Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/8d5e176d-a6df-34a8-9138-df6c39ba9504.roa
File:                     8d5e176d-a6df-34a8-9138-df6c39ba9504.roa (raw, json)
Hash identifier:          8sKDHpEw9XSpP51Wjtr7NFKu1yzB/AxpGtPcfwV5yrg=
Subject key identifier:   FA:E8:46:DF:7E:23:4E:CC:FA:67:CE:74:88:B2:A4:52:2C:E7:E2:1E
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584CD4079E26311B11206B5F8700
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/8d5e176d-a6df-34a8-9138-df6c39ba9504.roa
Signing time:             Wed 11 Feb 2026 14:00:41 +0000
ROA not before:           Wed 11 Feb 2026 14:00:41 +0000
ROA not after:            Tue 12 May 2026 13:00:41 +0000
asID:                     54113
IP address blocks:        199.232.16.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d4:07:9e:26:31:1b:11:20:6b:5f:87:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Feb 11 14:00:41 2026 GMT
            Not After : May 12 13:00:41 2026 GMT
        Subject: CN=c2c1ce69-f29a-46cf-b4a9-02dd07b45760
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:78:02:8a:f1:45:a7:7f:8b:c8:3b:ed:ca:71:
                    e9:02:f7:af:65:7f:94:ba:93:7d:8a:c3:c2:6d:f9:
                    55:a5:2e:90:66:71:e5:1f:16:ac:3d:03:ad:d3:a5:
                    5d:d5:11:38:9c:ca:fa:41:89:8a:a9:61:28:d8:47:
                    26:87:1a:d7:a3:4b:b5:76:8a:2a:cb:6b:23:c1:7f:
                    a8:d6:11:7e:ba:d4:38:75:e1:ef:ff:b1:30:a2:4c:
                    9e:e0:ec:a6:6f:c3:f7:36:9d:45:a7:29:7b:a1:3f:
                    58:20:3f:e9:8d:dc:17:9f:ed:66:24:05:54:6b:de:
                    f9:23:50:bc:5d:db:e9:3d:dd:0d:32:01:f5:eb:db:
                    82:54:05:05:33:7e:41:d5:60:01:7b:c9:c7:25:6d:
                    da:72:2a:b9:70:87:c6:6e:67:1e:8b:47:8d:f6:b0:
                    17:2b:6b:8a:c2:da:c0:8e:a4:e7:5f:e5:af:d4:87:
                    2c:8d:08:d1:bd:17:20:46:07:b5:2b:9a:e7:78:44:
                    52:99:5e:5f:5b:15:7f:aa:ee:3d:78:e0:52:cf:87:
                    cb:db:88:ec:61:5a:f6:9f:b4:30:6e:4b:68:31:56:
                    9b:7c:28:ea:53:a0:f9:58:bd:e5:e8:6d:b8:55:3b:
                    17:33:4d:2e:3e:78:7e:45:97:e8:16:3b:c6:27:80:
                    0d:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:E8:46:DF:7E:23:4E:CC:FA:67:CE:74:88:B2:A4:52:2C:E7:E2:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/8d5e176d-a6df-34a8-9138-df6c39ba9504.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.232.16.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:6f:20:d5:7e:cd:5e:64:1e:80:1f:ac:5e:32:18:62:0b:37:
         cb:20:cb:d4:f0:36:12:1f:41:1c:e4:4f:f2:e0:dc:6a:1a:bc:
         3c:f7:55:5a:e1:1a:c8:df:ad:c5:8f:1d:8f:a4:db:6b:d1:20:
         d3:e1:83:f2:ca:6c:b1:a2:d2:97:f6:13:af:81:48:3a:95:d1:
         e8:04:4e:58:ff:2a:fa:3d:fa:da:01:fb:3b:1e:4d:a4:ac:e4:
         bd:ef:1d:83:cd:d5:c5:c1:ae:66:5f:9c:a7:93:94:08:5d:f3:
         7b:e8:02:4e:ea:42:e1:22:70:c8:89:4f:7e:b9:9f:5a:a1:36:
         c0:95:46:b5:1e:04:54:59:bd:8b:9f:48:ae:aa:92:15:0d:39:
         3d:7b:35:e8:a2:67:ca:94:58:9b:55:80:b6:1d:f7:68:e8:ae:
         4b:8c:c3:40:68:ba:2a:aa:18:aa:44:24:66:cf:3d:c3:a7:e8:
         97:e6:74:0e:47:73:6b:fc:1a:c0:de:06:14:7a:a5:4d:7c:b4:
         78:04:74:6c:69:29:b4:9d:5a:b4:e8:5c:70:44:07:6f:0a:80:
         f8:08:ee:3f:32:d8:77:7e:8a:49:c1:cb:cd:1d:be:a7:d3:8f:
         7a:6f:7c:e3:6f:89:16:6b:d2:a9:b5:34:d8:b4:7f:f9:7c:06:
         b6:ce:28:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:49:54 2026 by rpki-client