Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/7ed13295-9fa0-3a0d-8af0-6919933f3c94.roa
File:                     7ed13295-9fa0-3a0d-8af0-6919933f3c94.roa (raw, json)
Hash identifier:          OkOSwrx85XJEP5wlEdnF5tLtc/FEXVtBWF3xift9SzY=
Subject key identifier:   95:FA:A6:80:14:D4:AE:6E:93:16:ED:6A:F7:53:48:BD:FA:8F:84:D1
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F4328584CDC678A847C70F33FB982D650
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/7ed13295-9fa0-3a0d-8af0-6919933f3c94.roa
Signing time:             Sat 14 Feb 2026 14:00:41 +0000
ROA not before:           Sat 14 Feb 2026 14:00:41 +0000
ROA not after:            Fri 15 May 2026 13:00:41 +0000
asID:                     393249
IP address blocks:        128.189.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:dc:67:8a:84:7c:70:f3:3f:b9:82:d6:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: Feb 14 14:00:41 2026 GMT
            Not After : May 15 13:00:41 2026 GMT
        Subject: CN=412551ef-af77-4182-b84b-810fe2f136bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:85:53:41:1d:ea:3e:2b:04:79:cf:87:43:e1:
                    97:9b:05:a9:58:ce:8d:cb:71:aa:9c:01:1f:73:48:
                    72:cb:84:60:94:12:25:09:ed:78:ec:30:41:9e:33:
                    e5:26:5b:3a:0c:39:2f:80:92:a2:85:8e:1a:30:2f:
                    1a:7e:c9:d1:7a:2c:33:6a:71:89:d7:23:ef:cd:42:
                    7c:ad:77:cb:8a:e2:44:52:0d:c9:cf:da:d4:37:71:
                    2d:f7:e4:1a:8a:9b:d3:b7:fc:bc:bc:f4:8f:4e:80:
                    32:35:22:6e:3d:25:d2:5d:fb:3a:e9:c4:dd:06:19:
                    e6:6a:86:89:cc:ba:78:20:3c:a9:8b:16:c8:d8:ad:
                    8e:ef:ac:d9:75:63:73:be:46:60:6d:3a:98:fe:e7:
                    af:05:83:be:64:5e:33:3e:75:c2:9e:84:9a:4a:56:
                    60:5e:93:e3:4e:5b:b9:90:1c:c2:d1:92:15:96:17:
                    76:99:b8:35:af:f6:31:4c:e7:65:02:d4:b4:60:7f:
                    6b:cc:4c:ef:8e:1f:6f:19:f4:40:0b:ad:66:6b:f0:
                    43:da:21:93:65:22:9f:8d:07:16:1c:1d:32:78:fb:
                    78:11:5d:71:3c:b4:02:4b:aa:e4:cf:41:2d:b2:b4:
                    91:f6:30:60:d0:b4:a4:22:73:c2:72:df:4c:85:ca:
                    5c:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:FA:A6:80:14:D4:AE:6E:93:16:ED:6A:F7:53:48:BD:FA:8F:84:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/7ed13295-9fa0-3a0d-8af0-6919933f3c94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.189.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:71:5a:d4:88:aa:e6:77:15:c1:33:01:4d:1a:4d:cb:5e:b1:
         b4:cc:aa:4f:9a:36:f9:68:92:b6:9b:67:5b:8e:50:fa:75:24:
         be:93:5d:89:d7:81:31:2c:26:ed:8c:da:e7:89:b6:23:f8:ff:
         80:c9:e4:c6:b7:9a:1b:03:99:bd:ba:40:1c:22:cb:01:93:92:
         a4:0c:33:77:bc:87:8d:8e:96:5c:f6:1f:8d:d8:ea:c0:97:9e:
         d3:69:ba:41:36:c4:1c:34:c8:9b:34:d4:bd:27:40:28:b8:77:
         c6:e5:1b:3a:e8:f3:2e:24:4d:93:14:c7:fb:28:ef:77:20:9c:
         56:2b:d1:3d:a4:b3:d7:9b:f3:a7:d1:89:f6:31:62:7a:d4:23:
         6c:49:69:87:68:9c:6e:00:bb:b8:ed:54:06:e2:66:85:6b:2f:
         c2:69:68:7b:b5:c0:0e:dd:d2:ca:27:cc:e4:10:c1:fe:fd:ec:
         fa:b5:72:e4:73:fa:04:77:44:40:55:39:83:99:76:87:ad:f3:
         e9:a9:c3:b7:15:03:e2:8d:56:8f:74:29:cd:82:b1:88:fd:20:
         60:62:d7:2b:30:e8:02:21:a0:fe:c9:ff:2b:7c:72:52:1b:19:
         47:27:a1:20:4c:62:db:f0:a4:c6:e2:f7:05:85:81:b3:03:4d:
         1b:a2:ee:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:53:35 2026 by rpki-client