Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d4090525-7aee-4e0d-b577-ad34aaf1da7b/c7a9fdea-664c-38e1-be4a-09e48baa862e.roa
File:                     c7a9fdea-664c-38e1-be4a-09e48baa862e.roa (raw, json)
Hash identifier:          8jsCUb1LQR0jfuH1/P0BKuFnesZeyBYGq7A+xDpEU7A=
Subject key identifier:   0A:1F:DA:A2:94:09:A2:85:21:AD:9D:8E:44:E6:C2:55:92:AF:22:0F
Certificate issuer:       /CN=d4090525-7aee-4e0d-b577-ad34aaf1da7b
Certificate serial:       010D0C9F4328584CED279433444C725298DE1E50
Authority key identifier: 4B:44:58:96:26:7B:96:69:81:7F:C9:A6:E0:A9:D0:44:3E:76:A4:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d4090525-7aee-4e0d-b577-ad34aaf1da7b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d4090525-7aee-4e0d-b577-ad34aaf1da7b/c7a9fdea-664c-38e1-be4a-09e48baa862e.roa
Signing time:             Fri 20 Feb 2026 14:00:41 +0000
ROA not before:           Fri 20 Feb 2026 14:00:41 +0000
ROA not after:            Thu 21 May 2026 13:00:41 +0000
asID:                     9009
IP address blocks:        167.253.136.0/24 maxlen: 24
                          167.253.137.0/24 maxlen: 24
                          167.253.138.0/24 maxlen: 24
                          167.253.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d4090525-7aee-4e0d-b577-ad34aaf1da7b/d4090525-7aee-4e0d-b577-ad34aaf1da7b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d4090525-7aee-4e0d-b577-ad34aaf1da7b/d4090525-7aee-4e0d-b577-ad34aaf1da7b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d4090525-7aee-4e0d-b577-ad34aaf1da7b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ed:27:94:33:44:4c:72:52:98:de:1e:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4090525-7aee-4e0d-b577-ad34aaf1da7b
        Validity
            Not Before: Feb 20 14:00:41 2026 GMT
            Not After : May 21 13:00:41 2026 GMT
        Subject: CN=3b36e1dd-482c-4a05-a5c0-0bf28c8584aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:7d:b8:b5:d9:61:1c:c8:4f:42:6e:44:98:14:
                    ea:29:8d:01:7c:62:e4:2a:5e:0a:40:38:ab:27:e5:
                    ec:f9:c0:34:ca:58:fd:93:6b:8e:6f:74:0c:9f:7b:
                    88:4b:7e:bc:48:87:1b:0e:78:b3:7b:8c:68:96:bc:
                    5d:53:88:4b:bd:99:40:67:f3:6b:32:14:f8:13:65:
                    b6:ed:01:76:33:a5:9c:c2:16:0e:01:92:80:0d:34:
                    d6:c8:38:0a:61:d8:9b:16:0a:56:41:6c:89:01:35:
                    76:75:a5:00:f1:41:13:01:6e:87:55:d2:a1:56:11:
                    eb:4e:b4:ce:49:e0:f6:87:f2:f7:5d:7b:c2:1e:af:
                    72:7b:b6:a2:1c:fd:27:2b:03:d7:5a:73:51:77:0e:
                    b2:e1:2d:31:e4:78:32:cf:9f:ba:02:3d:e7:0c:d1:
                    8e:f4:85:14:09:cc:9d:ac:c0:9e:03:f8:c2:62:2e:
                    ac:3f:b6:73:d8:48:f0:da:dc:c2:d8:76:38:85:77:
                    8f:0b:3b:f7:3c:d5:02:94:26:db:41:67:9d:ca:9a:
                    5a:33:a7:5b:d7:c1:cc:51:1c:18:92:9c:f5:b0:f4:
                    f7:28:d5:91:5b:80:d5:56:11:97:f9:96:99:63:7d:
                    c2:af:75:79:9e:05:e0:ce:9f:06:61:e1:ac:13:72:
                    c0:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:1F:DA:A2:94:09:A2:85:21:AD:9D:8E:44:E6:C2:55:92:AF:22:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d4090525-7aee-4e0d-b577-ad34aaf1da7b/c7a9fdea-664c-38e1-be4a-09e48baa862e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d4090525-7aee-4e0d-b577-ad34aaf1da7b/d4090525-7aee-4e0d-b577-ad34aaf1da7b.crl

            X509v3 Authority Key Identifier:
                keyid:4B:44:58:96:26:7B:96:69:81:7F:C9:A6:E0:A9:D0:44:3E:76:A4:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d4090525-7aee-4e0d-b577-ad34aaf1da7b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.253.136.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c6:94:51:24:28:5d:5f:be:fe:36:80:f8:8b:6a:b2:fc:e1:fe:
         c1:63:ad:81:e4:95:d8:91:ba:00:b0:19:84:d1:88:4c:6c:75:
         82:3e:1d:75:3b:15:53:7c:26:00:4d:18:39:ef:38:16:b9:a0:
         b8:4d:e2:68:ba:33:b5:a8:4a:df:a4:62:2b:8a:40:0f:80:b1:
         41:f5:15:0d:14:ae:0a:6e:11:dd:04:df:cc:f1:4c:40:4f:ba:
         99:a5:51:1a:08:01:43:6d:08:5e:86:06:f3:3c:c0:e5:c0:a8:
         1d:4f:75:bb:17:61:7e:c7:5c:6d:97:c5:7d:91:45:55:84:e8:
         f0:83:f0:57:83:cd:25:de:c0:e6:50:6d:6d:26:9b:e4:a0:90:
         4d:7f:4f:ca:32:cc:af:7a:0b:6f:d1:e9:5a:c2:2d:60:8d:b2:
         cc:4d:79:2d:c0:84:59:d9:a9:22:88:e4:27:00:65:b0:6f:c0:
         51:2b:4b:b5:5d:ef:0c:fd:13:28:df:53:70:f5:84:20:4b:1e:
         e9:31:ff:80:13:0d:70:6f:80:0a:70:00:87:89:54:cc:27:4a:
         d6:6f:5b:13:6e:68:e1:de:b5:3e:39:ee:f2:9f:5d:13:c3:e3:
         11:43:b3:bf:f9:31:1d:f5:89:8e:09:2a:85:70:10:c5:27:9a:
         93:90:5a:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:15:27 2026 by rpki-client