Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/43d529a5-06fc-3596-b306-3805ee39efec.roa
File:                     43d529a5-06fc-3596-b306-3805ee39efec.roa (raw, json)
Hash identifier:          ARJztf/S4ldBC1vjX6E1/UwGv6xT697RsxU58TWdcwU=
Subject key identifier:   1B:35:A3:F9:6F:DF:FA:81:8C:D5:A3:8C:8F:E8:DA:DC:AD:44:93:9C
Certificate issuer:       /CN=85be797f-f426-4ba8-98b0-1c2b5f752753
Certificate serial:       010D0C9F4328584CEA5CD76666A90814169A9600
Authority key identifier: 49:B1:C9:49:07:A5:46:4D:23:DA:5C:68:99:40:F9:73:99:9E:30:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/43d529a5-06fc-3596-b306-3805ee39efec.roa
Signing time:             Thu 19 Feb 2026 14:00:40 +0000
ROA not before:           Thu 19 Feb 2026 14:00:40 +0000
ROA not after:            Wed 20 May 2026 13:00:40 +0000
asID:                     7029
IP address blocks:        134.195.156.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/85be797f-f426-4ba8-98b0-1c2b5f752753.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/85be797f-f426-4ba8-98b0-1c2b5f752753.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ea:5c:d7:66:66:a9:08:14:16:9a:96:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85be797f-f426-4ba8-98b0-1c2b5f752753
        Validity
            Not Before: Feb 19 14:00:40 2026 GMT
            Not After : May 20 13:00:40 2026 GMT
        Subject: CN=6080761d-1361-4664-b263-b5ef66a220e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:15:88:dd:ee:8f:11:53:9e:ef:5a:7b:47:6f:
                    1b:5a:f5:1b:ed:88:80:f4:89:d3:fc:c3:d2:a2:85:
                    66:cc:4b:6e:02:ca:ad:a4:b0:bd:cf:3b:8b:96:7e:
                    fb:37:e7:b1:7d:23:be:8a:fd:2c:64:a7:0b:3f:65:
                    1d:4d:ba:71:1e:a4:69:86:89:11:44:06:ab:00:bf:
                    88:0f:ce:f5:34:5a:9b:66:17:bd:75:62:8a:6c:dd:
                    3c:52:f5:77:39:79:8d:ca:3b:6d:f9:7d:20:1b:b8:
                    f9:4c:66:ed:85:19:87:ce:96:6a:6c:a9:7b:89:61:
                    0c:2f:78:43:a9:8d:65:97:75:db:49:3b:4f:fd:2e:
                    43:f6:6e:8b:63:bd:03:fd:49:cd:48:3a:46:fc:8c:
                    ab:21:b9:8b:3d:ff:4d:69:2d:31:05:a0:aa:7f:4f:
                    27:f3:22:ad:03:42:a4:ad:0b:ca:b4:1f:3f:57:e2:
                    84:6d:3a:de:29:80:70:0d:5e:42:51:dc:c6:01:28:
                    5f:16:24:47:ff:76:13:36:36:c6:09:3f:43:dc:57:
                    01:82:f9:c7:88:c4:eb:ef:75:d7:3a:a1:56:2c:56:
                    2f:eb:e5:a6:b7:83:df:13:bd:41:53:b5:89:22:fd:
                    35:14:51:c0:88:a1:2c:36:34:de:97:a9:40:0b:95:
                    17:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:35:A3:F9:6F:DF:FA:81:8C:D5:A3:8C:8F:E8:DA:DC:AD:44:93:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/43d529a5-06fc-3596-b306-3805ee39efec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/85be797f-f426-4ba8-98b0-1c2b5f752753.crl

            X509v3 Authority Key Identifier:
                keyid:49:B1:C9:49:07:A5:46:4D:23:DA:5C:68:99:40:F9:73:99:9E:30:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.195.156.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:2e:45:95:be:73:be:31:b1:69:0b:77:7a:84:8d:34:2a:30:
         93:1f:1b:6c:ff:d0:28:29:8a:34:8a:80:7a:c7:f7:db:b8:fc:
         0d:ee:f8:84:d9:8a:36:4e:53:5f:a1:d7:7b:49:38:b9:40:6f:
         55:42:77:f8:0a:61:7e:21:f1:a6:85:9e:81:4f:15:bf:86:82:
         20:62:59:b4:39:fa:13:a5:d7:c6:17:10:27:9e:64:7a:74:9a:
         3e:71:83:08:96:fd:d8:94:a0:b6:78:8b:b9:d6:28:55:82:83:
         21:73:86:38:fb:57:7e:93:6f:00:79:a7:51:66:f1:ec:b0:f1:
         15:55:72:18:f8:24:e7:4f:46:19:fa:3d:10:e6:84:6f:7b:20:
         b3:e7:e3:24:75:55:bb:99:4d:2e:73:d6:7b:12:8c:62:45:1f:
         bc:ef:3e:15:da:7b:b9:92:ac:b6:c6:35:8f:a6:b3:56:ba:e3:
         da:50:d1:ce:84:34:56:43:1b:7f:67:f4:c5:4c:7a:cc:7f:56:
         a3:35:c9:48:ba:5b:d8:5d:f6:32:a2:a5:c8:99:02:ac:4d:cc:
         43:46:1b:fc:7b:c8:3d:b8:bb:b6:7b:c5:5a:4b:15:b0:5d:db:
         03:2d:08:82:12:d5:d2:db:46:c8:dd:23:fe:b4:af:9d:68:eb:
         3b:b6:52:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:30:14 2026 by rpki-client