Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2e81ab17-e9ec-4223-ba5e-d6e26a69cd9e/5292dfb9-21b0-34f9-a00c-7362ceea7168.roa
File:                     5292dfb9-21b0-34f9-a00c-7362ceea7168.roa (raw, json)
Hash identifier:          fAWBT/gTaTR2z+4iayIQqB4hD1SNUadzI+miXDhNZYo=
Subject key identifier:   40:37:EB:70:FB:AD:DE:84:6E:46:76:2D:7A:CE:1D:C5:D4:4B:F0:19
Certificate issuer:       /CN=2e81ab17-e9ec-4223-ba5e-d6e26a69cd9e
Certificate serial:       010D0C9F4328584CDB0215DAF854621E409E2800
Authority key identifier: 5E:79:AD:88:68:E4:EE:11:F3:E4:DB:6E:8F:CE:E0:30:BE:FD:D5:BD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2e81ab17-e9ec-4223-ba5e-d6e26a69cd9e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2e81ab17-e9ec-4223-ba5e-d6e26a69cd9e/5292dfb9-21b0-34f9-a00c-7362ceea7168.roa
Signing time:             Sat 14 Feb 2026 02:00:32 +0000
ROA not before:           Sat 14 Feb 2026 02:00:32 +0000
ROA not after:            Fri 15 May 2026 01:00:32 +0000
asID:                     14618
IP address blocks:        172.83.86.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2e81ab17-e9ec-4223-ba5e-d6e26a69cd9e/2e81ab17-e9ec-4223-ba5e-d6e26a69cd9e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2e81ab17-e9ec-4223-ba5e-d6e26a69cd9e/2e81ab17-e9ec-4223-ba5e-d6e26a69cd9e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2e81ab17-e9ec-4223-ba5e-d6e26a69cd9e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:db:02:15:da:f8:54:62:1e:40:9e:28:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e81ab17-e9ec-4223-ba5e-d6e26a69cd9e
        Validity
            Not Before: Feb 14 02:00:32 2026 GMT
            Not After : May 15 01:00:32 2026 GMT
        Subject: CN=ce450f61-3c23-46dc-bcdf-6a6f58012bc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:7d:6a:31:b9:f7:21:8d:b4:44:0b:aa:43:14:
                    e9:d6:2e:c5:cb:fe:72:0f:95:bb:1e:90:1d:61:3e:
                    b5:6e:ca:d1:23:de:ed:b2:ad:90:ed:f9:51:3a:58:
                    09:16:84:83:f3:3a:49:a5:40:41:9f:61:5b:a5:e8:
                    2f:48:6e:43:7d:cf:56:f2:5b:bc:a0:21:87:bc:dc:
                    79:9f:07:af:7c:11:b0:97:7a:89:72:b2:34:8e:f8:
                    9f:a9:3e:3c:49:86:49:2a:97:6b:c4:47:c7:bf:82:
                    5b:f8:dd:51:f9:48:ee:38:67:6b:25:70:46:f9:60:
                    77:26:82:ae:f7:70:aa:76:74:70:24:c6:0b:c9:3c:
                    b5:b2:e2:b2:85:f8:e7:7d:0a:7e:f2:7b:ed:74:b8:
                    c6:f0:44:95:31:46:39:a4:e6:83:fd:35:f4:d5:06:
                    52:b3:86:44:7a:5d:50:8c:a1:cf:5e:b6:0f:78:a1:
                    ec:86:c8:e4:19:39:96:ea:0d:f6:89:02:8f:82:04:
                    39:35:81:a0:02:0e:9b:0d:b0:87:a7:91:22:db:45:
                    22:47:cb:04:f6:69:c3:56:cb:2d:dc:0a:d1:8a:3b:
                    95:6c:50:94:14:ad:f6:30:9b:33:b7:25:4f:6e:34:
                    59:3f:35:04:6e:5d:b5:7d:cd:75:ba:ea:d9:27:32:
                    56:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:37:EB:70:FB:AD:DE:84:6E:46:76:2D:7A:CE:1D:C5:D4:4B:F0:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2e81ab17-e9ec-4223-ba5e-d6e26a69cd9e/5292dfb9-21b0-34f9-a00c-7362ceea7168.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2e81ab17-e9ec-4223-ba5e-d6e26a69cd9e/2e81ab17-e9ec-4223-ba5e-d6e26a69cd9e.crl

            X509v3 Authority Key Identifier:
                keyid:5E:79:AD:88:68:E4:EE:11:F3:E4:DB:6E:8F:CE:E0:30:BE:FD:D5:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2e81ab17-e9ec-4223-ba5e-d6e26a69cd9e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.83.86.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:01:67:e0:1f:4b:ca:81:75:5f:6b:8b:c6:4b:db:ae:4c:7b:
         0d:81:bf:d5:2f:f2:bf:5f:73:18:4c:17:a0:6f:3a:40:31:e9:
         e7:51:76:97:22:28:a4:d2:ea:44:bf:6c:a9:e3:10:f7:73:ca:
         0e:8b:65:bb:38:a0:08:c0:44:87:ff:27:64:41:00:ab:a7:01:
         d0:9e:6e:30:87:4f:7f:4b:bd:2d:ec:2e:88:9a:50:ee:02:a9:
         3b:df:46:f3:f2:82:e6:24:52:2b:61:83:91:ce:74:47:89:59:
         8a:e8:e7:3f:87:d4:4f:1d:06:50:cd:60:a3:d8:a5:a7:db:a9:
         01:1c:19:54:db:5f:11:c1:5c:46:47:da:ea:ef:6f:53:e2:a2:
         3d:fc:1f:79:64:87:dd:82:b2:76:0a:21:4f:16:1e:52:7d:27:
         06:98:87:d8:5f:93:89:ac:1c:d6:29:7c:6e:f2:17:39:20:f0:
         d9:ba:ad:7c:13:1f:af:cd:be:a9:95:7c:c1:92:ce:c9:a3:87:
         bf:0a:6b:d8:9c:97:bb:d3:aa:e8:54:e5:3b:be:b5:03:69:5f:
         61:ba:0f:0d:dc:72:31:7a:e9:62:ab:dd:26:89:ad:f1:90:da:
         dd:83:c5:3e:57:23:13:54:85:25:16:83:ea:fb:e7:c2:f1:8d:
         7b:fe:13:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:27:08 2026 by rpki-client