Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/6d7a1818-b03f-344d-ba6f-d2f48d6d4b7c.roa
File:                     6d7a1818-b03f-344d-ba6f-d2f48d6d4b7c.roa (raw, json)
Hash identifier:          0Fo7IxdyYYVFTeOdmNyB1gXXDgNh51WykupqIR7z6Vk=
Subject key identifier:   93:05:26:AA:72:69:CC:52:75:F4:FE:3A:BC:5A:6D:28:2F:0A:AE:4C
Certificate issuer:       /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Certificate serial:       010D0C9F4328584CDB0206D99BDFB6816CE76280
Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/6d7a1818-b03f-344d-ba6f-d2f48d6d4b7c.roa
Signing time:             Sat 14 Feb 2026 02:00:32 +0000
ROA not before:           Sat 14 Feb 2026 02:00:32 +0000
ROA not after:            Fri 15 May 2026 01:00:32 +0000
asID:                     1239
IP address blocks:        149.143.132.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:db:02:06:d9:9b:df:b6:81:6c:e7:62:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
        Validity
            Not Before: Feb 14 02:00:32 2026 GMT
            Not After : May 15 01:00:32 2026 GMT
        Subject: CN=f25c2bdf-cf45-4c0d-b950-f7d70527e86f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:69:98:4c:99:8b:10:49:ef:79:a2:5d:fd:15:
                    a6:8a:88:26:72:fa:96:68:a5:6b:ac:ba:51:5f:2d:
                    12:2c:ee:71:d4:d1:a6:07:3a:00:5e:79:91:b5:62:
                    15:77:ad:8e:7e:93:3b:91:4a:98:a8:38:f0:d6:ff:
                    ad:79:27:64:60:6d:d1:df:cf:f0:c5:ef:50:8c:c6:
                    e1:95:39:b8:4b:80:f5:bb:f9:d2:e8:9a:cb:41:b0:
                    f5:2f:b8:12:43:22:ab:61:c5:4a:a3:6d:bb:c9:3a:
                    32:79:57:b3:f4:a8:5e:d5:9f:34:0a:02:3e:34:6c:
                    60:9b:c8:28:8a:71:f5:f4:7a:3d:4e:b3:67:ae:6b:
                    3f:4f:12:67:33:01:5d:5f:d1:46:e7:99:d2:85:5d:
                    6c:43:26:d0:dc:fa:79:b4:bb:7a:16:b8:15:47:94:
                    b4:36:f5:43:79:5b:97:7a:3d:e7:50:27:09:34:6a:
                    01:58:9c:c1:44:43:c1:b3:7c:fd:00:c6:de:e1:5f:
                    1c:90:eb:d9:85:3b:c3:08:5f:3f:56:c2:1e:44:87:
                    ed:b9:77:55:83:f4:a9:15:3b:a8:93:1a:42:dc:2a:
                    e0:63:3a:5a:68:bf:59:96:13:11:8a:57:c6:1f:8f:
                    59:e4:33:38:50:f6:06:a2:15:84:e9:e0:b0:f9:f4:
                    d8:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:05:26:AA:72:69:CC:52:75:F4:FE:3A:BC:5A:6D:28:2F:0A:AE:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/6d7a1818-b03f-344d-ba6f-d2f48d6d4b7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl

            X509v3 Authority Key Identifier:
                keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.143.132.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:28:d3:50:00:08:f5:ea:0b:a3:d1:69:a9:c4:52:4a:e7:25:
         19:ce:90:66:9d:09:cc:1b:1a:78:a6:9b:fc:c0:5e:df:5b:de:
         bd:55:73:bf:2b:51:8f:2f:ee:b5:d4:fc:f1:cc:01:91:01:95:
         e8:ea:22:54:f7:ce:c7:ee:a0:85:fa:4b:5f:76:7c:ad:6a:24:
         0b:f4:52:f0:96:dd:4c:ab:da:04:ee:13:49:3b:2d:86:dc:49:
         6b:29:75:6f:55:92:cd:e2:69:f9:44:32:c4:81:d8:07:ff:a2:
         21:67:3a:ef:10:3d:1b:2b:f5:44:de:c3:37:f8:43:76:22:a1:
         4b:07:0a:18:7b:ee:01:45:d7:1d:4c:c1:2d:95:e0:99:e4:13:
         44:be:88:29:9d:f0:12:e2:72:08:d5:7a:d1:81:a5:92:58:5c:
         d8:82:a2:e1:4f:be:b0:6c:8b:b7:73:19:43:70:12:68:ab:6e:
         25:b4:72:f0:ec:00:d6:36:29:1c:f6:bc:af:6c:b9:51:8a:17:
         19:e2:ed:1b:b5:32:02:1d:49:32:54:f6:21:5d:1d:f3:5c:3b:
         1f:bc:72:8c:02:d7:43:f2:fa:02:28:7a:dd:07:b2:95:a1:cb:
         7d:81:a0:78:5b:e1:49:06:4f:0e:54:96:8f:32:f2:76:ba:7d:
         95:ff:bc:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:37:17 2026 by rpki-client