Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/4bf76b6d-5970-3d19-8ade-5717d3645acf.roa
File:                     4bf76b6d-5970-3d19-8ade-5717d3645acf.roa (raw, json)
Hash identifier:          MQaKY0QTp2mhKdk3Z4hNk0B4mCOcKr7QqJUAhax+eQY=
Subject key identifier:   7D:84:C4:EE:45:0D:05:40:E6:A3:9D:CE:91:D2:CE:71:5B:A5:F7:86
Certificate issuer:       /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial:       010D0C9F4328584CD99CE930D2DE72D623291200
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/4bf76b6d-5970-3d19-8ade-5717d3645acf.roa
Signing time:             Fri 13 Feb 2026 14:00:41 +0000
ROA not before:           Fri 13 Feb 2026 14:00:41 +0000
ROA not after:            Thu 14 May 2026 13:00:41 +0000
asID:                     11232
IP address blocks:        209.169.218.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d9:9c:e9:30:d2:de:72:d6:23:29:12:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
        Validity
            Not Before: Feb 13 14:00:41 2026 GMT
            Not After : May 14 13:00:41 2026 GMT
        Subject: CN=f108dfb3-a575-4473-be6a-0f8d687dd3df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:2b:51:4f:30:69:ac:ec:5f:fc:c7:95:65:ed:
                    e7:25:b1:73:f9:ed:b7:8f:f5:25:90:5c:64:d9:87:
                    66:e5:f3:d6:f5:9d:b9:c3:d2:55:6b:71:08:eb:dd:
                    1a:b7:b8:14:b0:1d:31:3a:f7:5e:3c:bd:53:1b:12:
                    28:97:05:30:53:cd:6d:86:34:b0:2a:46:6d:38:e2:
                    87:c0:b1:f5:aa:80:a4:8f:93:93:e1:9f:a6:07:3d:
                    a5:a7:85:3d:94:19:59:fe:67:8d:59:8a:47:d5:a7:
                    24:ff:27:5d:6b:d8:3c:aa:6c:63:23:34:fd:60:5d:
                    ee:d6:c4:a8:18:b0:17:2d:d5:3a:34:91:9e:36:fc:
                    9d:2d:80:1b:eb:f2:11:f5:6d:15:1a:cc:60:14:80:
                    5d:b9:9c:1c:d0:a2:c8:01:b6:00:9e:45:de:9b:8c:
                    2d:6e:98:42:9c:85:67:47:c1:e6:f6:ec:d1:cc:bd:
                    ab:c9:50:fb:4a:55:2c:d8:08:2f:01:ec:3e:b0:c2:
                    f8:23:cb:b6:d4:f3:81:ff:d4:73:db:03:53:60:89:
                    00:51:4b:67:6d:ac:8c:7f:3a:ce:b3:7b:05:13:0f:
                    e8:c9:b3:64:ce:0e:bf:7c:51:85:fb:d6:77:21:7c:
                    d3:59:0d:a6:8c:b0:a3:2e:c2:7d:64:d4:b6:ac:88:
                    5d:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:84:C4:EE:45:0D:05:40:E6:A3:9D:CE:91:D2:CE:71:5B:A5:F7:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/4bf76b6d-5970-3d19-8ade-5717d3645acf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl

            X509v3 Authority Key Identifier:
                keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.169.218.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:ac:7e:d5:34:08:23:73:22:73:36:f8:e4:b4:7a:8d:68:68:
         a3:c6:d1:fc:64:90:01:5a:b1:31:6a:f7:50:a9:c9:ab:35:c1:
         a1:1f:c3:02:dc:45:a0:5c:fb:ac:94:11:ca:02:fc:e5:35:ef:
         0a:6d:31:74:61:ad:d9:17:4d:53:75:85:f0:1a:22:08:68:c4:
         3c:74:5e:ad:81:5e:e6:e5:82:3e:11:ea:3c:89:90:51:4a:27:
         ce:3f:6d:c8:99:ca:d6:9e:39:7a:48:d1:91:d8:c5:c1:e9:a8:
         d8:ce:13:5b:93:1f:89:78:0b:3d:16:f3:1c:7b:20:1c:7e:34:
         25:bf:d7:aa:a0:e0:d7:a3:a9:03:8f:31:b1:81:36:66:29:a8:
         8a:0a:93:1f:1f:a7:1c:da:9d:8a:da:be:b1:80:a9:7d:e0:5e:
         5b:8b:37:1f:88:21:c0:36:74:bc:0e:28:6d:d2:a3:a6:14:2e:
         ab:58:32:ee:65:00:83:de:7f:ef:a0:28:a1:5e:94:7e:03:ef:
         9e:b7:22:35:62:7d:00:88:db:59:3c:cf:32:36:d9:41:2f:07:
         52:4f:92:c3:f7:3c:03:5c:73:d7:89:5f:b1:9a:bf:bc:d3:f8:
         14:48:1e:51:e9:06:5d:4c:cb:92:61:34:37:b5:6d:dc:e8:f1:
         c7:ac:41:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:54:55 2026 by rpki-client