Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/70cdd98f-46e9-3001-aca9-1db52b65e840.roa
File:                     70cdd98f-46e9-3001-aca9-1db52b65e840.roa (raw, json)
Hash identifier:          HorGtEscaDZeSQ7MsEPDGmZxYrlZDqwnj7YnTTx9DLE=
Subject key identifier:   5D:67:76:DE:25:22:C8:F1:A2:F1:FD:5E:D1:23:A4:7B:84:24:01:F8
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584CDB021EB3D1ECB7E625C25B90
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/70cdd98f-46e9-3001-aca9-1db52b65e840.roa
Signing time:             Sat 14 Feb 2026 02:00:32 +0000
ROA not before:           Sat 14 Feb 2026 02:00:32 +0000
ROA not after:            Fri 15 May 2026 01:00:32 +0000
asID:                     9009
IP address blocks:        174.140.192.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:db:02:1e:b3:d1:ec:b7:e6:25:c2:5b:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Feb 14 02:00:32 2026 GMT
            Not After : May 15 01:00:32 2026 GMT
        Subject: CN=c5d78541-e1e6-4e9e-93cc-72749f5fd4b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:f4:45:26:27:d8:4f:82:e6:6c:96:f0:c3:b3:
                    61:19:7f:1e:3e:f0:e2:24:ca:be:46:8e:33:f3:2b:
                    96:93:f8:94:24:f5:b3:4b:94:63:83:ed:60:30:f4:
                    bb:a7:e9:06:75:d3:b4:fe:5d:3f:0c:d5:98:d2:bd:
                    4b:4c:7b:c8:7e:39:b8:47:69:b8:2f:19:6f:8f:2e:
                    e5:15:b5:b7:1c:b9:b2:2b:54:35:b5:26:5c:be:a9:
                    31:da:fa:03:f5:88:0a:da:34:64:b0:ba:7a:81:95:
                    c3:8a:7e:ef:dd:9f:8b:c6:eb:2a:d4:83:13:da:cf:
                    d0:21:0e:0f:f2:ba:91:61:ae:48:e6:77:ea:75:a8:
                    01:ec:c7:72:9f:07:7c:0f:6b:60:15:6e:ac:80:61:
                    fe:85:32:aa:e3:97:e5:ce:9d:c7:d8:28:eb:e3:a2:
                    10:c5:24:2e:49:a3:30:60:35:fb:71:b1:b6:23:2d:
                    0b:51:7b:1e:61:3a:02:cc:52:5b:13:6a:d9:63:d2:
                    84:97:76:b4:42:9c:3b:45:48:49:54:c7:ee:f7:77:
                    2d:b4:7d:17:44:30:8b:14:21:c8:6e:c4:73:e9:f8:
                    ee:2a:26:0b:fb:30:61:3e:3b:80:95:73:ce:f9:78:
                    96:e2:d2:97:d5:50:d8:b7:91:3f:0a:60:a5:6d:56:
                    88:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:67:76:DE:25:22:C8:F1:A2:F1:FD:5E:D1:23:A4:7B:84:24:01:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/70cdd98f-46e9-3001-aca9-1db52b65e840.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.140.192.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:42:bd:3b:31:4f:53:64:dc:64:9f:a7:bb:33:4e:34:11:fc:
         6f:b5:a2:3b:e2:53:41:df:c9:51:90:dd:36:50:c0:05:3a:01:
         48:24:b3:a7:ad:bd:2a:b1:97:5b:a9:f8:e7:5e:cf:fb:40:27:
         58:29:37:0e:a8:f1:a5:47:66:77:ee:94:34:6e:99:34:7a:7c:
         6d:23:04:15:72:fd:d8:62:d0:c7:c4:fb:4a:88:ff:b4:a0:10:
         43:7f:02:8f:73:e0:5f:dd:63:da:07:81:e5:0e:32:8f:4a:cf:
         7f:83:0d:3f:fd:e1:d2:7c:9b:d3:2a:1a:f9:3a:85:4a:63:0f:
         7e:2b:bb:a2:91:a5:a8:28:89:87:a6:b3:c3:54:e8:30:a4:3e:
         cf:9c:6b:4e:97:d6:f5:06:24:fa:7d:86:3a:6f:fc:19:b5:83:
         2c:f8:c3:92:51:e8:04:0e:fe:da:38:7d:8b:26:3f:cc:05:b5:
         01:43:2d:19:3b:bd:8d:05:9d:ad:62:eb:5d:59:4e:8e:41:42:
         f3:c1:1b:6d:9c:dd:95:f3:cf:fc:99:b6:3f:d8:cf:80:e4:18:
         f2:20:46:aa:1e:1d:b9:47:9b:a7:45:c8:de:1f:dd:77:e8:d2:
         2b:3e:35:30:76:98:ef:10:56:b1:a7:f3:63:f4:e7:fe:c5:60:
         6f:e6:48:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:13:40 2026 by rpki-client