Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/a5e3e02d-084d-3839-a180-3654f49107df.roa
File:                     a5e3e02d-084d-3839-a180-3654f49107df.roa (raw, json)
Hash identifier:          FFbIXvoj1eSDHFgt5nOKfriGDVXKsSxdU5GbfoyImbs=
Subject key identifier:   98:AD:5C:15:03:B4:FE:09:F9:A6:BF:4A:80:98:F1:E4:E7:1A:D3:4A
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F4328584CF58797A93EE434365ABBCD00
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/a5e3e02d-084d-3839-a180-3654f49107df.roa
Signing time:             Mon 23 Feb 2026 14:00:41 +0000
ROA not before:           Mon 23 Feb 2026 14:00:41 +0000
ROA not after:            Sun 24 May 2026 13:00:41 +0000
asID:                     212669
IP address blocks:        139.177.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f5:87:97:a9:3e:e4:34:36:5a:bb:cd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Feb 23 14:00:41 2026 GMT
            Not After : May 24 13:00:41 2026 GMT
        Subject: CN=28692cac-945d-4610-b7cd-771c2c4a1208
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:2e:ef:d4:6e:d7:e7:2a:d2:af:1f:33:ff:2c:
                    8d:6f:80:a3:79:e8:48:46:cc:47:7f:79:a8:8d:9f:
                    4b:43:cc:3b:01:95:28:ef:ae:61:20:ec:e8:46:fb:
                    b6:d6:36:65:3c:8e:09:8a:4f:95:94:06:81:09:25:
                    e5:a0:a9:2f:3b:ec:2a:ae:42:98:44:e9:95:ef:a5:
                    26:48:f1:05:23:1a:b2:ed:39:f6:3b:2a:da:36:01:
                    4b:e9:09:74:ee:6f:49:9e:99:16:53:e3:6c:38:5c:
                    f7:f5:11:ed:ad:15:3f:69:c8:e6:fe:a8:2a:71:db:
                    28:01:57:c1:d2:24:1e:6f:99:0e:a3:65:98:d7:4d:
                    d1:cf:1d:db:ea:7e:42:78:4a:e0:1d:65:3b:da:bc:
                    4a:ba:5d:ce:7d:c6:2e:84:e4:cd:31:ae:01:4e:16:
                    bd:54:26:4e:44:21:1a:d9:3f:1c:41:4a:8e:7f:c3:
                    8a:ad:fc:51:26:09:c7:75:26:b8:54:20:95:60:a0:
                    5e:5c:91:13:25:d6:df:a5:3e:c4:2a:2d:9f:76:31:
                    76:a2:f1:8e:db:40:d6:5c:12:f6:25:09:e1:55:fa:
                    01:74:1f:be:d4:e4:14:fa:1e:5f:11:2d:67:9f:66:
                    d9:f1:b7:86:00:f7:e6:5f:47:45:ae:4f:d3:e8:b8:
                    05:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:AD:5C:15:03:B4:FE:09:F9:A6:BF:4A:80:98:F1:E4:E7:1A:D3:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/a5e3e02d-084d-3839-a180-3654f49107df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.177.154.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:35:e1:9a:87:84:cb:73:be:16:85:81:75:a5:03:0a:7d:e9:
         74:d7:8b:f7:55:93:c8:d3:d0:71:a0:0f:c6:ca:33:82:a5:0d:
         a8:01:d1:9d:43:94:b9:b8:68:06:a7:a5:80:47:89:a0:a7:56:
         72:fa:9c:cc:55:04:29:23:60:d9:f5:8f:62:77:34:d6:d0:d9:
         4d:6d:c3:bd:54:d5:0a:7f:da:55:45:db:19:b4:cb:34:fd:c3:
         1e:df:e7:a6:bf:84:65:42:7a:27:39:5a:86:fd:bc:75:5c:0f:
         32:f3:f4:61:47:bb:9e:6e:95:9a:93:a1:1a:88:4a:3c:98:97:
         28:5a:31:c5:fe:f0:1e:ea:14:5f:e5:48:10:2d:7c:3f:dc:e5:
         62:7d:b1:b0:f9:12:03:53:61:79:45:d5:a9:51:36:38:da:46:
         2a:b0:b9:7b:22:b8:8d:15:dc:7c:f1:f6:ce:09:e6:55:ec:2d:
         fa:b5:3d:7d:22:65:ca:32:be:97:d2:36:bc:2e:55:73:67:b3:
         a0:04:92:66:a3:8d:d0:82:2a:5d:d6:ee:33:2e:32:3c:b2:f5:
         61:68:9c:e2:4f:a4:5b:0d:09:d3:b6:9b:bf:6d:e2:b2:b9:5b:
         fa:8d:39:68:9b:90:30:81:16:5c:31:02:a2:68:aa:8c:25:ad:
         e3:26:ea:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:25:41 2026 by rpki-client