Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/98f7cc3d-6f8e-3a06-a19f-a0c03640bb01.roa
File:                     98f7cc3d-6f8e-3a06-a19f-a0c03640bb01.roa (raw, json)
Hash identifier:          B06bF0XpLVqIqSWbMEj8xA+JQjKFQVepVy/8E8HiQNM=
Subject key identifier:   62:5A:A8:C9:CB:FE:43:D2:7E:3A:06:61:78:BD:A0:45:95:36:23:F5
Certificate issuer:       /CN=7b143713-7923-4e4d-9476-b8e5ce1ca9c9
Certificate serial:       010D0C9F4328584D037D1A5478D390298D693440
Authority key identifier: 61:D5:32:E9:6D:BB:CA:2E:A4:34:67:90:E5:3E:1C:8C:AF:B2:D9:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/98f7cc3d-6f8e-3a06-a19f-a0c03640bb01.roa
Signing time:             Sat 28 Feb 2026 14:00:40 +0000
ROA not before:           Sat 28 Feb 2026 14:00:40 +0000
ROA not after:            Fri 29 May 2026 13:00:40 +0000
asID:                     14555
IP address blocks:        170.10.168.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:03:7d:1a:54:78:d3:90:29:8d:69:34:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b143713-7923-4e4d-9476-b8e5ce1ca9c9
        Validity
            Not Before: Feb 28 14:00:40 2026 GMT
            Not After : May 29 13:00:40 2026 GMT
        Subject: CN=92cae146-cc16-4858-8cb4-c5b0276e4efd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:46:8d:73:11:f7:5b:c8:ed:82:91:84:9e:4e:
                    b6:b0:53:98:3e:d1:6a:d0:34:7b:6b:1b:82:23:5a:
                    c3:28:af:27:cd:60:37:b6:d4:fc:0b:b5:5b:fc:ac:
                    a6:cb:8a:60:bc:20:f3:d3:e6:b5:c0:75:3e:01:2a:
                    1a:34:4e:09:99:e2:63:6a:68:a3:72:e5:21:66:51:
                    dc:2b:4f:a0:e7:ce:bc:71:c8:f9:b8:90:3c:dd:c7:
                    d7:19:7d:09:f1:3d:37:15:aa:e1:93:fd:3b:71:4c:
                    99:c5:9b:c5:9e:1f:a3:91:1d:eb:d9:81:37:f7:49:
                    e2:17:63:28:19:92:58:f8:5c:b0:41:f1:3a:44:87:
                    3c:45:2e:d0:74:d7:65:6f:9a:38:91:b9:e1:b6:8d:
                    22:e5:f7:c4:05:71:58:72:56:bc:33:57:64:12:08:
                    47:dd:20:44:90:4c:72:05:99:ae:2a:bc:31:c8:5b:
                    b4:5c:cb:1c:d3:bd:b6:19:28:1b:aa:8f:d7:02:86:
                    0e:96:82:f4:56:1c:90:a6:73:8f:99:24:b0:96:4f:
                    74:4e:31:66:74:8c:06:4f:5a:73:1c:56:12:17:67:
                    35:e5:21:27:db:f6:b5:9a:56:6e:11:b4:51:37:4c:
                    e6:26:a1:83:78:46:52:37:89:4b:01:b9:1a:57:05:
                    20:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:5A:A8:C9:CB:FE:43:D2:7E:3A:06:61:78:BD:A0:45:95:36:23:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/98f7cc3d-6f8e-3a06-a19f-a0c03640bb01.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.crl

            X509v3 Authority Key Identifier:
                keyid:61:D5:32:E9:6D:BB:CA:2E:A4:34:67:90:E5:3E:1C:8C:AF:B2:D9:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.10.168.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:55:94:74:dd:57:c5:83:d3:9a:b2:0a:a3:04:22:41:b0:be:
         fc:f5:73:15:1d:d3:22:22:da:2d:4d:95:69:78:42:ed:e7:a6:
         d2:37:8a:33:4b:89:52:3e:77:88:a9:78:fc:84:3a:8a:5f:c9:
         d0:fc:3c:e0:3a:04:a5:d3:23:87:3f:60:85:4f:c5:f5:8d:eb:
         4a:45:90:f1:cb:89:e7:46:37:c9:c0:c3:89:4d:95:c5:f5:5f:
         0b:67:9d:79:d1:bb:f6:66:77:43:d6:30:27:13:a1:d4:fc:f4:
         21:b5:88:ad:80:19:2d:96:58:d3:33:6b:38:6b:9a:c7:a6:c2:
         a2:55:89:88:bf:80:02:b3:a6:08:aa:aa:af:46:34:c7:91:ac:
         f8:dd:0d:a7:1b:d8:3b:0d:81:fe:5d:d3:81:b5:a4:b3:15:68:
         09:20:b1:c7:6e:42:32:c0:eb:de:1f:19:5c:ce:2c:fb:93:ad:
         69:8e:b0:4a:af:0b:91:5b:2e:9b:96:68:72:ba:ae:78:b3:8b:
         6e:a5:ff:ed:67:a4:4c:2c:47:5d:aa:9a:48:16:b9:40:59:d4:
         89:a8:3e:8b:ed:44:a7:1a:aa:ca:0e:27:b9:7d:08:48:e0:42:
         79:9c:97:e8:73:d0:28:f2:72:e6:7e:6c:e5:96:31:d5:0a:d4:
         e7:3e:d0:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:24:42 2026 by rpki-client