Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/41c73df6-6306-3169-b5d3-8cc71a9fe952.roa
File:                     41c73df6-6306-3169-b5d3-8cc71a9fe952.roa (raw, json)
Hash identifier:          nMkQamadyt9pAhNhYbt034TbAmqDVZvuU/v17XaSYxo=
Subject key identifier:   FC:B1:E3:54:C5:78:9C:CE:3F:11:9F:5A:9D:97:9A:93:DA:3D:05:D1
Certificate issuer:       /CN=a0f9acf2-5a11-492f-93e1-1e221a6f4a92
Certificate serial:       010D0C9F4328584CED2787709D6FAA129E820080
Authority key identifier: FF:8B:C2:C5:BA:95:8B:A9:11:C9:5C:27:5A:70:80:46:FB:4B:99:88
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/41c73df6-6306-3169-b5d3-8cc71a9fe952.roa
Signing time:             Fri 20 Feb 2026 14:00:41 +0000
ROA not before:           Fri 20 Feb 2026 14:00:41 +0000
ROA not after:            Thu 21 May 2026 13:00:41 +0000
asID:                     18994
IP address blocks:        162.134.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ed:27:87:70:9d:6f:aa:12:9e:82:00:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0f9acf2-5a11-492f-93e1-1e221a6f4a92
        Validity
            Not Before: Feb 20 14:00:41 2026 GMT
            Not After : May 21 13:00:41 2026 GMT
        Subject: CN=147daa88-5d4f-4d98-808d-e8e0ba9f9567
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f0:f5:a9:56:97:68:47:bf:f0:ed:04:4a:b2:
                    de:fa:e6:be:5f:86:c9:9a:21:1d:1d:34:53:21:22:
                    ca:e8:ef:0e:5d:e0:a4:86:6f:9e:b2:31:62:ad:b8:
                    d5:33:ea:d2:92:8d:b8:f1:18:bf:0c:97:91:89:55:
                    b7:39:42:59:d5:65:bf:21:cb:8d:c0:47:74:0e:95:
                    5c:13:3f:cd:06:00:d4:4f:94:65:54:a7:db:3c:d4:
                    fb:64:f5:53:70:82:e4:81:5a:bc:17:3b:e7:1c:53:
                    b6:da:f2:64:b8:1b:8b:75:5f:23:61:b7:9b:5a:db:
                    cc:0e:68:a6:13:45:8f:5c:be:30:c2:f0:cf:56:56:
                    8f:42:ce:90:70:13:27:5e:63:63:6d:30:23:bc:20:
                    6f:95:53:05:00:a2:01:f0:6b:a6:d7:ea:4a:a7:66:
                    50:83:67:8f:2f:d1:0d:5c:fd:5d:bb:43:c4:ed:18:
                    1d:d8:c9:99:8d:b6:c6:7c:ec:83:2d:2f:58:4b:12:
                    29:ba:1e:3c:c8:17:c7:f9:a4:dc:04:32:7a:09:3d:
                    ae:12:7f:56:5a:9d:45:ad:34:0d:ea:9f:ca:cf:cf:
                    28:da:fb:d4:e1:a6:fe:ec:f9:8e:7b:e7:1b:60:84:
                    5c:6b:6a:10:54:c1:1e:12:0c:3f:7b:2d:ad:e6:27:
                    71:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:B1:E3:54:C5:78:9C:CE:3F:11:9F:5A:9D:97:9A:93:DA:3D:05:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/41c73df6-6306-3169-b5d3-8cc71a9fe952.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.crl

            X509v3 Authority Key Identifier:
                keyid:FF:8B:C2:C5:BA:95:8B:A9:11:C9:5C:27:5A:70:80:46:FB:4B:99:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.134.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:22:2c:f6:ed:76:cf:52:10:0c:2b:0d:de:36:5d:75:8e:9e:
         69:b1:42:44:da:72:bc:c0:9d:4d:97:05:81:21:a4:cb:1a:23:
         8c:df:ef:0a:07:e0:56:91:e7:58:d5:4d:b1:8b:3e:da:60:db:
         26:e7:62:20:d1:a8:57:d9:3a:1e:3d:8c:e7:b3:b9:54:a1:72:
         0f:2b:ed:ea:a1:86:83:5f:7d:39:39:31:0d:e0:6b:da:35:65:
         a1:05:e0:bd:1d:00:7f:0d:ec:5c:d4:3d:d7:b0:91:fa:a7:21:
         50:1b:99:1a:fd:30:6b:3c:3e:68:04:23:49:cb:ab:99:ab:bb:
         fc:f2:2d:5e:72:dd:89:9c:7a:e9:a2:b4:27:79:95:c5:b5:51:
         fa:54:c0:4a:23:39:d5:9e:bf:6e:89:28:f2:09:8f:52:b3:5d:
         00:23:76:b4:7b:10:9d:46:62:53:6b:0e:c4:c6:1a:e6:8c:a3:
         7e:0e:49:a4:b1:a6:74:63:c5:27:08:7f:08:cb:2e:3c:5f:d3:
         d8:cd:12:7c:b1:6c:df:0d:ab:2a:47:05:a1:e6:65:b8:dc:7c:
         59:d6:53:74:02:1c:d2:81:94:17:65:79:f5:15:b9:d0:53:ae:
         76:7f:5e:8f:f5:0f:07:5a:56:5e:e6:46:47:4d:cf:b3:59:e8:
         80:e5:4b:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:43:07 2026 by rpki-client