Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/28b0e2e4-5f2a-4ecd-ad6b-97416951f017/088c14c0-87f9-31b9-9bc1-18e2325bcf39.roa
File:                     088c14c0-87f9-31b9-9bc1-18e2325bcf39.roa (raw, json)
Hash identifier:          H4xu2pmGW6K2GYE0c2zRKfQdAg/htn/DUHpSQEsVwz0=
Subject key identifier:   94:50:E0:EE:EC:45:BA:D3:6D:F8:E9:42:25:B8:6A:D5:00:36:E0:4D
Certificate issuer:       /CN=28b0e2e4-5f2a-4ecd-ad6b-97416951f017
Certificate serial:       010D0C9F4328584CE4C783354F809B43925A7CC0
Authority key identifier: 78:E0:85:36:78:70:3F:C9:6B:CE:79:FC:9F:32:58:F4:FF:32:02:55
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/28b0e2e4-5f2a-4ecd-ad6b-97416951f017.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/28b0e2e4-5f2a-4ecd-ad6b-97416951f017/088c14c0-87f9-31b9-9bc1-18e2325bcf39.roa
Signing time:             Tue 17 Feb 2026 14:00:41 +0000
ROA not before:           Tue 17 Feb 2026 14:00:41 +0000
ROA not after:            Mon 18 May 2026 13:00:41 +0000
asID:                     393249
IP address blocks:        137.82.0.0/16 maxlen: 16
                          142.103.0.0/16 maxlen: 16
                          192.5.96.0/24 maxlen: 24
                          192.73.5.0/24 maxlen: 24
                          198.162.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/28b0e2e4-5f2a-4ecd-ad6b-97416951f017/28b0e2e4-5f2a-4ecd-ad6b-97416951f017.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/28b0e2e4-5f2a-4ecd-ad6b-97416951f017/28b0e2e4-5f2a-4ecd-ad6b-97416951f017.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/28b0e2e4-5f2a-4ecd-ad6b-97416951f017.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e4:c7:83:35:4f:80:9b:43:92:5a:7c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28b0e2e4-5f2a-4ecd-ad6b-97416951f017
        Validity
            Not Before: Feb 17 14:00:41 2026 GMT
            Not After : May 18 13:00:41 2026 GMT
        Subject: CN=9198a15f-3a3d-4452-aede-d6c82ec0b587
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:30:09:e9:3a:11:f7:3f:c1:cf:09:8f:cf:d1:
                    f6:71:70:88:7c:da:9e:02:d0:87:74:a9:2e:e2:1d:
                    77:0f:49:50:76:3e:1a:af:df:75:ed:5e:24:e5:f8:
                    e5:83:c2:bd:62:e4:1e:ad:10:8d:ae:13:ed:61:70:
                    69:23:f4:6a:91:06:45:55:27:7a:12:67:b0:86:aa:
                    17:97:14:a6:51:56:f0:c1:95:7c:b2:63:09:bc:db:
                    c0:3f:6f:c2:d9:50:28:a1:e0:47:e1:30:b6:3b:e2:
                    66:96:cb:31:30:e4:94:94:53:3a:a7:e8:80:00:eb:
                    1c:c9:81:2e:7c:4d:12:5b:07:0f:a8:b4:98:18:ba:
                    8e:0e:28:65:f9:d4:47:56:18:1b:cb:ab:05:67:3f:
                    7c:3c:20:e7:7c:e9:37:dd:5b:89:40:33:4a:5e:45:
                    67:6c:ca:9f:be:82:c4:2a:fa:2d:5f:0d:12:f2:26:
                    e4:44:46:d5:67:da:bf:50:51:1b:b7:88:d6:3b:c0:
                    e4:7b:c5:5b:b2:c4:e2:65:eb:46:52:53:97:43:7b:
                    48:c3:cc:5d:9c:a8:82:59:e9:c6:75:39:bf:9e:c9:
                    70:ea:d5:5e:42:70:67:17:90:19:53:24:b3:dc:17:
                    b1:24:05:47:52:cf:48:e5:73:22:0f:18:4a:ec:17:
                    54:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:50:E0:EE:EC:45:BA:D3:6D:F8:E9:42:25:B8:6A:D5:00:36:E0:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/28b0e2e4-5f2a-4ecd-ad6b-97416951f017/088c14c0-87f9-31b9-9bc1-18e2325bcf39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/28b0e2e4-5f2a-4ecd-ad6b-97416951f017/28b0e2e4-5f2a-4ecd-ad6b-97416951f017.crl

            X509v3 Authority Key Identifier:
                keyid:78:E0:85:36:78:70:3F:C9:6B:CE:79:FC:9F:32:58:F4:FF:32:02:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/28b0e2e4-5f2a-4ecd-ad6b-97416951f017.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.82.0.0/16
                  142.103.0.0/16
                  192.5.96.0/24
                  192.73.5.0/24
                  198.162.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:27:87:80:ba:17:48:6f:c7:e1:9c:b2:8c:5e:6e:35:40:81:
         d3:ab:20:20:17:53:5e:b7:af:d4:7c:78:c5:ff:ec:48:67:7d:
         7f:38:78:c7:6c:ab:e5:f2:a5:52:cd:89:51:85:2d:cb:cb:2a:
         ae:3b:c6:be:6c:4f:7a:cf:14:bd:34:6b:04:83:ef:cc:14:09:
         80:6b:bc:2d:cf:4f:e5:1f:25:80:32:f2:77:78:bc:3f:ef:d3:
         e3:f8:59:ed:41:c0:e9:60:f6:1d:47:c0:7d:ba:2e:55:bc:c7:
         38:e0:e8:98:58:9e:4f:2f:96:45:72:ab:dc:b7:19:8d:4e:d5:
         b7:11:df:e2:22:c6:84:f5:c1:ce:a8:15:94:aa:64:95:4a:0b:
         1d:cf:35:ac:b0:52:3b:4a:dc:e1:84:49:a5:4e:b6:b3:77:88:
         ea:53:59:e5:e8:19:f5:52:03:06:56:a4:e8:82:07:b2:2c:b7:
         1a:41:23:b6:0e:97:4b:b5:ba:f1:7c:d6:d6:1e:25:02:84:4a:
         fc:2a:90:f6:f0:09:9c:c2:9d:35:86:70:a1:75:3e:a1:ba:58:
         7c:30:6f:0d:8c:40:b2:9e:08:06:87:21:72:8b:08:57:25:6d:
         e1:7c:54:45:12:5e:d0:d7:53:b1:ee:32:ed:db:d6:d4:45:39:
         6f:eb:bd:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:20:14 2026 by rpki-client