Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/b5f29178-ab1c-3831-8d29-501dfe7028a5.roa
File:                     b5f29178-ab1c-3831-8d29-501dfe7028a5.roa (raw, json)
Hash identifier:          663C1HsZymw80EFNmXYZqn+E1MIDDjbivaMCNSxPvCc=
Subject key identifier:   B9:FB:EC:6A:E9:FF:80:3C:22:17:C1:24:FB:0B:19:A6:62:04:B4:66
Certificate issuer:       /CN=a0f9acf2-5a11-492f-93e1-1e221a6f4a92
Certificate serial:       010D0C9F4328584CED2780E94BF9D5C32A71A680
Authority key identifier: FF:8B:C2:C5:BA:95:8B:A9:11:C9:5C:27:5A:70:80:46:FB:4B:99:88
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/b5f29178-ab1c-3831-8d29-501dfe7028a5.roa
Signing time:             Fri 20 Feb 2026 14:00:41 +0000
ROA not before:           Fri 20 Feb 2026 14:00:41 +0000
ROA not after:            Thu 21 May 2026 13:00:41 +0000
asID:                     53768
IP address blocks:        162.134.98.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ed:27:80:e9:4b:f9:d5:c3:2a:71:a6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0f9acf2-5a11-492f-93e1-1e221a6f4a92
        Validity
            Not Before: Feb 20 14:00:41 2026 GMT
            Not After : May 21 13:00:41 2026 GMT
        Subject: CN=af03ecc5-9b72-488d-a67d-108517fc4229
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:55:b0:c5:4f:f9:98:60:48:cb:9c:3a:13:db:
                    b0:4e:b0:3d:82:85:5e:a4:e0:60:35:8a:dc:dd:98:
                    a9:b0:84:a7:25:57:a1:66:2b:9f:ff:e8:63:02:2e:
                    bd:ed:10:ab:50:30:a4:70:89:11:5d:f2:d4:89:09:
                    fe:b9:9b:35:3c:89:26:da:fc:6f:9e:0a:69:d2:c9:
                    b8:b7:d4:f7:0d:cd:61:fb:c5:87:12:7a:a5:66:f8:
                    f5:fe:3f:45:64:d2:ab:87:e9:38:2e:89:ab:6f:55:
                    43:aa:49:07:4a:e1:6f:ac:27:14:80:d5:d1:9c:93:
                    b0:7a:01:95:d6:91:cb:dc:67:6d:89:54:df:9b:59:
                    fe:1a:a8:e4:94:9b:58:72:c8:b7:8a:4f:87:08:d3:
                    82:62:e2:7b:ea:9b:53:da:77:fc:cc:c6:9d:b3:ba:
                    d2:c0:2b:49:74:fd:77:47:55:34:66:6c:58:e8:24:
                    af:db:dd:e6:d4:c9:f1:c5:30:0a:bb:6a:a7:58:b1:
                    89:c0:85:c6:cb:08:bd:40:77:f7:d7:60:ff:f5:da:
                    63:12:ed:fd:3c:04:73:9e:ee:36:03:7f:5c:03:83:
                    d7:16:34:70:7a:96:12:47:5d:86:49:85:b3:7e:8e:
                    5e:ad:04:fe:1c:99:00:c1:d1:d9:7d:6b:2f:05:6c:
                    25:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:FB:EC:6A:E9:FF:80:3C:22:17:C1:24:FB:0B:19:A6:62:04:B4:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/b5f29178-ab1c-3831-8d29-501dfe7028a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.crl

            X509v3 Authority Key Identifier:
                keyid:FF:8B:C2:C5:BA:95:8B:A9:11:C9:5C:27:5A:70:80:46:FB:4B:99:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.134.98.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:0c:5e:39:34:4a:df:af:00:9d:9c:76:65:de:e7:da:de:e3:
         2f:16:53:cc:72:b3:62:c3:58:03:0a:3a:5e:a5:56:98:62:2b:
         0b:38:21:27:14:ac:ba:10:58:25:da:f2:41:2f:1a:0e:cc:1f:
         1f:67:1f:70:1c:a0:ca:25:d6:81:34:96:03:16:3e:aa:7f:df:
         1e:00:06:57:89:f7:32:1a:b5:ba:d3:88:58:14:3c:8e:aa:54:
         8f:bf:2c:42:15:e6:46:4e:39:cb:6c:4a:a3:ae:62:92:75:b4:
         14:3b:37:59:c5:5c:5a:28:da:a0:22:8a:4e:63:0d:e1:ad:d4:
         b5:ac:a0:9a:8f:69:64:21:39:c1:fb:84:66:8d:7b:1f:43:16:
         e2:65:49:a7:08:2c:ef:5c:a5:57:8f:b9:8d:2b:22:87:87:f7:
         11:74:07:31:aa:5b:c6:43:6a:3b:4b:01:c5:17:ac:82:fa:44:
         21:62:87:d7:6f:db:50:96:8c:a8:73:50:67:e4:f7:eb:e1:47:
         77:27:c1:a3:a2:2e:64:c6:1e:9f:e9:1e:f4:b4:f6:25:c7:6f:
         59:c7:6a:a8:70:a1:9e:11:82:c7:69:aa:79:8b:fa:4f:21:dd:
         ff:6c:2b:f1:79:6a:1e:bb:72:c6:5c:36:5a:62:f8:04:4c:b9:
         dd:3e:25:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:25:07 2026 by rpki-client