Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/97ad6b30-70fe-3499-9846-0f5e2d3aee5c.roa
File:                     97ad6b30-70fe-3499-9846-0f5e2d3aee5c.roa (raw, json)
Hash identifier:          G+gAbp/MkGACtRfZjY7mC25pqjjeACEieuZMhUp7WzM=
Subject key identifier:   84:52:EB:1A:05:98:A9:D9:64:6C:D8:C0:B1:A2:29:B3:56:BB:F6:B9
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584CC612052E9883F6EB641440E0
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/97ad6b30-70fe-3499-9846-0f5e2d3aee5c.roa
Signing time:             Fri 06 Feb 2026 14:00:40 +0000
ROA not before:           Fri 06 Feb 2026 14:00:40 +0000
ROA not after:            Thu 07 May 2026 13:00:40 +0000
asID:                     64267
IP address blocks:        158.62.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c6:12:05:2e:98:83:f6:eb:64:14:40:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Feb  6 14:00:40 2026 GMT
            Not After : May  7 13:00:40 2026 GMT
        Subject: CN=efa06340-5376-4fca-8ef0-90d3c487b576
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:88:e3:99:5f:00:30:93:18:b0:8d:52:3d:09:
                    66:d1:35:59:fd:17:38:c5:32:3a:6d:1c:bd:0c:8c:
                    da:49:22:81:15:f4:d5:75:ee:a4:9d:d8:c6:c4:04:
                    6a:43:d6:4c:09:8e:62:e6:28:45:7f:4d:72:ec:df:
                    c0:92:ba:12:d1:12:60:fc:e1:28:d8:92:9a:9e:4e:
                    6e:70:ed:56:da:f7:00:2a:de:9f:90:db:32:45:3b:
                    d7:a3:8a:24:df:cf:3e:a7:00:29:e5:8e:f5:d9:2c:
                    1f:bc:ba:ac:68:8c:92:97:2f:2f:b8:27:bc:b0:17:
                    4b:bf:6c:47:6f:1f:1c:dd:f8:44:27:2c:a2:32:cf:
                    7a:0c:08:c4:bf:8d:c7:c0:bb:eb:40:05:5c:fe:97:
                    3d:b0:d1:1f:1b:2a:ba:94:ea:14:a5:c2:a2:46:d5:
                    ae:45:af:a2:3f:cf:00:23:9f:3c:8e:6c:06:62:31:
                    13:aa:87:6d:93:5f:f2:35:e8:b1:9a:23:6c:2b:b4:
                    f7:86:7d:35:21:4c:a8:b6:f9:34:0d:8a:3d:4a:85:
                    41:0b:e9:fc:53:eb:0f:c4:e6:5d:0f:3b:39:9d:de:
                    29:50:3f:a7:84:33:bf:5b:36:6a:b7:21:b7:2e:40:
                    72:2c:7a:46:ef:28:03:7f:6e:3b:8f:1a:62:89:e7:
                    d9:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:52:EB:1A:05:98:A9:D9:64:6C:D8:C0:B1:A2:29:B3:56:BB:F6:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/97ad6b30-70fe-3499-9846-0f5e2d3aee5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.62.221.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:fe:f2:8b:3a:c6:a8:2b:8b:30:3e:22:03:0c:21:f9:e2:47:
         27:e7:10:69:7d:fa:da:ad:89:7f:be:2f:fa:8e:64:c7:b9:e2:
         a1:32:43:ba:41:2b:ac:a9:64:d8:09:33:af:8c:fe:f4:5e:2c:
         3b:4c:03:5b:3e:60:18:49:3e:53:06:0a:1b:1d:c3:41:6a:ec:
         12:18:cf:ad:37:07:1d:cf:02:f2:29:60:f0:20:03:ce:d2:71:
         c5:40:71:3c:b4:16:9b:99:dc:2f:36:08:10:d9:a5:fb:c4:fd:
         69:93:df:8c:0c:b8:1b:12:c9:5f:f7:1e:7f:44:71:d7:e7:33:
         68:70:f6:c9:76:f0:fe:1c:21:72:be:5b:8d:53:7f:b9:b3:22:
         f3:0c:98:13:a8:44:74:81:7e:2a:46:9a:79:ab:0f:30:de:b8:
         5e:eb:e4:51:92:ef:e2:64:5e:48:12:c7:0a:22:c1:95:7b:37:
         09:64:00:16:38:65:c7:bb:f6:d3:98:2f:e6:a9:d2:7d:bf:0e:
         c1:4e:bb:1d:cb:6a:e3:11:7d:d0:01:53:a3:80:0d:75:b7:d9:
         99:ab:a6:2c:ed:44:32:f2:fd:61:f1:eb:4e:6e:b2:9a:45:6a:
         5b:3c:69:a8:60:75:a6:45:c4:0e:85:d7:6b:2f:e8:3a:b1:14:
         d7:99:8e:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:05:35 2026 by rpki-client