Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/5d6af7c4-5d1c-368a-a24a-d9e607b56c6e.roa
File:                     5d6af7c4-5d1c-368a-a24a-d9e607b56c6e.roa (raw, json)
Hash identifier:          QCArxrei/LvP6+e1JeocXcJjV9uYP+4o5TI+3euZxb0=
Subject key identifier:   1E:F1:B6:86:D6:5B:DA:8B:D8:F0:98:54:0F:99:11:70:48:40:56:7F
Certificate issuer:       /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
Certificate serial:       010D0C9F4328584D037D101289D1FC26EF345680
Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/5d6af7c4-5d1c-368a-a24a-d9e607b56c6e.roa
Signing time:             Sat 28 Feb 2026 14:00:40 +0000
ROA not before:           Sat 28 Feb 2026 14:00:40 +0000
ROA not after:            Fri 29 May 2026 13:00:40 +0000
asID:                     10794
IP address blocks:        171.162.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:03:7d:10:12:89:d1:fc:26:ef:34:56:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
        Validity
            Not Before: Feb 28 14:00:40 2026 GMT
            Not After : May 29 13:00:40 2026 GMT
        Subject: CN=90a8ae34-e0e8-474d-9971-eabd5ea5233d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:88:72:38:98:0c:4e:69:11:d0:90:60:12:32:
                    12:33:dc:ab:a1:f8:87:40:5a:73:ca:21:a0:98:a4:
                    7b:0b:04:76:44:b8:b1:5c:30:8b:19:e8:0f:92:cf:
                    d0:da:02:68:d9:5b:6b:6b:b5:36:80:b4:04:34:ae:
                    83:61:0a:08:aa:ea:c7:eb:e2:01:0a:83:a6:be:c6:
                    64:55:9e:df:97:aa:21:f4:2e:a9:ee:f6:a5:08:d7:
                    0a:80:84:5c:97:72:88:2b:18:7a:40:9f:6c:c6:b8:
                    82:75:26:ee:cb:60:2f:04:b7:e1:f8:d5:88:6d:f8:
                    41:07:74:cf:1a:7e:c0:7a:a0:22:ff:cf:26:f2:97:
                    2b:fe:95:d0:14:9f:b7:63:d1:f2:b0:28:59:9b:42:
                    80:cc:95:b2:28:7d:ea:92:d7:26:74:6a:99:ca:b2:
                    2d:2d:b1:bb:d4:ef:06:24:fb:9b:c9:36:b7:bb:80:
                    23:4d:1b:51:0f:a2:0e:07:70:cd:dd:49:f4:90:88:
                    9d:97:44:6f:1c:4b:cb:0e:c4:b1:d1:df:08:ce:71:
                    5f:a0:8a:ba:7f:8d:3a:43:5d:8c:6f:0a:68:46:d3:
                    af:19:e9:dd:b5:26:99:31:d2:2f:d8:3e:9a:66:cd:
                    67:b2:98:43:95:07:40:56:46:80:1d:81:0d:1d:8a:
                    8c:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:F1:B6:86:D6:5B:DA:8B:D8:F0:98:54:0F:99:11:70:48:40:56:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/5d6af7c4-5d1c-368a-a24a-d9e607b56c6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl

            X509v3 Authority Key Identifier:
                keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  171.162.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:83:e2:d0:1e:96:c8:f3:d1:ae:4b:46:44:2b:3c:6b:1f:15:
         46:32:d7:df:b2:86:a8:99:e0:b5:1c:6c:0c:02:e5:8d:dd:7d:
         de:28:34:74:f8:92:71:a7:2f:e0:10:c0:27:a5:4d:10:15:12:
         2c:7c:31:d8:aa:d0:db:36:16:29:60:d8:9a:33:63:71:ea:36:
         61:6e:14:fc:bd:7b:ab:77:5a:30:3c:e3:1e:86:87:14:57:11:
         34:e4:3e:3c:8c:bd:80:ee:c5:38:c2:04:1b:a3:a8:c5:6c:91:
         ed:f2:e2:1b:74:b0:90:3a:a0:8f:8c:7d:a6:29:68:9e:2d:3c:
         b7:d7:90:28:cb:74:f5:ae:09:e5:c8:82:22:f8:34:29:4f:7b:
         22:26:38:50:3b:ef:10:16:53:c8:b9:9c:ae:9b:d4:bf:a6:25:
         46:56:2f:5c:55:d5:94:31:6f:b5:03:0e:ea:2c:fa:ea:ff:3a:
         0f:fc:4f:df:2e:e8:a4:a8:d1:3f:34:7c:c0:34:e6:25:dd:e6:
         e7:e2:60:8b:c5:6f:8c:51:2a:84:7a:8c:8d:09:09:54:40:86:
         a3:2d:b7:54:ef:f3:a7:e9:e8:09:6d:f6:b4:a1:b0:9d:4a:ae:
         68:42:48:c8:20:e2:47:2b:f4:91:5e:50:25:c8:fc:23:5a:67:
         66:f1:a6:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:06:31 2026 by rpki-client