Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/0d425007-e40e-3e38-a1eb-de6438295d81.roa
File:                     0d425007-e40e-3e38-a1eb-de6438295d81.roa (raw, json)
Hash identifier:          oglCvX4u7MJlgjHcr2QuWGkHASrjafo1z9UPSTDo7n0=
Subject key identifier:   1C:7C:84:30:C7:72:EC:DF:24:60:35:61:62:B7:8A:37:57:DC:5B:9B
Certificate issuer:       /CN=5e22d7ae-1224-43fb-907a-6690f7bd9a2e
Certificate serial:       010D0C9F4328584CD6D21EE3750A3D795F199980
Authority key identifier: 60:B1:66:1F:22:1A:63:15:3A:73:41:10:72:AE:0E:CC:D7:BA:34:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/0d425007-e40e-3e38-a1eb-de6438295d81.roa
Signing time:             Thu 12 Feb 2026 14:00:40 +0000
ROA not before:           Thu 12 Feb 2026 14:00:40 +0000
ROA not after:            Wed 13 May 2026 13:00:40 +0000
asID:                     8070
IP address blocks:        64.40.141.0/24 maxlen: 24
                          2607:9240::/42 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d6:d2:1e:e3:75:0a:3d:79:5f:19:99:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e22d7ae-1224-43fb-907a-6690f7bd9a2e
        Validity
            Not Before: Feb 12 14:00:40 2026 GMT
            Not After : May 13 13:00:40 2026 GMT
        Subject: CN=ae596b24-d53b-4c7a-b2ee-cc4ac492cce5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:4f:d7:87:ed:6e:ec:e8:3d:78:e7:e7:70:4a:
                    2d:f9:bd:a2:f9:fd:18:53:84:35:90:71:d3:93:37:
                    a4:bd:39:6f:47:8b:14:3a:cc:24:93:9c:65:56:e3:
                    0f:7f:72:50:ee:c1:c6:4c:c4:16:a0:55:cd:d4:29:
                    6c:eb:4b:3f:a3:25:26:67:78:4c:2e:50:97:64:6b:
                    6a:28:75:9c:42:1b:5c:3a:1b:d9:52:6d:b0:ac:dc:
                    3c:92:da:8d:7c:69:60:a3:fe:48:4f:5e:09:76:94:
                    ea:86:4e:01:f1:fd:a2:a6:7e:46:43:b8:6d:4b:fa:
                    eb:1e:ee:25:ae:e7:dc:1d:8e:76:49:a3:55:28:0a:
                    d2:0f:f3:12:6f:1f:b6:ef:91:0a:52:1a:62:1b:4b:
                    06:fe:d9:71:5a:82:4b:60:f6:5f:b2:aa:9f:c1:e1:
                    32:a5:55:a8:a7:ca:3e:a1:08:2d:8b:db:b5:ef:ca:
                    31:3b:39:81:2d:7a:ee:15:d5:98:dc:8f:53:bd:9a:
                    84:9b:cd:24:a1:04:60:8c:8a:b7:67:5c:c6:99:57:
                    5e:6a:1e:4b:6b:e3:47:10:58:21:94:cc:ee:24:1d:
                    72:a7:5d:cc:6f:84:08:18:d8:4a:8b:e3:d7:8c:aa:
                    83:a9:1d:b2:1b:3a:5f:52:fe:e3:6b:16:a5:9e:9b:
                    74:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:7C:84:30:C7:72:EC:DF:24:60:35:61:62:B7:8A:37:57:DC:5B:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/0d425007-e40e-3e38-a1eb-de6438295d81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.crl

            X509v3 Authority Key Identifier:
                keyid:60:B1:66:1F:22:1A:63:15:3A:73:41:10:72:AE:0E:CC:D7:BA:34:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.40.141.0/24
                IPv6:
                  2607:9240::/42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:30:2e:5e:06:22:9c:7d:6f:14:ff:e9:a9:6b:b8:b0:9f:4e:
         3a:ab:64:2f:fd:45:ff:fa:78:9b:ae:0a:66:b3:d5:6f:ed:d3:
         b0:07:30:74:a8:0e:c9:59:6e:46:0f:2a:f0:22:fc:e8:f5:85:
         dc:85:ca:3e:e9:10:09:a4:05:f6:c4:e4:42:da:b7:2e:f8:1f:
         3b:b6:ce:26:7b:f3:f7:3a:02:f6:05:fa:b6:66:ed:fb:d3:f1:
         f5:73:dc:65:f2:09:9a:89:62:17:5f:be:a3:26:66:5a:09:bc:
         62:0c:f4:f8:12:fc:04:58:71:00:55:5a:be:59:a7:f1:c5:b3:
         39:31:e2:94:85:78:5d:cb:db:17:86:41:e4:a0:52:4b:2b:51:
         9a:33:fb:7f:76:66:36:a8:bd:77:0f:d0:5d:ed:2b:64:fb:06:
         f8:22:5c:f9:16:ad:93:b7:20:b2:af:f6:7a:58:78:f3:70:20:
         66:66:23:27:b2:0b:5d:be:2a:3c:c9:cb:b7:b9:28:7f:6f:68:
         16:23:5e:c8:b0:f3:bc:ff:5a:8e:fb:9f:35:b2:21:ba:64:c2:
         b1:ed:2a:5d:56:a1:d5:7d:5e:8c:dc:c6:61:95:87:fc:df:48:
         d1:87:3c:7a:8d:1e:f6:94:ee:34:9c:ba:96:c1:72:5c:c1:02:
         11:ae:15:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:48:37 2026 by rpki-client