Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/1cfe3a0a-25f7-385d-a687-a1486ca1ea26.roa
File:                     1cfe3a0a-25f7-385d-a687-a1486ca1ea26.roa (raw, json)
Hash identifier:          t34sAwm1gs7wNSeG0WIy3gj02zMSYfKeITflw8CiGHA=
Subject key identifier:   73:29:A7:9E:18:FB:BA:6A:B6:A4:77:C6:5D:60:B7:C2:9E:44:78:B2
Certificate issuer:       /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial:       010D0C9F4328584CF1577F2995DD33B8DC692440
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/1cfe3a0a-25f7-385d-a687-a1486ca1ea26.roa
Signing time:             Sun 22 Feb 2026 02:00:32 +0000
ROA not before:           Sun 22 Feb 2026 02:00:32 +0000
ROA not after:            Sat 23 May 2026 01:00:32 +0000
asID:                     22652
IP address blocks:        216.113.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f1:57:7f:29:95:dd:33:b8:dc:69:24:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
        Validity
            Not Before: Feb 22 02:00:32 2026 GMT
            Not After : May 23 01:00:32 2026 GMT
        Subject: CN=b44b67db-86b9-49da-b5c9-79f24ece309e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:32:67:96:17:bb:0f:0f:eb:80:69:14:3b:39:
                    99:13:65:e3:3b:7a:8f:97:72:16:7b:06:b2:7c:ac:
                    69:28:c8:1a:44:32:2a:c5:65:28:3a:6c:8c:43:f0:
                    16:a2:5d:e7:fa:63:1e:a2:b1:20:da:52:24:c6:25:
                    6f:92:06:6f:c3:0b:37:92:92:a2:0c:43:1b:23:14:
                    4a:36:d4:8a:05:1d:7f:35:49:f2:09:42:04:a8:9d:
                    ed:17:90:66:76:13:a2:da:33:0b:66:e9:0f:fb:19:
                    ca:61:62:81:f3:0b:26:89:60:ff:bd:00:92:f3:43:
                    a4:c4:e3:9f:9f:ef:21:fd:81:47:68:21:1d:11:90:
                    45:8e:37:83:e1:4e:90:93:9d:1f:7a:ba:18:18:a9:
                    ff:2b:70:25:09:60:ed:11:ae:98:c7:97:8e:c1:ac:
                    5e:00:71:98:e3:1c:f0:6e:c1:77:6e:4d:e0:de:08:
                    8c:f9:f5:f5:58:c3:d6:d3:0a:4e:aa:04:7b:b1:76:
                    7d:e5:04:96:88:98:0b:00:66:29:25:45:16:80:68:
                    33:6f:b7:98:23:45:05:33:bb:48:18:fb:96:4c:bf:
                    fa:d5:1d:58:e3:48:ca:66:99:fe:1c:96:4e:00:78:
                    3d:f2:b6:a5:9a:76:6d:a5:bb:ac:4d:89:e3:9d:21:
                    3a:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:29:A7:9E:18:FB:BA:6A:B6:A4:77:C6:5D:60:B7:C2:9E:44:78:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/1cfe3a0a-25f7-385d-a687-a1486ca1ea26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl

            X509v3 Authority Key Identifier:
                keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.113.45.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:34:be:d0:48:52:7f:77:49:cd:7e:03:e8:56:9d:22:95:8e:
         5f:95:4b:01:f9:77:f0:92:29:6a:34:c1:f1:cc:ca:88:ef:c1:
         fb:aa:a3:57:68:2a:df:fe:b2:a1:d2:7d:13:91:07:b5:d9:58:
         97:f2:6c:97:ca:21:19:38:76:ec:92:83:7a:27:f0:80:96:8d:
         b1:f0:88:6b:b4:08:03:ec:93:f5:ee:2f:cf:92:98:2a:4e:5e:
         dd:b0:3e:65:29:b2:09:fd:2d:76:d9:79:ac:ad:2a:c4:75:eb:
         52:cd:f4:23:89:b6:71:83:51:17:02:72:3e:5a:09:97:07:73:
         21:2c:8f:7d:d1:13:f3:62:47:d1:4d:e5:2c:a9:5f:50:9c:dc:
         af:4f:81:67:34:ce:6e:7e:4a:d6:87:90:6e:f6:5c:33:5e:08:
         19:df:7c:be:10:30:7b:5f:3e:7f:09:85:40:d6:94:a0:f5:ec:
         64:e4:db:1d:e3:83:8a:d6:67:30:5c:64:c6:2b:8e:f8:4d:21:
         6d:48:63:65:b6:38:18:d3:2c:d3:27:f5:cb:27:ec:b1:7e:cd:
         8e:4a:12:75:02:21:cd:f9:9e:da:81:dc:f0:9e:41:1c:39:5a:
         be:54:6a:07:5f:c7:12:fa:03:25:df:3d:02:af:3c:7f:d4:68:
         24:fb:84:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:18:33 2026 by rpki-client