Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b582df16-c65f-452f-ac4a-a1d3af6f8ad1/8d0cac73-efc7-398b-936e-1c9237bb4b8f.roa
File:                     8d0cac73-efc7-398b-936e-1c9237bb4b8f.roa (raw, json)
Hash identifier:          /lEcSghvaBl/YvEGnLSShAYzdujkRsdFgYrFbqdSpvQ=
Subject key identifier:   C9:14:BE:F9:47:5C:B2:FF:0F:1A:8D:9B:66:2D:85:09:5C:DE:82:BD
Certificate issuer:       /CN=b582df16-c65f-452f-ac4a-a1d3af6f8ad1
Certificate serial:       010D0C9F4328584CD99CC14D3EE803FF5A347300
Authority key identifier: 0C:A5:67:C6:89:7E:DC:8D:0C:9A:C7:CB:B3:45:F8:EF:39:13:AD:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b582df16-c65f-452f-ac4a-a1d3af6f8ad1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b582df16-c65f-452f-ac4a-a1d3af6f8ad1/8d0cac73-efc7-398b-936e-1c9237bb4b8f.roa
Signing time:             Fri 13 Feb 2026 14:00:41 +0000
ROA not before:           Fri 13 Feb 2026 14:00:41 +0000
ROA not after:            Thu 14 May 2026 13:00:41 +0000
asID:                     21634
IP address blocks:        74.123.28.0/22 maxlen: 24
                          162.210.128.0/22 maxlen: 24
                          2620:a0:4000::/44 maxlen: 48
                          2620:114:a000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b582df16-c65f-452f-ac4a-a1d3af6f8ad1/b582df16-c65f-452f-ac4a-a1d3af6f8ad1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b582df16-c65f-452f-ac4a-a1d3af6f8ad1/b582df16-c65f-452f-ac4a-a1d3af6f8ad1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b582df16-c65f-452f-ac4a-a1d3af6f8ad1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d9:9c:c1:4d:3e:e8:03:ff:5a:34:73:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b582df16-c65f-452f-ac4a-a1d3af6f8ad1
        Validity
            Not Before: Feb 13 14:00:41 2026 GMT
            Not After : May 14 13:00:41 2026 GMT
        Subject: CN=90baa82f-9ecc-4a4b-b324-3d9bacd031c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:df:ea:b1:e9:fb:4c:a9:86:d3:ff:23:4b:5d:
                    d8:30:a7:02:dd:c4:42:d6:83:ef:a1:05:c0:a9:ae:
                    41:75:07:8c:f3:6a:48:46:ca:27:c8:fd:fe:79:da:
                    c9:63:b8:e8:f7:2e:05:c7:35:a1:0b:c5:e4:7a:9a:
                    c3:cb:40:bf:32:41:84:81:fe:0a:d3:ce:f6:6b:f2:
                    58:50:92:66:c0:70:17:5a:e4:f9:56:19:b8:66:b6:
                    f2:77:6a:79:97:07:73:c5:53:5e:7e:62:6c:ad:b5:
                    a5:cd:3c:ac:e2:db:87:e2:63:ef:91:29:6a:7b:1d:
                    85:83:dc:e7:06:9b:b8:e6:43:b2:48:a0:d5:f9:36:
                    3e:a2:ec:92:62:f7:ca:4d:c1:d3:7c:62:ae:5a:d6:
                    b0:bc:b2:7e:35:23:33:4c:fc:31:f1:48:73:6d:2c:
                    60:34:c3:ae:01:7d:f5:c7:b1:33:7f:65:b4:4a:99:
                    73:3b:dc:da:b2:2e:00:eb:a2:d5:c1:e7:96:7e:27:
                    9f:ac:9b:08:55:ef:18:48:ac:fc:a2:b2:6c:f9:0f:
                    a0:b9:f1:87:f8:84:32:2d:4e:89:6e:99:b0:64:57:
                    cd:53:6d:08:07:08:f1:08:72:9f:b1:46:d7:6d:54:
                    98:43:47:42:80:e5:84:9d:52:26:ef:c6:86:4a:f8:
                    da:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:14:BE:F9:47:5C:B2:FF:0F:1A:8D:9B:66:2D:85:09:5C:DE:82:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b582df16-c65f-452f-ac4a-a1d3af6f8ad1/8d0cac73-efc7-398b-936e-1c9237bb4b8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b582df16-c65f-452f-ac4a-a1d3af6f8ad1/b582df16-c65f-452f-ac4a-a1d3af6f8ad1.crl

            X509v3 Authority Key Identifier:
                keyid:0C:A5:67:C6:89:7E:DC:8D:0C:9A:C7:CB:B3:45:F8:EF:39:13:AD:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b582df16-c65f-452f-ac4a-a1d3af6f8ad1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.123.28.0/22
                  162.210.128.0/22
                IPv6:
                  2620:a0:4000::/44
                  2620:114:a000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:15:13:23:64:bc:f3:76:6a:18:22:41:17:82:c2:82:ce:45:
         8a:c3:eb:34:ee:9a:07:32:5f:c2:f8:60:97:7d:70:c6:2c:75:
         24:02:d7:d4:ad:5f:54:34:54:f1:f2:f4:ce:b3:38:87:f5:a8:
         8f:ea:ef:03:c3:6d:85:bf:ca:04:52:b0:09:fc:d9:61:c0:fe:
         84:2b:74:94:48:6a:83:0f:71:c8:26:d9:0c:2b:01:dc:38:c6:
         48:6d:38:fd:45:0c:4d:5e:b5:2f:05:76:20:c5:c7:62:94:ea:
         37:49:8f:07:5e:c0:fd:24:60:23:58:a4:08:a3:03:11:bb:92:
         62:a7:e7:9c:a7:4c:67:9e:1c:78:de:ea:5d:21:bb:08:a9:61:
         35:79:bc:76:7e:4e:07:2c:b5:a7:01:55:bc:c3:ef:66:89:4f:
         7c:3b:35:1b:49:e2:4b:09:6b:7c:29:ec:1c:eb:8f:2d:6a:29:
         d4:4c:1f:71:da:02:c7:da:67:37:88:05:99:a1:5d:73:8a:5a:
         6c:08:05:e7:c4:2a:7d:1b:75:b9:f1:bc:64:06:dd:ff:32:37:
         22:e3:e5:5c:55:82:08:95:da:8d:2b:04:83:d7:86:a7:8d:6d:
         47:c9:0c:62:eb:aa:c3:c7:ec:18:41:a3:86:d4:92:87:19:d0:
         ea:cf:c6:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:16:14 2026 by rpki-client