Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/68b2ee6d-95a5-37a2-a504-ebb2e9f66aca.roa
File:                     68b2ee6d-95a5-37a2-a504-ebb2e9f66aca.roa (raw, json)
Hash identifier:          +0xqZwEjnQ3F5haqe1BFsStiq17NJZwXoKf5/PQCEV0=
Subject key identifier:   FC:9F:E8:CF:31:A8:E8:DC:B4:B8:4C:DE:D5:C8:8B:E5:EE:D9:6C:88
Certificate issuer:       /CN=7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf
Certificate serial:       010D0C9F4328584CF8523029FEF8445B62CAF700
Authority key identifier: 90:25:00:D5:D4:81:50:60:54:00:7C:D6:30:FD:71:A6:4F:93:46:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/68b2ee6d-95a5-37a2-a504-ebb2e9f66aca.roa
Signing time:             Tue 24 Feb 2026 14:00:41 +0000
ROA not before:           Tue 24 Feb 2026 14:00:41 +0000
ROA not after:            Mon 25 May 2026 13:00:41 +0000
asID:                     27395
IP address blocks:        162.248.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f8:52:30:29:fe:f8:44:5b:62:ca:f7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf
        Validity
            Not Before: Feb 24 14:00:41 2026 GMT
            Not After : May 25 13:00:41 2026 GMT
        Subject: CN=5b4fccd2-3f44-4c0f-9247-f9e6d2de93bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:8f:fa:d0:0f:19:76:d8:fa:75:f7:5b:06:9f:
                    57:57:a8:ad:0b:6c:41:24:b9:e0:d7:3f:d9:f7:29:
                    93:fb:7e:41:95:b5:f8:fa:00:92:da:b3:c2:74:b5:
                    83:34:ca:81:b5:96:8a:35:49:d2:bc:23:c9:cd:0f:
                    fd:f3:45:aa:c3:4d:71:05:7f:16:5e:30:e7:83:3c:
                    a5:97:98:19:75:f0:c2:54:d7:81:69:30:a5:94:35:
                    df:81:96:25:72:05:dd:a0:05:28:fc:b2:dc:36:2d:
                    5f:8e:7c:af:57:66:3a:81:0e:07:90:ed:a5:e1:3d:
                    4b:41:d0:1d:b2:27:b0:f3:cb:1e:39:af:a9:c1:e4:
                    1a:88:73:f1:56:39:7c:4c:d2:78:76:8e:3d:2d:8c:
                    14:06:f3:ce:9a:fb:c8:7d:eb:c0:a5:71:e5:56:39:
                    e1:33:3b:ae:32:2f:ec:27:ab:71:1d:0e:60:d8:47:
                    8f:72:28:78:94:db:84:38:1c:a7:e7:c9:b7:86:50:
                    38:5b:84:0c:96:6b:d7:ea:9f:60:e6:b7:4a:e2:c8:
                    81:ac:24:ec:56:0f:49:02:5d:68:c7:4b:09:fa:e4:
                    9e:6a:1a:63:e6:ef:b4:f0:d1:a0:db:a0:18:2a:68:
                    15:03:8f:c4:b1:fe:d7:d9:a2:e7:e1:19:04:46:a8:
                    ea:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:9F:E8:CF:31:A8:E8:DC:B4:B8:4C:DE:D5:C8:8B:E5:EE:D9:6C:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/68b2ee6d-95a5-37a2-a504-ebb2e9f66aca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.crl

            X509v3 Authority Key Identifier:
                keyid:90:25:00:D5:D4:81:50:60:54:00:7C:D6:30:FD:71:A6:4F:93:46:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.248.134.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:c2:89:7e:c8:4c:a6:83:b6:17:16:f1:e1:15:cc:83:84:ee:
         a9:a3:a0:a5:b9:38:c9:29:c2:b7:23:da:f5:ba:f8:1a:08:ef:
         95:8c:8c:13:5d:52:79:0f:64:b3:30:bd:e1:61:0e:a0:14:01:
         ee:d5:f6:ad:27:a2:36:35:a9:f6:f6:f4:21:85:fb:f1:53:2d:
         ce:98:58:58:b9:81:50:f1:f7:87:db:2c:9b:df:a2:02:39:dd:
         0e:81:98:f3:2d:6d:e1:84:4b:ca:29:00:b0:2c:e6:52:00:48:
         09:7b:ad:c8:55:17:3e:fe:b5:e5:eb:ea:1b:15:ca:fa:97:b5:
         60:73:98:46:41:af:6f:38:1c:3f:cc:39:08:c5:26:b5:b4:79:
         3a:20:de:91:31:36:78:32:60:79:77:33:32:ed:65:07:fe:0d:
         1c:b3:cc:03:fd:a3:bb:30:5d:28:e7:36:31:05:db:dd:0f:2e:
         fa:1b:7c:c8:55:65:ea:2d:03:3c:50:81:f4:c6:26:9f:2a:96:
         44:2b:97:db:05:69:8f:47:7c:6a:df:b3:1e:18:7a:e3:85:ae:
         bf:40:9d:22:f6:01:d2:9c:99:16:2b:a0:be:e1:2c:c1:68:a6:
         25:c7:b6:b9:bf:82:5d:26:ca:75:dd:50:b2:2a:51:e8:92:3d:
         3f:a7:7d:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:38:26 2026 by rpki-client