Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be7d7ab4-136a-4b57-94de-4d26121783f3/e6928b91-ec45-395d-bbfe-e24a6348592f.roa
File:                     e6928b91-ec45-395d-bbfe-e24a6348592f.roa (raw, json)
Hash identifier:          aG3l0sRBajC9EzetfP3xDGqPgFzpK21WVWGPqlO2Apk=
Subject key identifier:   E8:9D:9A:60:56:78:63:8B:51:14:6F:D1:A0:34:42:30:95:BD:96:59
Certificate issuer:       /CN=be7d7ab4-136a-4b57-94de-4d26121783f3
Certificate serial:       010D0C9F4328584CED27926C788E76BEFD968180
Authority key identifier: AE:9F:AA:9B:68:F3:00:6B:A6:83:5A:D3:93:07:D5:25:AA:84:6C:65
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be7d7ab4-136a-4b57-94de-4d26121783f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be7d7ab4-136a-4b57-94de-4d26121783f3/e6928b91-ec45-395d-bbfe-e24a6348592f.roa
Signing time:             Fri 20 Feb 2026 14:00:41 +0000
ROA not before:           Fri 20 Feb 2026 14:00:41 +0000
ROA not after:            Thu 21 May 2026 13:00:41 +0000
asID:                     14041
IP address blocks:        147.153.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be7d7ab4-136a-4b57-94de-4d26121783f3/be7d7ab4-136a-4b57-94de-4d26121783f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be7d7ab4-136a-4b57-94de-4d26121783f3/be7d7ab4-136a-4b57-94de-4d26121783f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be7d7ab4-136a-4b57-94de-4d26121783f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ed:27:92:6c:78:8e:76:be:fd:96:81:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be7d7ab4-136a-4b57-94de-4d26121783f3
        Validity
            Not Before: Feb 20 14:00:41 2026 GMT
            Not After : May 21 13:00:41 2026 GMT
        Subject: CN=1baf638b-b595-403a-a299-8cdd56493618
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:ba:7b:ca:7a:25:78:0f:2e:3b:e6:fd:09:7a:
                    dd:91:ac:34:dc:c8:22:14:fd:28:a5:9d:94:10:66:
                    89:a3:3e:f2:c3:6e:1b:17:f3:b6:32:75:74:6a:2f:
                    ee:b0:54:8a:96:81:a7:ff:b4:fa:7b:63:43:42:f7:
                    78:00:b6:0b:9e:70:e7:e7:02:08:dd:f5:25:af:13:
                    80:f0:c5:d4:f6:3c:d6:75:81:b9:e7:40:4b:b5:65:
                    53:8d:0d:1e:80:48:b1:f9:bf:a5:cc:64:fa:da:9f:
                    fe:0f:04:7f:1e:95:2e:6d:f3:ca:ae:45:cf:f2:4c:
                    c9:ef:09:1f:bc:a7:99:fd:37:c0:db:e8:44:34:d4:
                    25:7e:0e:34:bf:86:93:85:71:d2:54:c8:3b:e1:13:
                    8f:73:7d:64:67:93:ad:3c:33:53:11:78:69:04:e9:
                    e1:0b:c5:56:42:cf:d7:a0:cf:26:b1:f1:1c:16:34:
                    dc:0b:01:09:dc:62:fd:45:d5:81:ea:4f:9e:04:ee:
                    3e:3c:00:bf:0d:04:aa:8f:94:e6:53:77:09:56:ba:
                    20:37:33:f0:7e:45:2e:f8:3e:a5:b7:78:6c:70:32:
                    cc:08:e1:21:c7:0b:db:1d:c7:d4:4e:61:85:5b:a5:
                    0f:1a:85:80:d2:aa:7c:98:8b:9e:3d:5f:90:64:77:
                    49:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:9D:9A:60:56:78:63:8B:51:14:6F:D1:A0:34:42:30:95:BD:96:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be7d7ab4-136a-4b57-94de-4d26121783f3/e6928b91-ec45-395d-bbfe-e24a6348592f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be7d7ab4-136a-4b57-94de-4d26121783f3/be7d7ab4-136a-4b57-94de-4d26121783f3.crl

            X509v3 Authority Key Identifier:
                keyid:AE:9F:AA:9B:68:F3:00:6B:A6:83:5A:D3:93:07:D5:25:AA:84:6C:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be7d7ab4-136a-4b57-94de-4d26121783f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.153.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:81:fe:6a:61:8e:89:b2:a0:ce:e1:d6:8a:3e:f3:70:64:bb:
         79:69:f2:dd:bf:4e:fa:90:16:a8:47:66:3f:54:b5:df:7e:45:
         5f:24:ae:de:40:99:ea:74:75:f9:b6:ac:21:6d:0e:da:14:aa:
         59:d2:c7:6a:b8:40:e4:ef:99:b4:2d:34:23:fc:ee:79:0c:7f:
         b0:1b:3d:30:85:7f:c9:06:90:d2:22:47:69:8f:69:59:11:e2:
         3a:57:ee:65:13:b6:03:e9:dd:a5:bb:a9:24:07:41:da:76:7f:
         33:eb:f2:69:81:52:a1:e6:64:01:ee:66:68:e1:2f:99:f4:3e:
         a5:e1:96:10:fa:52:e1:76:0b:27:7e:67:36:d1:69:c9:96:5e:
         29:94:19:83:9a:a5:46:e8:4d:6d:5f:d9:db:81:dd:b1:65:99:
         8c:f6:fc:8c:77:c6:87:58:69:f2:af:54:92:00:fe:7d:07:55:
         c0:00:ef:e0:2a:5f:9f:b9:c8:1d:b5:56:35:81:84:74:87:f7:
         e5:3a:d5:2f:38:42:40:36:68:ab:08:af:47:93:84:11:93:07:
         84:39:f3:f1:4d:60:36:25:33:ab:ac:e5:56:a6:53:92:0a:7d:
         fb:84:e3:1a:d1:0b:cb:dd:70:09:00:e5:1e:a8:39:57:03:d8:
         e4:2d:e3:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:33:27 2026 by rpki-client