Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16ef9480-24de-4ac2-bd6e-b8d3d5320b5d/c152772a-1f9b-3f1b-9084-66c9415bc849.roa
File:                     c152772a-1f9b-3f1b-9084-66c9415bc849.roa (raw, json)
Hash identifier:          WDjckJgDcalE4OuSBUmWbexRYtPfhtYqQs0mdGrp7RI=
Subject key identifier:   F2:60:27:03:93:6E:3E:96:33:D9:60:80:0A:11:9E:83:2D:B9:1C:06
Certificate issuer:       /CN=16ef9480-24de-4ac2-bd6e-b8d3d5320b5d
Certificate serial:       010D0C9F4328584CD99CC99FB0EE7185560E9A54
Authority key identifier: 9E:40:FB:15:1B:25:50:97:6E:71:50:4B:D8:A5:E9:6A:9E:5E:9D:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16ef9480-24de-4ac2-bd6e-b8d3d5320b5d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16ef9480-24de-4ac2-bd6e-b8d3d5320b5d/c152772a-1f9b-3f1b-9084-66c9415bc849.roa
Signing time:             Fri 13 Feb 2026 14:00:41 +0000
ROA not before:           Fri 13 Feb 2026 14:00:41 +0000
ROA not after:            Thu 14 May 2026 13:00:41 +0000
asID:                     46253
IP address blocks:        208.94.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16ef9480-24de-4ac2-bd6e-b8d3d5320b5d/16ef9480-24de-4ac2-bd6e-b8d3d5320b5d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16ef9480-24de-4ac2-bd6e-b8d3d5320b5d/16ef9480-24de-4ac2-bd6e-b8d3d5320b5d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16ef9480-24de-4ac2-bd6e-b8d3d5320b5d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d9:9c:c9:9f:b0:ee:71:85:56:0e:9a:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16ef9480-24de-4ac2-bd6e-b8d3d5320b5d
        Validity
            Not Before: Feb 13 14:00:41 2026 GMT
            Not After : May 14 13:00:41 2026 GMT
        Subject: CN=1afb1856-71d5-427f-8129-6c0a0923a1bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:f2:99:b0:be:4e:a3:2e:12:ab:46:8b:1f:9c:
                    3a:87:14:88:47:9f:1f:0b:b4:77:63:cc:bd:82:77:
                    61:b1:1c:56:8e:e0:f1:d3:13:79:92:3c:f1:76:6f:
                    aa:37:1a:6c:ce:06:f4:f6:5a:73:7e:f1:3a:de:1b:
                    ce:26:c8:b8:73:50:f0:b0:bb:3a:9c:c2:69:e5:1e:
                    10:ce:93:ab:0f:7b:e3:a3:3a:62:d8:ad:82:30:49:
                    fc:f9:6f:78:17:90:8f:b0:f5:bb:59:02:77:be:e2:
                    67:f6:a4:ee:cf:6f:08:1a:d2:62:22:52:48:e5:26:
                    51:1c:f1:5f:8d:35:d3:93:bb:50:cb:de:30:fe:82:
                    f6:b8:b0:17:b2:32:e1:d6:bb:a5:43:b3:45:0e:e7:
                    24:8f:0f:34:82:3e:3b:1c:fc:bf:9e:5a:6f:3e:e9:
                    2a:93:4e:2e:8a:20:c5:90:f9:65:f2:17:30:ff:4a:
                    da:b9:13:07:00:a7:3a:08:b0:2a:6c:b0:52:83:8f:
                    d7:0c:77:44:8a:1d:d8:6b:f2:fe:e1:fa:90:1b:63:
                    7c:64:3e:b5:95:71:4e:2c:91:18:bf:d1:7b:f4:8c:
                    16:3e:87:8f:4f:bd:24:62:fa:00:bd:43:e3:84:1e:
                    b8:bb:68:5f:8d:0a:17:d4:43:a1:f6:7e:7a:76:dc:
                    28:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:60:27:03:93:6E:3E:96:33:D9:60:80:0A:11:9E:83:2D:B9:1C:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16ef9480-24de-4ac2-bd6e-b8d3d5320b5d/c152772a-1f9b-3f1b-9084-66c9415bc849.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16ef9480-24de-4ac2-bd6e-b8d3d5320b5d/16ef9480-24de-4ac2-bd6e-b8d3d5320b5d.crl

            X509v3 Authority Key Identifier:
                keyid:9E:40:FB:15:1B:25:50:97:6E:71:50:4B:D8:A5:E9:6A:9E:5E:9D:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16ef9480-24de-4ac2-bd6e-b8d3d5320b5d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.94.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:67:d2:0a:cd:f0:7f:56:ce:26:ad:65:ad:18:ec:9b:12:a2:
         2c:b4:d1:23:87:62:06:8f:21:c7:c5:b5:3f:97:e2:23:cf:d1:
         46:35:70:6b:6f:2f:ed:81:9e:35:15:24:6d:d6:3c:71:0f:31:
         c0:fb:2a:a4:be:ba:91:21:24:a4:3a:fb:e1:48:1c:74:2a:8a:
         63:e4:f5:14:da:80:34:36:08:68:c2:96:89:72:44:c0:b6:6d:
         0a:33:5a:c8:b4:cd:d1:24:18:db:d8:e5:a4:4c:4d:fd:1f:0c:
         da:6e:89:58:05:d2:31:43:ec:20:5b:21:4f:8e:69:9c:22:a7:
         04:8d:80:92:5a:9d:e1:27:11:3b:d7:e8:9a:ed:fb:c4:8c:88:
         cf:2f:52:d0:49:68:e2:c2:ea:9c:d6:5a:75:56:a4:d6:14:86:
         cd:f0:34:88:23:d6:e0:f9:92:51:00:3a:21:6a:6e:c7:89:9c:
         6a:fa:50:1b:2f:54:2e:36:eb:ca:7d:45:04:cf:7a:28:c6:d9:
         8c:fd:e4:1d:74:70:c4:23:72:9f:89:2e:70:d4:e4:c2:6d:a9:
         eb:bd:88:79:b4:ab:01:3f:f2:dc:74:6a:26:86:bb:ed:03:54:
         84:bf:5f:d0:e1:6f:7c:94:f3:60:f5:ff:bd:16:e6:43:0f:b1:
         f4:7c:5f:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:27:35 2026 by rpki-client