Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c2e4eff7-a685-3230-860e-152dafa1b525.roa
File:                     c2e4eff7-a685-3230-860e-152dafa1b525.roa (raw, json)
Hash identifier:          yg9INZpLD0F4qa9XZB+1Nj2hZIF4deDRZLmTmnLPrso=
Subject key identifier:   C8:2C:B1:B7:B5:10:C3:C6:8A:7A:03:07:BC:BB:28:7F:E2:E0:BC:4F
Certificate issuer:       /CN=c0094aab-7ad1-4889-853f-ce946552206b
Certificate serial:       010D0C9F4328584CEA5CF1EA07BCA9F3EDC4FBC0
Authority key identifier: 8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c2e4eff7-a685-3230-860e-152dafa1b525.roa
Signing time:             Thu 19 Feb 2026 14:00:40 +0000
ROA not before:           Thu 19 Feb 2026 14:00:40 +0000
ROA not after:            Wed 20 May 2026 13:00:40 +0000
asID:                     109
IP address blocks:        128.107.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ea:5c:f1:ea:07:bc:a9:f3:ed:c4:fb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0094aab-7ad1-4889-853f-ce946552206b
        Validity
            Not Before: Feb 19 14:00:40 2026 GMT
            Not After : May 20 13:00:40 2026 GMT
        Subject: CN=5382efa8-50d6-45b1-96b4-273a811a3b4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:09:e3:15:d9:9b:00:e5:68:65:51:e5:c7:e2:
                    0a:56:c1:a4:1b:77:70:da:6c:b4:0c:31:ae:1e:d3:
                    8e:3e:f4:8a:b9:72:fb:b7:74:86:8b:da:69:4d:86:
                    49:74:40:82:c1:58:bf:ae:b2:b2:48:d5:5a:da:bf:
                    31:54:78:0c:a7:54:2c:18:1f:01:5c:68:7e:57:9c:
                    16:2c:e8:2c:a4:7a:11:da:aa:c2:90:25:81:68:01:
                    6e:b9:32:a0:af:d9:f8:2c:d1:8b:c0:b9:d2:af:d3:
                    53:ee:79:6e:80:15:d0:3e:ee:39:0b:85:a2:bc:1c:
                    c6:1e:8d:84:bf:12:c9:b3:19:28:0a:23:3c:3b:79:
                    00:28:1a:2a:7b:73:bc:d4:0f:c9:72:6e:ad:03:5e:
                    df:58:f2:89:a7:92:04:b2:ec:25:b1:ce:de:11:2f:
                    e1:db:3c:c1:86:57:74:db:ae:5c:a4:62:33:ea:2e:
                    f9:53:c4:90:d3:7a:69:61:5e:f8:de:97:f5:c9:b9:
                    d5:6a:dd:ca:20:de:eb:2e:16:e7:41:06:c8:71:f9:
                    de:d4:72:54:99:90:b5:ed:f3:3e:b4:14:43:62:a4:
                    17:e2:82:e9:3b:a4:8c:c6:52:52:96:ca:f3:a3:e5:
                    9d:6d:f9:e5:be:d3:0c:20:09:97:0b:39:d3:40:d6:
                    19:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:2C:B1:B7:B5:10:C3:C6:8A:7A:03:07:BC:BB:28:7F:E2:E0:BC:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c2e4eff7-a685-3230-860e-152dafa1b525.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl

            X509v3 Authority Key Identifier:
                keyid:8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.107.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:8d:9b:a6:ad:e6:01:f6:b2:b5:44:e0:fa:e0:57:26:e9:85:
         dd:e9:da:a6:b8:67:11:85:8b:6c:4a:8b:23:63:d7:fe:c5:5e:
         0d:5d:7e:5f:eb:b0:e0:b1:f6:41:ee:c4:54:29:ff:68:b0:72:
         d8:6a:d7:46:c4:eb:d8:46:32:b6:dc:8d:36:c2:68:ca:df:47:
         01:54:33:63:06:a2:11:a5:e1:b1:a9:ac:28:b8:b5:f4:e6:c2:
         bb:e3:e4:5f:3c:48:ab:81:8d:f1:33:15:a2:fa:a8:f9:f5:b8:
         f9:7b:a6:9b:15:66:9f:3c:fb:2c:eb:16:72:55:a5:61:e9:7e:
         ae:47:c0:f3:2a:dc:fd:ce:3e:62:07:52:f7:d3:60:8f:49:7c:
         87:41:2c:d2:12:72:39:e2:22:25:11:b8:e8:49:b5:dd:66:2b:
         6d:30:87:59:05:f7:b4:da:aa:a5:77:d8:2d:74:16:61:73:29:
         be:61:00:5c:51:28:29:ff:8a:32:23:e4:f1:d0:19:88:18:f5:
         78:1b:c3:70:e7:bb:0b:04:b7:99:46:03:70:14:1f:86:4b:27:
         55:7e:10:4c:70:78:6d:0b:6c:ae:8d:be:89:63:09:22:22:c4:
         3d:ca:e3:ee:f3:56:c3:db:62:8e:f1:d7:6e:dc:c7:62:8f:9b:
         44:8a:cc:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:45:02 2026 by rpki-client