Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/87172803-bc12-38e0-a0e7-3e5c8011604a.roa
File:                     87172803-bc12-38e0-a0e7-3e5c8011604a.roa (raw, json)
Hash identifier:          Tx65+SBzVmBnmo5w8uoPzYnGpd+kNdX74X7buwBpA/c=
Subject key identifier:   D7:2B:D6:7B:FB:2E:9D:41:93:DC:6F:05:E0:58:D9:EB:F0:26:2F:8E
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584CD99CD1E2F97B18D7958341C0
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/87172803-bc12-38e0-a0e7-3e5c8011604a.roa
Signing time:             Fri 13 Feb 2026 14:00:41 +0000
ROA not before:           Fri 13 Feb 2026 14:00:41 +0000
ROA not after:            Thu 14 May 2026 13:00:41 +0000
asID:                     7029
IP address blocks:        141.164.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d9:9c:d1:e2:f9:7b:18:d7:95:83:41:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Feb 13 14:00:41 2026 GMT
            Not After : May 14 13:00:41 2026 GMT
        Subject: CN=381c5e90-7c19-4f35-b741-bb27b671ff97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:14:30:ef:c6:ee:73:aa:0e:b0:70:9c:7f:49:
                    0f:c3:a1:57:a7:0f:09:32:40:38:1f:8b:44:22:7a:
                    6f:7d:f5:29:d0:ad:39:23:54:53:e1:52:84:f5:a1:
                    d1:4c:a8:fe:84:57:cb:1a:53:5a:c6:dd:fb:5b:0c:
                    12:85:70:aa:1d:50:a2:25:91:e2:99:1c:a3:95:94:
                    99:49:8a:a1:ce:63:16:07:6b:52:3d:26:44:27:bf:
                    5c:60:4b:17:51:2c:e7:f1:58:dc:21:23:e8:8e:be:
                    e9:68:b5:03:a1:10:fc:97:eb:4d:10:1e:98:ed:eb:
                    8e:a6:84:78:5c:27:03:70:26:fd:7b:c4:f5:db:2e:
                    17:72:81:f5:a0:85:14:c7:ed:55:03:1d:da:ff:9c:
                    29:12:d2:7f:02:a8:dd:37:b5:62:06:be:32:79:64:
                    bc:f0:95:e4:a5:94:d7:71:63:84:6e:01:fe:06:7b:
                    38:95:cd:50:46:71:d5:d9:af:18:8e:f6:59:64:2b:
                    49:e7:fe:74:9f:dd:e3:b2:9d:18:98:9a:7e:72:2e:
                    35:55:fc:a6:4b:66:f5:a4:24:53:73:4b:4a:b4:e1:
                    43:84:0b:64:26:8b:d7:7c:23:38:7d:cd:ad:50:1d:
                    be:f7:77:03:9a:f6:6a:49:17:b7:72:5b:81:23:e7:
                    4a:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:2B:D6:7B:FB:2E:9D:41:93:DC:6F:05:E0:58:D9:EB:F0:26:2F:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/87172803-bc12-38e0-a0e7-3e5c8011604a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.164.91.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:bc:2b:c5:eb:b9:17:61:63:7b:c9:3d:b3:b6:32:32:be:5c:
         b9:65:75:f4:3c:8b:0a:97:cc:0b:d1:ff:33:1c:f5:0d:63:93:
         02:e4:e4:b0:a6:d5:60:8d:11:79:ac:aa:69:c0:cf:36:c2:36:
         53:b6:75:dd:04:5c:ef:04:e3:42:ce:6d:d7:3e:38:05:e8:b7:
         fd:a9:9e:ce:a6:a5:d8:19:77:ce:f8:70:1e:00:23:35:cc:77:
         64:c3:65:fe:46:5b:67:2d:3a:09:74:54:23:c4:10:aa:4f:57:
         de:2c:79:e9:54:4b:c8:1c:b6:a7:94:96:6b:b3:dd:14:08:d5:
         fa:ff:48:81:7c:bb:6e:0a:b8:58:78:d6:11:60:30:a5:40:0c:
         44:77:b9:2c:58:c2:49:b2:44:5d:dc:e2:74:df:a4:af:88:f0:
         ad:b8:8e:d8:94:ea:17:bc:79:99:ff:df:4a:65:da:69:1d:86:
         cf:c4:19:ba:91:65:f3:c5:64:60:25:30:58:bb:70:c7:c5:83:
         e3:53:55:4d:76:8d:63:a9:2f:ac:ec:3c:fb:0e:eb:9f:b8:95:
         69:b2:39:e6:d9:fa:3f:33:2e:83:f3:85:64:27:67:17:40:ee:
         59:9f:bd:ec:49:85:3a:f5:0a:d0:29:f3:bc:21:e0:d6:01:ca:
         a6:18:cd:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:16:25 2026 by rpki-client