Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9df74e6e-da16-4cba-a854-ee087e767113/6ae41674-6179-31e6-b383-75fdb87cda25.roa
File:                     6ae41674-6179-31e6-b383-75fdb87cda25.roa (raw, json)
Hash identifier:          SOFTVdaUnH5FwQHcP+Rp/LnSWQQ930F6MwZktJzUNNM=
Subject key identifier:   C2:7D:36:72:24:D7:FF:A2:C1:E6:8A:96:B1:28:5E:D1:F6:74:6C:0B
Certificate issuer:       /CN=9df74e6e-da16-4cba-a854-ee087e767113
Certificate serial:       010D0C9F4328584CD99CDE312A5711C644AE5080
Authority key identifier: 12:AE:14:72:17:71:FF:0D:97:4F:D5:06:89:53:FE:DA:F0:F1:7D:18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9df74e6e-da16-4cba-a854-ee087e767113.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9df74e6e-da16-4cba-a854-ee087e767113/6ae41674-6179-31e6-b383-75fdb87cda25.roa
Signing time:             Fri 13 Feb 2026 14:00:41 +0000
ROA not before:           Fri 13 Feb 2026 14:00:41 +0000
ROA not after:            Thu 14 May 2026 13:00:41 +0000
asID:                     15318
IP address blocks:        198.168.128.0/19 maxlen: 19
                          198.168.160.0/20 maxlen: 20
                          198.168.176.0/21 maxlen: 21
                          198.168.184.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9df74e6e-da16-4cba-a854-ee087e767113/9df74e6e-da16-4cba-a854-ee087e767113.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9df74e6e-da16-4cba-a854-ee087e767113/9df74e6e-da16-4cba-a854-ee087e767113.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9df74e6e-da16-4cba-a854-ee087e767113.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d9:9c:de:31:2a:57:11:c6:44:ae:50:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9df74e6e-da16-4cba-a854-ee087e767113
        Validity
            Not Before: Feb 13 14:00:41 2026 GMT
            Not After : May 14 13:00:41 2026 GMT
        Subject: CN=77111c3c-801a-4ff5-9199-3a48ffc28072
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:89:34:c2:05:66:21:10:34:17:37:ed:23:d1:
                    86:34:6d:29:98:1d:35:6a:d8:9c:7e:2c:c1:d1:64:
                    c8:71:43:7a:dc:32:08:5c:49:4b:2f:6d:c3:f2:ba:
                    1b:da:e3:49:c5:07:2b:49:7e:ff:38:db:68:44:0f:
                    79:0a:61:c8:6e:bc:0e:b5:b0:59:df:6f:3b:9a:e6:
                    6f:97:0a:ec:fc:12:63:3b:c1:16:2a:e1:18:c0:77:
                    6e:d8:87:1b:4c:5f:f8:41:5a:5d:64:48:82:6b:8b:
                    f0:d1:6c:8c:3f:12:e5:14:95:56:bd:56:e1:8f:18:
                    1e:a4:5a:8b:5c:84:07:19:d9:f1:3a:d1:49:f5:4b:
                    e3:1d:a4:3c:3d:d0:d3:f1:45:6b:43:3a:64:f7:61:
                    31:64:cd:2c:fe:8c:f9:2f:8d:6d:0a:e1:b6:62:4e:
                    8f:1b:52:b8:4a:11:08:5d:3a:72:3c:c1:32:31:29:
                    5e:95:0b:5e:8c:f0:e5:46:df:48:9c:53:ae:73:a7:
                    45:ac:91:7b:36:e5:b4:0e:9f:73:47:3a:f3:a0:b4:
                    ee:0f:da:3c:31:2f:c4:1a:04:51:40:e9:ea:ac:64:
                    28:10:6a:10:6e:0c:ee:04:f0:b2:8d:4e:e6:99:e2:
                    a9:70:93:21:72:a2:cc:8c:20:47:ec:54:b9:e0:3d:
                    8a:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:7D:36:72:24:D7:FF:A2:C1:E6:8A:96:B1:28:5E:D1:F6:74:6C:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9df74e6e-da16-4cba-a854-ee087e767113/6ae41674-6179-31e6-b383-75fdb87cda25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9df74e6e-da16-4cba-a854-ee087e767113/9df74e6e-da16-4cba-a854-ee087e767113.crl

            X509v3 Authority Key Identifier:
                keyid:12:AE:14:72:17:71:FF:0D:97:4F:D5:06:89:53:FE:DA:F0:F1:7D:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9df74e6e-da16-4cba-a854-ee087e767113.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.168.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:45:df:f6:b2:62:e6:14:6a:02:e1:5b:a7:76:78:f2:83:8d:
         49:a7:ed:e8:b4:19:44:69:5e:f0:e7:ab:94:0c:64:bf:0a:56:
         ee:aa:1d:b6:3b:fc:19:95:f1:e6:4d:23:e9:ea:33:0d:f7:79:
         d5:4c:bd:9b:50:8f:db:d5:c2:ca:30:d0:4b:28:ba:b7:75:26:
         d2:e8:05:47:c8:7a:11:c0:aa:65:30:a7:08:5f:5a:7b:33:55:
         6d:15:6b:7a:55:34:34:e2:09:9e:6f:59:c0:c0:a9:75:34:8a:
         fa:2c:d0:eb:34:73:2c:de:64:1b:16:ab:0e:cf:57:67:cd:9f:
         67:4b:d9:90:39:4b:a9:8f:fb:18:ec:7f:13:1d:74:bc:a8:97:
         20:17:06:9e:a8:3d:e9:a3:f4:10:4b:03:07:31:be:0d:8f:b2:
         6b:b0:1d:ca:ce:07:78:a0:fc:4b:ba:f2:4f:01:f5:68:3b:47:
         b5:9b:71:57:e9:cc:fa:fa:b3:c6:67:37:88:d4:bb:75:b8:65:
         25:90:ca:0a:b0:71:a8:5e:a5:39:fa:8c:9a:ea:28:5e:16:da:
         12:e7:62:71:d6:32:a9:4f:a1:81:4e:f8:05:be:84:83:dc:55:
         02:d2:a4:83:44:ad:a4:43:39:4d:49:e1:60:00:46:ca:fb:53:
         b7:b9:1a:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:52:28 2026 by rpki-client