Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/03b1d437-1aba-3d9b-aca0-5696de8ff977.roa
File:                     03b1d437-1aba-3d9b-aca0-5696de8ff977.roa (raw, json)
Hash identifier:          cfz8k5c18BG+Qtu7yDlOj9fjIsjUh33bsX0/mmWr9xU=
Subject key identifier:   CA:5D:DA:BE:3B:F2:F3:73:D8:42:7F:8B:58:E3:3A:EA:59:FF:AF:82
Certificate issuer:       /CN=7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf
Certificate serial:       010D0C9F4328584CF587B1B0BE38DCDDA05E6900
Authority key identifier: 90:25:00:D5:D4:81:50:60:54:00:7C:D6:30:FD:71:A6:4F:93:46:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/03b1d437-1aba-3d9b-aca0-5696de8ff977.roa
Signing time:             Mon 23 Feb 2026 14:00:41 +0000
ROA not before:           Mon 23 Feb 2026 14:00:41 +0000
ROA not after:            Sun 24 May 2026 13:00:41 +0000
asID:                     7018
IP address blocks:        155.254.220.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f5:87:b1:b0:be:38:dc:dd:a0:5e:69:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf
        Validity
            Not Before: Feb 23 14:00:41 2026 GMT
            Not After : May 24 13:00:41 2026 GMT
        Subject: CN=b590d07a-c6d2-4b0a-b2fd-e2acfcd243c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:20:17:f2:ca:95:7f:a2:ac:6c:d3:40:35:f9:
                    80:32:12:6c:aa:f7:4f:be:ee:78:e8:d4:cd:74:40:
                    4c:b6:b8:a7:6f:04:4f:78:f8:a3:0b:78:2d:2f:35:
                    44:23:01:e2:25:2d:12:5b:f4:61:73:cd:1a:e9:1a:
                    bd:01:b7:4f:d1:43:fb:bf:44:48:95:c9:c7:b8:cb:
                    b7:ea:4b:df:02:77:a4:4a:ec:97:04:ce:74:9b:20:
                    c7:84:d5:ba:60:9c:95:9c:e7:02:4d:76:ab:e5:30:
                    cf:3e:00:f4:25:5f:dc:d4:12:98:4e:2b:83:81:94:
                    88:63:b0:da:cd:39:32:5a:ec:18:a8:b0:57:7d:00:
                    1b:68:25:e3:78:ee:97:c6:b5:26:e2:94:28:26:2d:
                    50:96:b1:6d:01:92:f8:72:a0:10:99:5d:a4:62:4c:
                    39:fb:0b:7f:6f:a4:7d:b8:c3:46:c7:67:43:c4:2b:
                    01:bc:75:42:9f:36:4b:8f:a8:ad:1e:78:a0:43:6d:
                    05:04:c3:ca:47:2c:28:b0:51:db:41:5b:08:4b:93:
                    79:49:df:c0:3f:c3:62:f3:b3:83:96:d7:9a:17:dd:
                    7a:02:d1:e7:10:14:3c:8a:e3:8e:96:13:8b:76:d2:
                    08:27:35:99:1c:9f:95:87:46:f2:f0:0f:b7:fc:00:
                    2a:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:5D:DA:BE:3B:F2:F3:73:D8:42:7F:8B:58:E3:3A:EA:59:FF:AF:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/03b1d437-1aba-3d9b-aca0-5696de8ff977.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.crl

            X509v3 Authority Key Identifier:
                keyid:90:25:00:D5:D4:81:50:60:54:00:7C:D6:30:FD:71:A6:4F:93:46:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.254.220.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:bf:95:fd:98:cf:77:05:fe:54:1a:10:07:51:51:34:5b:f8:
         6c:52:10:34:0a:fc:6f:9d:c1:a8:a8:58:1b:34:92:ca:db:f8:
         fb:a8:87:c6:e7:eb:9a:84:88:b2:12:86:12:84:d4:cc:4a:d4:
         62:1b:8b:a9:90:d9:dd:17:46:7a:13:82:73:7c:f4:8d:53:fc:
         f2:ee:de:be:e6:51:3a:d2:d5:e2:7d:f1:10:c3:db:2c:67:d3:
         47:ef:29:aa:14:12:a9:c2:8a:95:d4:94:e2:a6:a5:c1:32:42:
         da:22:98:8c:03:a1:15:70:27:93:1d:d1:95:ea:cb:b0:76:d2:
         a8:f5:55:fc:da:6f:57:04:19:26:96:52:4c:40:3e:c7:66:20:
         4b:34:3e:fa:b9:84:f0:9a:33:14:7b:25:55:2d:39:df:e4:26:
         e3:0c:80:f1:9a:3e:b4:2c:d6:7a:d0:1b:cc:74:82:ff:82:4b:
         8a:a4:dc:cf:85:df:07:d8:68:ac:d1:ef:82:7a:ee:c2:df:be:
         af:c7:73:e7:35:08:b1:d6:c3:cf:34:ab:af:b4:49:d1:ab:be:
         f7:ce:6c:2a:bd:1a:8e:1f:b0:93:a7:35:85:bb:b1:64:3b:84:
         ba:64:9a:8f:a4:b9:3c:49:d6:e9:25:b9:40:b1:63:c5:86:6d:
         b1:da:89:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:33:18 2026 by rpki-client