Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/057ecdf7-55d6-3659-a4a3-5c1ca310cf6e.roa
File:                     057ecdf7-55d6-3659-a4a3-5c1ca310cf6e.roa (raw, json)
Hash identifier:          UD/dqDKsfpjsp0kGRtSOEbLnuVHjVKjyXQc6UJ6gmug=
Subject key identifier:   C2:D2:6B:BA:0C:D8:9C:23:38:C3:C6:54:61:30:1E:AD:E8:F7:5C:67
Certificate issuer:       /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial:       010D0C9F4328584CF1577355FBC27E7D535D2580
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/057ecdf7-55d6-3659-a4a3-5c1ca310cf6e.roa
Signing time:             Sun 22 Feb 2026 02:00:32 +0000
ROA not before:           Sun 22 Feb 2026 02:00:32 +0000
ROA not after:            Sat 23 May 2026 01:00:32 +0000
asID:                     5769
IP address blocks:        216.113.120.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f1:57:73:55:fb:c2:7e:7d:53:5d:25:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
        Validity
            Not Before: Feb 22 02:00:32 2026 GMT
            Not After : May 23 01:00:32 2026 GMT
        Subject: CN=b5582867-3f1d-4da7-940b-8ef9929f8498
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:44:a9:e8:45:4d:a4:d0:76:fc:24:a7:64:8b:
                    3d:7f:24:2b:fb:ac:cb:90:c4:5b:d2:88:9b:b5:24:
                    67:b0:1a:a4:79:a7:a6:5b:74:46:ac:2f:61:5c:7b:
                    92:5f:d6:0f:df:95:11:72:7c:1f:21:f7:f7:21:96:
                    e3:27:50:3a:4a:52:02:da:63:e7:93:63:c2:9a:0a:
                    c9:8a:a7:2a:5f:16:50:71:de:3a:9c:94:1d:00:44:
                    77:84:25:6c:d4:80:d0:b3:fb:4e:fa:b3:54:ef:8a:
                    23:76:e8:0e:b6:69:2c:2d:75:ea:31:7a:bc:57:36:
                    28:30:e5:93:33:ec:ee:96:ce:88:4a:7a:00:1a:78:
                    8b:fe:60:3c:4d:6c:ed:ee:3f:45:f3:b6:78:1f:11:
                    71:5b:93:8b:e2:e3:4a:32:f5:f6:27:9e:6e:8b:6a:
                    b2:bb:f6:e4:14:19:05:04:3d:86:88:6d:eb:f3:bc:
                    34:6d:0e:c2:51:c2:89:63:01:1e:17:41:df:88:bb:
                    55:46:a7:23:b1:3a:1f:e2:a6:56:f2:63:6f:42:36:
                    2e:0f:b8:f4:92:85:42:0e:6b:b7:97:10:88:3c:19:
                    d9:3e:a2:c5:cf:0f:f1:b8:95:8d:2a:e6:65:96:8e:
                    25:05:35:16:83:71:52:2d:9b:9f:99:90:e1:a8:49:
                    ba:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:D2:6B:BA:0C:D8:9C:23:38:C3:C6:54:61:30:1E:AD:E8:F7:5C:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/057ecdf7-55d6-3659-a4a3-5c1ca310cf6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl

            X509v3 Authority Key Identifier:
                keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.113.120.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:fd:e8:27:be:42:09:fa:fe:78:92:b8:57:6f:7f:ae:0c:09:
         23:0e:13:d8:e3:01:38:2b:15:fe:64:d6:c7:4f:48:e5:2d:3f:
         5d:ee:dd:29:04:6f:a8:86:e2:50:56:75:ec:15:ef:0b:67:2a:
         dc:58:24:e9:f5:f5:23:cf:69:83:bd:36:b7:51:19:f3:fc:7e:
         dc:18:9e:4d:e7:80:38:dc:e8:d6:93:7e:35:85:cd:c5:67:0f:
         85:4c:82:9d:c2:3f:e2:6d:4b:21:25:a0:b5:91:ea:8f:3d:8f:
         4b:fe:78:33:6c:3c:ce:1b:56:6b:ad:87:3e:05:b1:20:49:74:
         e6:f8:c8:37:7d:12:1d:ce:13:04:32:57:37:a5:65:99:7c:43:
         85:fc:c3:b1:bf:2a:f0:bb:91:39:2d:1d:7e:5f:69:12:9b:9b:
         f1:1e:36:64:51:2a:f3:95:09:3a:19:ef:55:02:2f:ff:93:2f:
         23:39:da:01:5d:59:7c:65:00:85:46:1e:5c:e5:68:28:b3:54:
         3c:88:39:e5:d6:94:35:61:87:3e:bd:09:a6:05:60:6f:88:76:
         5e:82:b6:75:20:53:bf:ff:45:7b:2f:2a:57:c0:34:1d:61:68:
         82:8c:f8:20:85:2b:86:86:5b:9a:dc:bf:7e:3d:c8:55:67:0a:
         82:5f:36:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:08:25 2026 by rpki-client