Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9/faed1f11-c26a-3505-a20c-ec43adab65f9.roa
File:                     faed1f11-c26a-3505-a20c-ec43adab65f9.roa (raw, json)
Hash identifier:          gfhLym7Vmam6DI6NEK+BViFmyRpAY7E8RJNJlgePqIQ=
Subject key identifier:   EA:00:D7:C6:2A:1C:5E:F4:EF:EF:F0:DC:70:76:A1:17:BE:52:F0:B8
Certificate issuer:       /CN=e7ade0d6-df84-4816-a5cf-cf568498fce9
Certificate serial:       010D0C9F4328584CE4C77B9DE21A694D0F0CA3C0
Authority key identifier: 8A:A8:CE:31:8E:6C:68:6F:13:B2:21:E5:F7:8D:49:0F:E7:6E:89:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9/faed1f11-c26a-3505-a20c-ec43adab65f9.roa
Signing time:             Tue 17 Feb 2026 14:00:41 +0000
ROA not before:           Tue 17 Feb 2026 14:00:41 +0000
ROA not after:            Mon 18 May 2026 13:00:41 +0000
asID:                     16509
IP address blocks:        168.238.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9/e7ade0d6-df84-4816-a5cf-cf568498fce9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9/e7ade0d6-df84-4816-a5cf-cf568498fce9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e4:c7:7b:9d:e2:1a:69:4d:0f:0c:a3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7ade0d6-df84-4816-a5cf-cf568498fce9
        Validity
            Not Before: Feb 17 14:00:41 2026 GMT
            Not After : May 18 13:00:41 2026 GMT
        Subject: CN=c7947a43-4e68-418f-8d1e-6c3c964cea58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:06:d3:77:1d:df:41:02:97:74:a2:2c:3a:8a:
                    78:66:29:41:9c:7b:f2:45:c2:67:9b:17:39:6e:56:
                    66:93:ea:f4:16:13:fb:15:ac:c6:68:6a:5f:49:25:
                    3b:ba:8d:ef:ab:f1:0d:53:ad:0f:57:ca:e3:2c:93:
                    7b:5a:24:aa:b5:cd:2b:59:af:ca:e1:72:c9:61:08:
                    7b:a2:7e:88:ac:04:0a:0e:1d:c2:ab:18:75:ae:ec:
                    ff:a1:84:4e:c2:03:1c:11:1d:d4:a2:7c:c6:ee:56:
                    a5:87:8e:02:f5:b9:5e:7e:dc:9a:23:f4:20:2c:1e:
                    1f:cb:e7:a3:76:1f:96:1d:24:71:87:79:5a:0e:fb:
                    21:f3:98:f9:09:00:c2:d4:09:02:22:1b:8b:45:80:
                    ee:2d:8d:07:10:3e:fe:87:ef:78:59:14:4a:4b:7d:
                    74:9d:27:95:90:17:ab:b9:de:f1:ec:0a:97:40:3e:
                    5f:9d:d3:6d:bc:90:0a:cc:89:94:97:1b:d7:c8:d2:
                    9b:b7:e4:b1:f0:3e:31:ac:eb:ed:c4:66:9d:95:de:
                    b0:00:87:94:0b:8a:5b:5d:14:50:82:37:3f:09:a6:
                    a0:ec:9c:36:d8:8a:ed:45:94:51:ef:05:91:61:99:
                    81:5d:b6:46:8b:af:36:0e:a5:a4:db:a9:17:30:02:
                    fc:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:00:D7:C6:2A:1C:5E:F4:EF:EF:F0:DC:70:76:A1:17:BE:52:F0:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9/faed1f11-c26a-3505-a20c-ec43adab65f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9/e7ade0d6-df84-4816-a5cf-cf568498fce9.crl

            X509v3 Authority Key Identifier:
                keyid:8A:A8:CE:31:8E:6C:68:6F:13:B2:21:E5:F7:8D:49:0F:E7:6E:89:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.238.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:ea:ed:c9:2e:5b:2c:63:12:54:8f:f7:7c:39:cf:82:5d:50:
         97:42:c5:53:0d:a5:9d:81:34:3f:80:11:14:e4:a7:0a:ac:b8:
         41:10:ad:cb:7f:ef:fa:d4:9e:b8:d3:cf:7f:63:c1:e2:3f:a7:
         79:90:77:7f:df:ee:12:ae:db:ec:05:bc:ed:a8:2a:00:6a:1b:
         52:2b:51:5c:dc:61:06:f0:2a:3f:3f:7f:61:87:dc:ce:30:e8:
         62:47:92:26:e0:20:da:b8:99:3f:2d:b5:41:dd:73:ef:9c:fc:
         3f:64:28:35:dc:c9:c2:35:ee:5f:b2:80:e1:fd:c7:95:7a:fd:
         f8:0c:b0:f4:1f:00:b8:ee:cd:4c:ac:c3:16:3c:57:ca:39:d6:
         6b:ed:01:32:dc:ac:46:63:09:f4:4e:14:1d:d1:ba:de:b4:51:
         d3:1b:ca:e1:19:55:55:ee:f2:55:08:6f:d1:9a:db:fe:08:63:
         d0:e5:a3:96:98:e6:28:82:b6:60:f4:3d:f2:76:f1:f9:30:e2:
         0d:f2:37:3a:0c:dd:06:5e:18:60:fc:57:71:1c:e6:e1:b4:5c:
         5f:45:8d:14:c4:ee:37:68:d2:9c:f0:b1:71:af:8b:f6:fe:68:
         9b:30:a5:c8:37:3a:2f:5f:56:07:ee:f8:af:fb:b4:06:1f:fc:
         e2:da:33:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:18:24 2026 by rpki-client