Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/5d7ba423-e931-3576-a682-7ef77298c323.roa
File:                     5d7ba423-e931-3576-a682-7ef77298c323.roa (raw, json)
Hash identifier:          DHzb48HXpslDYTzxInLbRHBqV1jlv1se8ljf2YUoz0k=
Subject key identifier:   95:EB:32:21:4E:40:91:C7:31:EE:DF:F2:77:C6:5F:FA:7B:23:82:F4
Certificate issuer:       /CN=e3604708-3e0f-4ea6-b151-4d2f7408d326
Certificate serial:       010D0C9F4328584CDB021286C68DF4787192B380
Authority key identifier: E4:B9:55:5F:75:21:90:9A:18:32:0D:38:54:E4:21:BA:27:60:E9:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/5d7ba423-e931-3576-a682-7ef77298c323.roa
Signing time:             Sat 14 Feb 2026 02:00:32 +0000
ROA not before:           Sat 14 Feb 2026 02:00:32 +0000
ROA not after:            Fri 15 May 2026 01:00:32 +0000
asID:                     40788
IP address blocks:        192.64.8.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/e3604708-3e0f-4ea6-b151-4d2f7408d326.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/e3604708-3e0f-4ea6-b151-4d2f7408d326.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:db:02:12:86:c6:8d:f4:78:71:92:b3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3604708-3e0f-4ea6-b151-4d2f7408d326
        Validity
            Not Before: Feb 14 02:00:32 2026 GMT
            Not After : May 15 01:00:32 2026 GMT
        Subject: CN=a475ea5a-7c04-4530-8975-947a482d7037
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:6f:ee:5f:b1:11:aa:33:f8:f1:2c:a8:d0:28:
                    4e:a0:ca:5f:eb:5d:d5:d6:d7:fc:c2:30:63:c7:d9:
                    bf:4a:19:88:5f:94:0d:cc:87:f5:b9:f0:67:42:ef:
                    ad:7b:2d:03:e8:fe:b4:ad:3d:59:30:87:57:7e:a4:
                    75:49:f8:66:33:34:ea:24:80:8e:dd:eb:57:1f:29:
                    60:1d:30:10:26:c5:1d:da:23:ce:9f:fa:3d:b0:82:
                    d9:a8:0f:14:bb:b9:4b:51:e6:e6:24:3f:4f:e0:2d:
                    99:0a:d5:d3:a3:0e:3f:2e:99:11:21:39:66:29:cc:
                    56:01:06:b7:83:d4:58:d6:0e:32:c7:7b:c4:22:7c:
                    3e:45:8f:7b:71:bb:46:bd:fd:5e:f6:0a:c3:90:15:
                    43:85:3f:e1:08:da:b8:6e:fe:fc:e5:fd:07:74:4d:
                    12:fe:55:45:21:6f:7c:70:40:fc:ec:ce:16:0e:84:
                    92:f4:51:44:02:5b:9a:ed:1f:29:2d:89:63:14:9d:
                    45:64:5d:fe:2d:42:f3:7b:a6:93:66:71:f5:48:a2:
                    2f:eb:72:92:a5:8c:94:16:46:95:1b:52:9e:b7:0c:
                    8b:dc:5b:14:69:71:e9:a3:1c:f8:e6:dc:b5:17:2c:
                    e4:f3:72:41:ac:07:38:72:de:d9:98:63:9c:97:92:
                    a7:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:EB:32:21:4E:40:91:C7:31:EE:DF:F2:77:C6:5F:FA:7B:23:82:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/5d7ba423-e931-3576-a682-7ef77298c323.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/e3604708-3e0f-4ea6-b151-4d2f7408d326.crl

            X509v3 Authority Key Identifier:
                keyid:E4:B9:55:5F:75:21:90:9A:18:32:0D:38:54:E4:21:BA:27:60:E9:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.64.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:19:a1:86:18:05:f3:85:ea:9b:ec:cf:75:95:e2:57:fe:c0:
         1c:38:f2:a8:18:6a:d7:a8:f3:c8:31:5a:9c:ab:a5:63:ff:32:
         da:84:81:26:22:94:e3:6f:73:dc:1c:6f:96:38:b4:c5:2f:9f:
         ec:8c:7e:bf:7d:f5:e1:fe:76:c5:01:c1:6b:a8:41:71:11:db:
         ed:6d:df:65:05:45:7a:6c:bb:26:41:d7:79:84:58:48:4e:dc:
         5c:ba:21:71:e1:dc:c5:e6:ef:30:ba:65:1b:28:4d:64:1c:66:
         1f:82:b6:5e:3e:dc:3d:76:62:a6:54:a1:8e:dd:f5:7b:f8:e9:
         18:ca:21:f7:15:87:dc:0b:d5:ba:f6:2d:85:5d:ea:1f:33:fb:
         29:d9:44:86:4f:67:26:c5:6c:22:ae:fd:bc:62:9c:92:b5:a7:
         d5:c9:db:b7:ee:04:1d:de:63:1f:77:e3:3e:65:cf:7a:97:37:
         e2:8c:95:64:03:91:53:34:3e:0c:a2:e6:87:1b:ee:ff:39:ca:
         0d:f5:73:86:c0:0a:7f:42:df:5a:fe:fc:5a:1c:f9:1b:ae:70:
         11:17:d5:7e:08:99:89:51:69:f2:93:87:1a:b7:36:68:7c:ce:
         a1:2f:dd:14:3d:f0:e2:f3:ae:41:dd:05:00:c4:e3:3b:df:8d:
         36:94:f0:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:48:26 2026 by rpki-client