Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/0dbdb44f-ac3e-376f-90dd-5a4848410620.roa
File:                     0dbdb44f-ac3e-376f-90dd-5a4848410620.roa (raw, json)
Hash identifier:          UpYUP4ndFaDZjjdZsVGsUHk3TK9rs+vnx/4V3sjwOkE=
Subject key identifier:   39:0C:BF:C4:30:9E:91:E8:A0:0E:94:1B:B2:C8:3F:5F:E6:8D:52:12
Certificate issuer:       /CN=da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4
Certificate serial:       010D0C9F4328584CE62CC291A5A9B7FF45C6B480
Authority key identifier: B1:AB:4F:F6:34:69:7B:5B:ED:E2:5D:45:30:00:14:37:65:25:14:8A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/0dbdb44f-ac3e-376f-90dd-5a4848410620.roa
Signing time:             Wed 18 Feb 2026 02:00:31 +0000
ROA not before:           Wed 18 Feb 2026 02:00:31 +0000
ROA not after:            Tue 19 May 2026 01:00:31 +0000
asID:                     14618
IP address blocks:        192.157.36.0/23 maxlen: 24
                          2602:f7db::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e6:2c:c2:91:a5:a9:b7:ff:45:c6:b4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4
        Validity
            Not Before: Feb 18 02:00:31 2026 GMT
            Not After : May 19 01:00:31 2026 GMT
        Subject: CN=cb9d0b7d-3b79-4e47-8305-0747d3a9c10f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:ed:a4:c2:33:4a:d4:b6:5a:52:58:01:00:54:
                    7b:a1:3a:6c:c2:62:63:fc:06:be:0d:32:fa:4d:05:
                    12:b8:02:63:06:e9:0b:de:05:ee:6e:81:41:c8:1c:
                    2e:62:9b:97:f5:9d:dd:4a:ea:99:c1:36:7a:cb:86:
                    ce:f4:cc:2b:fe:e8:68:d7:74:89:9f:a7:b9:26:72:
                    2b:56:b0:c0:c4:b3:97:ad:a7:f6:c3:42:5b:1e:c6:
                    16:20:64:39:bb:f5:e6:d7:f1:4b:0a:60:6e:ac:69:
                    34:98:9d:1d:ea:f0:39:9c:f4:b5:33:ca:3b:7e:c9:
                    03:35:dc:35:37:de:f0:64:de:54:b8:d9:53:38:a9:
                    b8:25:5d:f2:be:8d:8b:99:99:5e:f4:c9:23:ab:3e:
                    ab:7e:24:0c:5c:e5:44:d3:48:d0:e8:78:07:f3:7f:
                    11:9e:1c:93:ae:33:7c:c6:78:60:38:5b:c1:0f:2d:
                    a0:a4:38:ce:b9:ec:93:0f:84:f5:13:4f:67:3d:57:
                    39:b3:dc:a6:46:a4:00:ce:e7:64:d2:95:9d:05:96:
                    98:ee:f8:a1:e8:6a:9d:22:3a:85:eb:e7:72:cb:29:
                    3e:c2:d4:1b:55:37:f8:42:b3:b1:fc:6f:a9:16:a9:
                    53:0d:70:19:cc:24:71:ec:42:61:c7:22:38:95:cb:
                    06:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:0C:BF:C4:30:9E:91:E8:A0:0E:94:1B:B2:C8:3F:5F:E6:8D:52:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/0dbdb44f-ac3e-376f-90dd-5a4848410620.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.crl

            X509v3 Authority Key Identifier:
                keyid:B1:AB:4F:F6:34:69:7B:5B:ED:E2:5D:45:30:00:14:37:65:25:14:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.157.36.0/23
                IPv6:
                  2602:f7db::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:e6:7e:4d:11:93:19:44:6e:13:7f:48:4a:e1:63:86:c0:88:
         a5:0e:de:14:bc:81:76:1d:4d:09:ea:f2:63:46:25:28:65:b9:
         09:81:d1:9d:48:e8:b3:a2:d3:87:74:07:26:5e:3c:85:c5:4e:
         9b:5e:cb:36:76:0c:21:b3:43:dc:f4:7a:d9:21:c3:53:98:df:
         47:da:f8:b5:f2:60:f9:67:b5:34:ef:06:14:13:22:0d:0c:a0:
         92:f8:74:78:04:0a:91:76:74:25:04:60:38:3e:63:ab:cf:fc:
         99:47:11:13:8b:5b:de:80:e0:dc:29:95:0b:60:22:29:28:73:
         a9:cb:37:e7:0c:dd:51:5c:65:c2:c4:88:5f:54:82:57:a4:96:
         bf:30:4f:f5:0e:a1:09:49:89:c1:51:81:c7:91:c6:4f:f5:9b:
         11:0b:b7:bd:f8:b4:03:05:17:04:ee:11:28:62:99:d6:e2:6a:
         3e:ec:04:62:0f:17:46:37:43:15:a0:ad:52:30:89:be:0d:e0:
         dd:98:75:c2:d2:92:63:b3:c0:8e:3b:77:8b:f7:17:95:9e:4d:
         0b:2e:81:65:56:f9:f8:2c:98:ca:36:e0:f9:b2:fd:88:8b:a8:
         3a:83:a5:01:9a:22:55:6e:7d:9b:8a:0b:a7:34:a6:2b:5d:1f:
         ae:6d:0e:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:15:58 2026 by rpki-client