94:e8:c5:8f:5a:fb:88:
                    06:19:b9:e5:c8:69:37:ab:7c:93:0a:f7:ae:5c:4e:
                    61:81:dc:8e:33:87:5d:db:87:46:79:04:2f:3a:f8:
                    cc:e4:12:4b:54:e4:40:1e:a8:57:32:93:b6:50:d9:
                    e4:75:5d:80:1f:15:29:e4:9a:40:c2:2a:c1:63:a6:
                    85:71:9d:76:50:42:09:fd:a9:c4:89:fa:03:9b:1e:
                    68:b4:8a:62:cf:23:53:a9:e7:66:c6:c7:9b:f0:e0:
                    53:8e:06:96:d3:3e:7f:21:fd:01:66:72:d4:22:45:
                    68:c6:26:30:8f:1e:87:d3:1d:f2:60:e7:ec:60:79:
                    e4:d3:e0:3b:22:a6:20:89:6d:de:1a:83:49:f0:10:
                    56:d3:d8:c4:12:2c:85:93:d8:6d:a7:79:16:3c:d2:
                    2d:ba:26:78:ed:a5:5b:02:16:16:70:9f:2b:85:d6:
                    ba:1d:43:4b:39:cb:fd:7f:fb:33:cb:47:7d:61:79:
                    2c:9c:7c:39:26:48:9a:7f:fb:25:0b:52:4a:90:0e:
                    ea:3f:82:07:bf:f2:d5:de:d2:97:cd:a9:8b:2d:a2:
                    e5:bd:e2:c7:31:cd:4f:59:20:cb:a0:8c:bb:28:bc:
                    aa:ba:31:de:06:2a:4f:80:61:98:7a:c1:b9:f2:45:
                    e8:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:9A:5F:9B:40:E5:1B:C9:66:29:E2:BE:3C:F6:09:53:AE:E4:31:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/8aa4cda8-06f3-3a77-8cff-5e8603ce4b61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl

            X509v3 Authority Key Identifier:
                keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.255.168.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:d8:d5:1b:db:e9:e2:3b:9a:3e:a6:fa:8f:d9:31:e3:51:24:
         de:ec:86:6d:fb:6d:b4:c5:69:65:05:d9:17:e7:af:7a:60:6c:
         53:b2:b0:41:96:1c:0a:fc:54:f1:33:0f:c4:5d:55:7e:b4:e6:
         83:3e:ec:21:e5:b7:1c:bf:a1:a0:91:8d:b4:d9:53:7b:49:13:
         31:59:32:96:78:77:64:20:f7:e8:38:93:2e:00:85:89:bc:6a:
         e9:5d:a2:98:cc:d0:8d:47:e3:f9:f2:c7:b0:bb:84:be:aa:d6:
         25:c4:1e:25:69:c8:ff:d0:6f:50:1e:e4:e7:6c:48:d4:07:f9:
         91:31:c9:91:50:0e:78:71:ca:56:a9:88:40:9c:bf:5b:ef:15:
         ce:5c:74:eb:f0:d9:bb:13:0f:26:25:f4:74:fd:9e:fd:a8:14:
         d0:1d:4a:c1:e8:af:67:5a:2c:10:4d:14:cc:6d:5d:dd:77:88:
         38:89:85:00:6f:0c:d2:60:a1:c1:0d:42:c1:10:a4:94:70:d9:
         54:a9:0c:0a:d2:81:fa:e6:b4:41:c9:36:4f:af:98:f2:2d:70:
         4e:43:b5:85:0a:bd:6e:5a:5b:4e:b0:99:63:b4:3d:66:a4:57:
         00:3b:a4:57:6f:ba:ad:c6:9a:9d:af:b2:a9:50:e8:6c:21:da:
         dc:5d:a0:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:09:41 2026 by rpki-client