Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401/cfe92372-77e9-3125-b82e-5b5c0c3679ce.roa
File:                     cfe92372-77e9-3125-b82e-5b5c0c3679ce.roa (raw, json)
Hash identifier:          Xo9va7sd406lkaR+wMmzKx7N8RtRQyQaxa9/C7ZAqhY=
Subject key identifier:   70:E9:F8:9E:2B:25:84:69:C4:54:4D:DA:4C:61:55:50:23:44:11:39
Certificate issuer:       /CN=d3237408-0888-4b1f-bed5-a45886656401
Certificate serial:       010D0C9F4328584CC8DC9C17302BCDAB7A026A80
Authority key identifier: E8:D7:55:D9:7A:18:FA:F9:D3:AE:04:B7:D4:31:2E:BC:45:FD:24:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401/cfe92372-77e9-3125-b82e-5b5c0c3679ce.roa
Signing time:             Sat 07 Feb 2026 14:00:41 +0000
ROA not before:           Sat 07 Feb 2026 14:00:41 +0000
ROA not after:            Fri 08 May 2026 13:00:41 +0000
asID:                     393336
IP address blocks:        169.197.160.0/22 maxlen: 22
                          170.39.172.0/22 maxlen: 22
                          208.65.84.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401/d3237408-0888-4b1f-bed5-a45886656401.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401/d3237408-0888-4b1f-bed5-a45886656401.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c8:dc:9c:17:30:2b:cd:ab:7a:02:6a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3237408-0888-4b1f-bed5-a45886656401
        Validity
            Not Before: Feb  7 14:00:41 2026 GMT
            Not After : May  8 13:00:41 2026 GMT
        Subject: CN=9d99cdc7-8e04-4fee-9b5f-55cfec3dd39b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:87:a4:da:e5:98:b8:b1:c5:e3:7f:6b:d5:c2:
                    58:fc:6f:e2:7c:0f:6a:8d:a5:1d:30:70:a0:e8:6d:
                    c4:09:fe:7f:1c:27:15:99:9e:d0:d2:5f:76:89:5f:
                    db:ba:09:e5:2e:63:79:9d:ea:c0:e0:bb:b0:99:1b:
                    f4:47:9e:13:ee:97:45:ff:13:0e:b9:d5:b0:5c:b2:
                    cb:04:27:bb:35:90:2f:f8:7d:2e:aa:a8:9d:d5:1e:
                    2f:1a:75:a2:f8:4f:a2:d1:ee:d9:f7:6c:6d:27:60:
                    73:0f:d3:f7:5e:84:bd:ab:b0:37:ae:06:a3:88:64:
                    3e:65:0b:18:a6:49:d8:5e:a7:6a:a0:cb:e2:c5:13:
                    5c:22:f4:eb:0b:d0:98:7c:b6:1a:b0:0c:9d:0e:48:
                    87:e1:d7:23:84:04:e8:68:85:21:80:ce:fd:bd:49:
                    46:a0:f0:6c:f9:88:77:e1:c4:df:a8:3f:e5:84:8f:
                    95:5c:8a:b3:83:c0:33:49:35:9b:e3:47:31:b1:6e:
                    51:e7:71:d0:ea:7c:ca:79:e2:2c:67:1d:8b:dc:43:
                    bf:38:7c:02:68:4a:4e:23:55:50:b7:bb:6c:3a:1e:
                    2f:74:ae:e1:67:59:e4:47:bc:d2:55:ba:b2:a9:c6:
                    6a:6c:99:53:79:0a:70:42:9e:cb:04:46:2c:eb:93:
                    8c:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:E9:F8:9E:2B:25:84:69:C4:54:4D:DA:4C:61:55:50:23:44:11:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401/cfe92372-77e9-3125-b82e-5b5c0c3679ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401/d3237408-0888-4b1f-bed5-a45886656401.crl

            X509v3 Authority Key Identifier:
                keyid:E8:D7:55:D9:7A:18:FA:F9:D3:AE:04:B7:D4:31:2E:BC:45:FD:24:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.197.160.0/22
                  170.39.172.0/22
                  208.65.84.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:09:08:2e:75:13:53:32:67:c8:32:41:55:f3:09:a0:12:90:
         13:85:3c:9d:bc:cc:ed:36:ce:4a:9a:12:9c:46:1a:a2:74:fc:
         dd:1b:3a:be:04:dc:46:d2:b8:55:61:66:b3:f8:7a:73:0c:b1:
         5a:8c:43:18:a9:e6:ce:f6:27:6e:b2:ed:7b:7d:7c:32:19:7a:
         0d:a3:50:b4:1b:70:15:1f:af:9b:ec:f8:6b:4c:fb:06:43:ed:
         25:e8:8b:b9:6e:6b:69:db:f0:97:18:b4:05:63:77:f8:1f:3e:
         05:96:f6:90:77:40:2b:ab:81:68:aa:4c:43:1f:a1:8b:dd:f5:
         92:66:24:61:59:30:89:72:1e:bb:90:4b:db:7e:41:04:06:85:
         09:45:33:de:f3:39:68:b2:96:68:33:95:e5:4e:b5:64:ee:2b:
         79:1e:40:0b:0f:e8:c0:76:e5:87:20:38:fa:48:84:31:f8:21:
         d3:2b:d4:db:24:28:21:3e:ec:f7:1b:e8:ef:3c:6a:bf:1b:b1:
         b8:75:6e:1f:71:e8:10:49:1f:0a:1e:fa:45:b5:36:73:db:b1:
         6e:56:76:e8:5f:a3:fc:a6:8f:34:9e:0c:63:4f:ff:b8:f1:4b:
         01:e0:d9:b4:c6:aa:b9:37:ff:e9:de:05:eb:5a:ed:77:d9:c5:
         18:84:e5:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:32:29 2026 by rpki-client