Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a6a0d9b-43c3-4b62-be66-8371865622a2/d843fcc5-5261-3db3-a028-1da77c2eb33c.roa
File:                     d843fcc5-5261-3db3-a028-1da77c2eb33c.roa (raw, json)
Hash identifier:          ZImdKyG/nr4SM0chBqiqej3KX7HoWGPNHS4A6lCo1eE=
Subject key identifier:   18:06:04:76:94:E8:CF:E4:9A:92:59:B4:57:6A:A2:7A:EF:43:F7:01
Certificate issuer:       /CN=5a6a0d9b-43c3-4b62-be66-8371865622a2
Certificate serial:       010D0C9F4328584CC611FEDE0CBA8D2962EAA2E0
Authority key identifier: 76:0B:4A:3F:E4:1A:8F:F1:22:77:CD:CC:39:1E:0E:7B:5F:AA:F1:A6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a6a0d9b-43c3-4b62-be66-8371865622a2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a6a0d9b-43c3-4b62-be66-8371865622a2/d843fcc5-5261-3db3-a028-1da77c2eb33c.roa
Signing time:             Fri 06 Feb 2026 14:00:40 +0000
ROA not before:           Fri 06 Feb 2026 14:00:40 +0000
ROA not after:            Thu 07 May 2026 13:00:40 +0000
asID:                     46410
IP address blocks:        216.36.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a6a0d9b-43c3-4b62-be66-8371865622a2/5a6a0d9b-43c3-4b62-be66-8371865622a2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a6a0d9b-43c3-4b62-be66-8371865622a2/5a6a0d9b-43c3-4b62-be66-8371865622a2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a6a0d9b-43c3-4b62-be66-8371865622a2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c6:11:fe:de:0c:ba:8d:29:62:ea:a2:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a6a0d9b-43c3-4b62-be66-8371865622a2
        Validity
            Not Before: Feb  6 14:00:40 2026 GMT
            Not After : May  7 13:00:40 2026 GMT
        Subject: CN=66e047f0-4ba0-41ab-98e5-0e20c7e851f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:dc:f4:e8:cd:89:d8:bc:a5:30:c4:87:a3:d0:
                    a9:12:c2:58:5d:29:35:e8:f6:12:5e:0a:3c:98:43:
                    c7:d7:64:52:1b:71:34:1e:96:69:ff:0c:aa:b9:92:
                    07:25:c8:55:e2:cd:37:bb:4a:23:6a:f3:c6:fb:e8:
                    4d:0a:f3:36:6f:db:78:f3:50:9f:47:f6:4d:6d:d4:
                    52:e4:c3:69:1b:47:f4:a0:ce:27:6f:b8:9f:60:b5:
                    11:84:3f:42:92:af:5a:d9:23:6d:ee:d5:6c:59:da:
                    f3:73:0e:a0:33:05:6a:0f:b0:7f:a4:de:fa:92:27:
                    57:b3:4a:b4:3e:14:d9:92:0f:a9:2d:be:fe:26:18:
                    e6:86:93:14:fd:f4:01:b1:bf:ab:b0:4f:b1:cb:04:
                    44:77:44:3f:22:ca:84:45:fc:12:34:f8:55:7b:38:
                    b2:b0:ea:96:f3:76:e5:6a:b1:3d:af:d9:5b:84:6c:
                    53:aa:ba:0d:c9:fe:1a:75:cd:62:10:7a:c1:0c:af:
                    8d:b0:c8:a8:ba:43:57:30:e3:2d:bf:47:cc:f1:df:
                    17:f8:bb:3c:da:46:1b:30:e1:b6:00:54:4a:21:a6:
                    72:a2:ce:a1:d7:a7:1f:18:23:65:49:dc:c5:3f:91:
                    08:48:cb:9f:3b:b8:6f:f1:11:d1:c0:ea:38:b1:b6:
                    77:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:06:04:76:94:E8:CF:E4:9A:92:59:B4:57:6A:A2:7A:EF:43:F7:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a6a0d9b-43c3-4b62-be66-8371865622a2/d843fcc5-5261-3db3-a028-1da77c2eb33c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a6a0d9b-43c3-4b62-be66-8371865622a2/5a6a0d9b-43c3-4b62-be66-8371865622a2.crl

            X509v3 Authority Key Identifier:
                keyid:76:0B:4A:3F:E4:1A:8F:F1:22:77:CD:CC:39:1E:0E:7B:5F:AA:F1:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a6a0d9b-43c3-4b62-be66-8371865622a2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.36.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:5c:fe:27:4f:07:af:0e:c1:90:7b:50:7e:2a:0a:10:3e:2d:
         cd:1b:c8:55:94:73:e3:7c:be:9f:d2:0e:c8:36:a7:74:11:7e:
         02:a2:58:60:d9:8c:3c:c0:d6:99:4e:fc:be:f0:95:e4:9b:f9:
         52:14:7c:53:e3:ce:c9:8f:28:61:ac:11:62:b8:c2:36:a2:93:
         97:41:90:82:98:96:8a:06:8f:c3:79:62:91:fd:68:2d:c6:83:
         9b:74:bd:0a:2e:01:f6:05:26:d8:7d:e6:33:dc:4f:d8:23:f0:
         29:80:c7:be:bd:97:b5:41:d3:44:b3:ae:f3:ca:80:15:38:e8:
         71:80:ac:ad:5d:93:79:d4:45:34:32:fc:7a:b7:40:64:f2:d7:
         f8:9c:bf:df:c3:f4:eb:70:d4:c0:42:2c:c9:cf:79:15:91:36:
         73:07:9d:ff:59:87:d5:0e:8b:22:c2:aa:07:db:14:66:f8:0e:
         a9:0c:5d:f2:a9:ad:ca:dd:ba:2d:3b:77:95:17:e1:8a:48:30:
         ae:bb:03:42:0b:7d:b9:1b:c0:90:04:2e:f2:16:f6:8b:db:06:
         52:43:04:23:2e:32:69:0c:1f:25:55:e1:2a:89:83:16:01:c6:
         97:01:ef:4c:8a:bb:7d:e9:f3:be:d1:57:8e:cd:44:89:bd:7b:
         4b:15:42:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:33:49 2026 by rpki-client