Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/c5aa09b5-6a09-3666-9c20-2eb386eefcc0.roa
File:                     c5aa09b5-6a09-3666-9c20-2eb386eefcc0.roa (raw, json)
Hash identifier:          Rk1Q880BLAhKb6xx/D4tMOv4elIueNuWWTwnCJd8Tq8=
Subject key identifier:   B8:6C:82:11:B8:3D:74:FF:BB:D3:B6:E8:8A:D0:BA:90:28:6D:1E:A9
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584CEA5CCA750E7DC85DCE20BA40
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/c5aa09b5-6a09-3666-9c20-2eb386eefcc0.roa
Signing time:             Thu 19 Feb 2026 14:00:40 +0000
ROA not before:           Thu 19 Feb 2026 14:00:40 +0000
ROA not after:            Wed 20 May 2026 13:00:40 +0000
asID:                     20001
IP address blocks:        167.160.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ea:5c:ca:75:0e:7d:c8:5d:ce:20:ba:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Feb 19 14:00:40 2026 GMT
            Not After : May 20 13:00:40 2026 GMT
        Subject: CN=349862d4-436c-4791-958f-ddb208de05c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:40:e5:81:c5:49:28:e4:a3:37:fa:3c:64:bf:
                    b2:4c:4e:1e:1e:24:98:20:88:17:ac:49:a3:14:da:
                    20:df:cd:e8:93:67:e8:98:b0:a7:44:9d:96:4f:6d:
                    31:3a:cc:42:b3:f0:a7:10:33:93:9a:1c:a3:4f:e5:
                    27:b2:07:b9:4f:4b:22:c0:f1:5c:50:53:de:e1:03:
                    84:5b:6c:53:e5:87:25:c1:3d:37:d4:42:8e:0a:af:
                    59:c5:de:56:a8:34:20:3e:08:8a:46:d0:41:39:c2:
                    1a:1b:75:49:99:22:df:15:5e:c1:bb:56:4d:b8:ff:
                    f7:62:6d:3a:f4:97:9f:bd:9f:b6:de:77:fc:1f:55:
                    b4:2b:94:47:61:b3:c2:29:35:87:9c:fc:5c:04:50:
                    c7:c3:3a:af:52:fb:6f:60:82:59:24:5d:12:9f:ce:
                    17:3d:79:6f:35:74:e9:a5:1e:7a:d9:a9:20:a5:5f:
                    c8:b5:4f:ff:e9:3b:1c:45:93:5a:9b:33:1d:18:85:
                    cc:62:e1:e0:b9:0e:5a:d6:fe:01:0c:49:fa:3d:f7:
                    8f:f7:dd:59:ae:d1:b7:34:1d:47:42:09:5a:76:36:
                    21:82:8d:fc:e8:e7:27:89:08:9e:f7:80:41:42:e1:
                    98:7c:fe:4c:44:12:61:fc:7a:e5:e6:7c:45:08:fe:
                    a5:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:6C:82:11:B8:3D:74:FF:BB:D3:B6:E8:8A:D0:BA:90:28:6D:1E:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/c5aa09b5-6a09-3666-9c20-2eb386eefcc0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.160.75.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:37:6f:9f:32:74:2c:c8:43:89:97:22:66:69:1d:66:e4:16:
         5f:f7:d3:9e:92:47:85:44:fd:a7:b3:ef:bc:2b:10:0e:ad:1b:
         70:5c:d0:21:35:bf:ad:f2:c0:5b:85:ec:c8:6f:83:f9:69:11:
         3a:09:9e:e3:d2:93:25:6d:9a:c3:0a:9d:58:2b:f9:94:77:7a:
         29:f7:a2:04:af:26:f1:92:19:c5:aa:0d:28:17:b3:d3:66:06:
         57:7c:7b:30:65:5c:4e:7c:4e:ed:a2:52:be:89:db:d5:d1:a4:
         bd:c1:a2:32:37:6d:38:ff:eb:83:dc:05:63:48:26:88:96:a2:
         ba:e4:5d:61:55:a5:8a:b8:0f:a8:99:03:b8:0a:2f:85:4c:78:
         e6:bd:9a:35:32:1a:f6:b8:22:7a:9a:ac:f0:7e:4d:ad:84:ee:
         a7:df:de:2f:26:d8:17:93:25:d1:97:7e:4a:7a:ae:fd:48:01:
         31:13:79:66:98:75:24:f2:7d:f6:a5:34:58:72:bf:8d:de:1b:
         0c:2b:2e:3c:df:a7:34:ad:02:a4:22:ba:ff:f1:21:9b:df:c8:
         ba:4c:c6:71:6f:07:2f:33:da:67:81:8b:66:2c:11:c7:c0:16:
         ec:02:07:a3:98:51:85:d7:0e:46:af:46:88:05:0d:c0:0f:31:
         13:16:16:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:30:52 2026 by rpki-client