Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/f02f1a48-ebf7-331e-84dd-8d68de321404.roa
File:                     f02f1a48-ebf7-331e-84dd-8d68de321404.roa (raw, json)
Hash identifier:          HdgJJg1Bk9ktgv6lh481gGVpZwrs9Oga8wadfyRX4Vk=
Subject key identifier:   96:54:A6:A0:E9:B7:79:49:16:2F:5D:BC:B4:55:01:09:EB:AA:68:1F
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F4328584CCBA77B118EF1C0664ED8D690
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/f02f1a48-ebf7-331e-84dd-8d68de321404.roa
Signing time:             Sun 08 Feb 2026 14:00:41 +0000
ROA not before:           Sun 08 Feb 2026 14:00:41 +0000
ROA not after:            Sat 09 May 2026 13:00:41 +0000
asID:                     54858
IP address blocks:        162.211.216.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:cb:a7:7b:11:8e:f1:c0:66:4e:d8:d6:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: Feb  8 14:00:41 2026 GMT
            Not After : May  9 13:00:41 2026 GMT
        Subject: CN=0093220c-0d84-4827-86bb-af8f23ddeda0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:ba:93:8c:3c:0e:45:39:13:76:79:dc:dc:81:
                    9f:2b:0f:60:71:be:32:e9:73:15:15:2e:3a:44:2c:
                    73:c9:10:11:04:ef:8d:08:2c:db:3b:15:25:36:96:
                    75:87:38:c6:a5:d6:b1:56:6f:18:1d:c0:e5:a6:0d:
                    e4:cb:d5:8d:b7:c6:3e:0c:d8:64:b3:23:a4:ea:15:
                    ca:d2:83:da:6b:c6:45:40:f3:41:17:58:00:16:b6:
                    8f:52:2f:5f:7c:a3:6f:92:0d:ed:df:d8:28:a1:b1:
                    3b:39:25:85:72:06:6d:2d:b0:ac:d5:5c:03:b9:bd:
                    bc:cb:de:3c:c0:c5:65:1b:b9:43:a0:44:e2:4d:94:
                    52:d3:e6:84:ea:cd:55:e7:e8:df:06:43:80:ed:66:
                    31:2b:f6:5a:07:b1:e7:ad:56:cf:28:8a:2b:62:af:
                    fe:82:c7:a4:2f:cd:10:48:13:8a:86:6e:8c:d3:0e:
                    7c:b0:b8:c8:62:6e:ee:86:b2:af:80:fe:b5:4d:98:
                    67:6a:50:3b:cf:ac:e0:07:ed:0f:49:9f:0d:66:d0:
                    da:28:75:db:9d:56:7b:92:75:37:cd:3a:8f:9f:6d:
                    8c:45:84:fe:03:af:48:f1:be:ce:84:ec:da:cf:1e:
                    31:be:0d:bb:e8:7d:ab:6a:ff:62:1c:35:b2:34:65:
                    d9:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:54:A6:A0:E9:B7:79:49:16:2F:5D:BC:B4:55:01:09:EB:AA:68:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/f02f1a48-ebf7-331e-84dd-8d68de321404.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.211.216.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:fb:3a:16:1d:76:ad:5e:ab:4e:76:66:11:13:33:c5:3d:0a:
         6c:49:04:6a:1c:28:ea:3c:20:83:28:cc:b6:43:44:56:47:da:
         c9:46:a6:4f:38:65:f7:45:58:95:2a:d7:3d:cd:75:43:31:af:
         55:09:7e:8c:2c:cf:75:9a:88:06:ad:0e:83:ab:71:67:34:ab:
         9b:e7:43:17:00:96:92:1f:e1:37:de:e8:a4:00:94:79:b6:89:
         d6:85:79:c9:f6:15:31:06:86:b9:fa:c3:c5:d6:ac:17:58:3f:
         0b:16:78:74:7a:d6:47:ee:b0:72:8d:1e:c0:51:bc:6d:18:32:
         e8:a5:1e:5c:bd:df:1d:11:c7:23:e4:57:1f:f6:31:cf:42:44:
         2d:c4:80:19:09:6f:25:08:30:ab:22:1d:c7:04:ad:a0:7c:37:
         16:f0:b5:18:bf:48:88:ee:38:9c:c3:63:c7:46:0b:d8:f2:e7:
         a5:58:de:ff:b5:13:4b:7b:58:04:98:88:bb:c1:94:36:0b:97:
         7a:a6:a6:2c:16:37:66:b7:15:f3:21:3f:61:4a:af:28:2e:db:
         06:62:30:59:d3:09:6d:92:0a:78:3d:ea:97:01:b2:36:a5:a6:
         39:53:b4:07:70:a6:b3:2c:2a:b4:38:cd:f5:7c:4c:6b:2b:9f:
         e9:d2:34:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:06:23 2026 by rpki-client