Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/a53ffea0-ec32-3128-9644-d66089a87ae4.roa
File:                     a53ffea0-ec32-3128-9644-d66089a87ae4.roa (raw, json)
Hash identifier:          LihoJpQa25dYLRVjQe6LQ8m82dwMmUTHg9gRp0MxiPk=
Subject key identifier:   63:9C:F6:0C:A4:18:6C:41:FF:31:58:35:16:A1:4E:0D:E0:4E:83:B1
Certificate issuer:       /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial:       010D0C9F4328584CD99CEA93E283DF623F8CD900
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/a53ffea0-ec32-3128-9644-d66089a87ae4.roa
Signing time:             Fri 13 Feb 2026 14:00:41 +0000
ROA not before:           Fri 13 Feb 2026 14:00:41 +0000
ROA not after:            Thu 14 May 2026 13:00:41 +0000
asID:                     11232
IP address blocks:        96.2.0.0/15 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d9:9c:ea:93:e2:83:df:62:3f:8c:d9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
        Validity
            Not Before: Feb 13 14:00:41 2026 GMT
            Not After : May 14 13:00:41 2026 GMT
        Subject: CN=8ab0a1be-7b5d-407b-b2b8-b406b5e1d2dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:c5:41:09:94:43:5d:b2:de:d7:a8:e1:c7:9d:
                    2f:d5:35:73:f8:53:76:2d:86:df:55:9f:35:70:b1:
                    79:df:fc:34:e5:34:9f:05:7c:1e:74:c9:2d:97:75:
                    33:c9:cc:c5:6b:5b:9b:43:6a:b9:f9:8c:eb:6b:1d:
                    59:d2:9f:a9:8a:0a:13:23:07:38:cb:86:ea:6a:f6:
                    a7:cb:18:d0:9d:61:a7:43:a7:26:50:22:47:f9:60:
                    4a:2e:a9:c1:b5:02:14:09:dc:f5:dc:83:b0:eb:69:
                    a5:10:c5:4c:7c:51:35:4a:65:51:d7:19:1d:bb:23:
                    54:54:2d:b1:bc:1a:c6:a5:99:17:a4:5b:d8:d4:b2:
                    b7:e6:d4:bc:8f:dd:ee:0e:14:48:54:34:c8:67:79:
                    5b:6b:e5:ee:e5:03:ad:19:b8:f9:3d:9e:2d:db:ae:
                    47:a7:f6:53:42:13:5d:b5:7f:16:7a:a5:e6:a7:51:
                    30:72:a9:f3:cc:24:30:aa:72:81:f4:3e:af:ee:f0:
                    84:43:b7:98:3b:be:fc:5b:30:b7:47:e5:07:84:67:
                    5e:1a:91:ae:b8:65:71:4a:2c:8b:d4:24:a9:77:52:
                    9a:bb:4b:80:a4:7c:62:ff:4e:1b:c7:bc:20:90:69:
                    8b:28:82:d0:55:be:d6:6c:2a:57:c5:e5:68:4a:41:
                    1e:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:9C:F6:0C:A4:18:6C:41:FF:31:58:35:16:A1:4E:0D:E0:4E:83:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/a53ffea0-ec32-3128-9644-d66089a87ae4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl

            X509v3 Authority Key Identifier:
                keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.2.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:4f:2c:4f:e7:42:be:4f:4f:f2:2d:d1:35:18:65:03:60:73:
         50:5b:4b:83:f9:84:cb:9b:f7:f4:6e:ea:b3:b8:10:68:a0:c4:
         13:2e:58:18:67:ce:ce:d4:14:51:4a:aa:77:2e:bb:58:75:9e:
         a2:3b:0e:2b:88:6b:c6:7f:05:a4:4f:fa:45:68:62:4c:fe:b9:
         a3:f5:38:9b:98:3e:ca:eb:71:32:4f:25:4c:19:96:aa:7b:93:
         c3:7b:85:ad:19:51:59:d3:b9:8c:60:8b:f6:8a:e3:1f:23:cb:
         ec:e7:b7:ba:ea:02:24:60:dc:d4:6b:42:b9:0b:ef:13:8b:2f:
         a1:3c:1f:1d:d9:e3:f3:96:3a:88:35:78:82:5e:2a:0c:81:e5:
         82:31:a6:56:b1:a6:b6:90:d3:64:ab:07:df:59:5b:7d:60:43:
         9c:08:e4:53:bc:25:d0:69:61:89:91:8f:27:85:4c:c2:ec:c7:
         ec:6e:49:dc:08:df:93:bd:7f:d8:5d:ff:2c:20:b0:ab:ef:72:
         30:ca:de:f3:9d:a0:04:7d:cf:df:12:b9:6c:9b:ec:b0:68:52:
         53:5b:db:14:f3:1f:e1:30:cb:0f:7f:c2:d8:59:f9:89:35:d1:
         95:af:78:73:a7:a7:e1:8e:1e:68:ea:b4:cd:ff:b5:2b:a3:67:
         a0:0f:f4:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:44:21 2026 by rpki-client