Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/55b8fca5-e7ed-3fe9-bbe9-2dd05e35592e.roa
File:                     55b8fca5-e7ed-3fe9-bbe9-2dd05e35592e.roa (raw, json)
Hash identifier:          RHKEhMSt2Kw8Uq5IpmEjHd6XUsIRxAqxcwuJvV+j/Ho=
Subject key identifier:   BF:8C:E0:54:60:71:C7:44:D5:DE:9C:21:A0:44:DA:57:90:B7:0F:17
Certificate issuer:       /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial:       010D0C9F4328584CF1577D317039B61F333DCE00
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/55b8fca5-e7ed-3fe9-bbe9-2dd05e35592e.roa
Signing time:             Sun 22 Feb 2026 02:00:32 +0000
ROA not before:           Sun 22 Feb 2026 02:00:32 +0000
ROA not after:            Sat 23 May 2026 01:00:32 +0000
asID:                     395075
IP address blocks:        216.113.108.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f1:57:7d:31:70:39:b6:1f:33:3d:ce:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
        Validity
            Not Before: Feb 22 02:00:32 2026 GMT
            Not After : May 23 01:00:32 2026 GMT
        Subject: CN=c7a63428-fa11-4a17-acc6-2a2f99a4f99e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:6a:0d:a8:98:46:59:20:80:40:cb:1c:1c:01:
                    73:32:0e:0d:07:1b:70:33:14:8a:d5:d9:d3:90:ca:
                    9d:59:1b:28:7b:8f:56:33:19:a6:ea:43:9c:cd:21:
                    43:5e:cf:f2:dd:a2:cb:ec:af:2f:ba:96:32:38:43:
                    cf:5b:e2:3f:04:68:d2:a9:49:e9:03:58:67:ba:5f:
                    17:11:2a:77:4b:8f:bc:64:0f:3b:69:8b:3f:b9:17:
                    d7:ed:98:3d:a7:55:e1:3f:c1:26:26:78:4c:24:52:
                    92:7f:4c:9a:c1:76:cb:7d:a0:ba:0e:50:ab:b5:ba:
                    36:a6:e3:60:d4:8b:b2:bc:3e:64:30:ad:21:73:9e:
                    d1:23:e9:15:e6:77:dd:cd:b1:80:d6:f1:c6:3b:a9:
                    f6:88:74:00:94:60:73:b8:c0:e2:e8:62:ae:34:fe:
                    2a:20:1a:0c:fe:d7:ee:e1:e8:3f:08:8d:f4:10:77:
                    f0:47:99:91:0b:9e:e4:4e:4c:ac:0c:f4:72:33:1d:
                    f0:ef:28:27:12:f4:ed:c1:41:f0:06:03:1c:1a:99:
                    d7:22:17:aa:e5:9e:9f:cd:51:f4:36:fd:91:83:41:
                    cb:fa:4a:8b:c7:bb:88:c8:60:26:b3:84:ce:ef:3f:
                    cf:f3:b1:f2:5f:c1:99:f6:3e:25:74:9f:53:02:11:
                    c3:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:8C:E0:54:60:71:C7:44:D5:DE:9C:21:A0:44:DA:57:90:B7:0F:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/55b8fca5-e7ed-3fe9-bbe9-2dd05e35592e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl

            X509v3 Authority Key Identifier:
                keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.113.108.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:d9:71:db:ba:56:a7:b4:c1:c9:6b:59:df:18:59:fe:0d:c1:
         53:b2:69:2b:63:46:2e:82:4c:9c:c4:e8:d3:44:4c:a9:13:94:
         e4:27:fc:ce:63:82:bd:6e:81:dc:ed:32:b4:ac:1d:97:7d:5a:
         d6:1b:ac:21:d9:c9:10:76:0c:26:0c:5c:06:98:e2:5f:a0:d5:
         d1:c7:7d:e8:d2:ec:a6:ee:55:6b:76:e8:ba:67:d3:9e:5d:e2:
         c6:63:dc:51:a6:38:de:f3:66:1b:f3:75:a3:e6:ac:16:03:15:
         9e:38:5f:10:ee:0e:9d:08:1d:21:23:4d:35:ed:83:a5:5a:2d:
         47:1e:c6:96:b6:ee:cc:e0:f6:f8:9b:fa:77:3e:c8:54:64:aa:
         01:d2:20:5b:ba:f8:ad:40:c8:8b:86:52:77:65:3b:c1:78:4e:
         f5:a1:51:29:2e:c2:78:0c:69:34:4d:d5:72:b6:81:28:34:2f:
         b1:3c:40:3e:76:4b:70:39:50:50:d0:5c:30:fe:c6:4f:24:b5:
         fd:c5:38:dd:15:60:60:d4:83:98:8f:38:63:4a:6d:00:8c:96:
         1c:a6:5e:e0:72:47:23:7f:f2:e1:aa:bc:04:13:d6:90:86:2e:
         08:c3:53:36:49:b1:9d:5c:30:cd:db:5b:f5:e9:6e:e1:d8:e3:
         6e:cd:11:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:05:47 2026 by rpki-client