Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/141291a2-0ed7-3337-b072-e0411a6bdf5c.roa
File:                     141291a2-0ed7-3337-b072-e0411a6bdf5c.roa (raw, json)
Hash identifier:          u76KfaOMGfGaUcmFeFRzXgAPACFIsL+QBfW/VLsXmoE=
Subject key identifier:   76:42:97:5D:36:C1:66:73:80:57:F5:65:74:81:C8:15:9E:EF:EB:82
Certificate issuer:       /CN=5da1b383-f975-4fb1-9ce6-e43611eafa1a
Certificate serial:       010D0C9F4328584CDF324580DA7EA93D09049700
Authority key identifier: A2:6C:1C:4F:B6:21:94:6F:FA:A6:86:8E:E6:28:2B:79:CE:34:1F:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/141291a2-0ed7-3337-b072-e0411a6bdf5c.roa
Signing time:             Sun 15 Feb 2026 14:00:41 +0000
ROA not before:           Sun 15 Feb 2026 14:00:41 +0000
ROA not after:            Sat 16 May 2026 13:00:41 +0000
asID:                     30029
IP address blocks:        64.137.160.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/5da1b383-f975-4fb1-9ce6-e43611eafa1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/5da1b383-f975-4fb1-9ce6-e43611eafa1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:df:32:45:80:da:7e:a9:3d:09:04:97:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5da1b383-f975-4fb1-9ce6-e43611eafa1a
        Validity
            Not Before: Feb 15 14:00:41 2026 GMT
            Not After : May 16 13:00:41 2026 GMT
        Subject: CN=1d1b7899-60c8-4894-9e63-623b8e38d55f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:3f:82:ab:a4:4c:5e:01:4a:a3:15:07:70:cd:
                    c0:ad:d6:60:c3:81:0b:3b:27:06:4c:ca:5f:42:91:
                    d9:d2:42:67:e3:1a:e8:f5:6d:a7:02:fa:7a:ee:51:
                    05:dc:0a:99:2b:90:3c:86:bc:ac:d1:2c:4c:e7:8b:
                    2f:ef:62:7a:6d:8a:ca:01:49:0c:41:35:1d:dc:c9:
                    e6:cc:3f:76:91:de:62:45:89:b8:d1:98:d1:48:9e:
                    d4:89:ad:d7:75:8b:f0:48:da:78:cf:a6:80:45:6b:
                    7c:4c:4c:f6:9c:53:0b:86:74:8c:a7:c0:88:00:6d:
                    f1:c5:ff:7c:df:b7:93:eb:2f:3b:35:cb:a9:99:ca:
                    27:53:7c:9a:8f:de:8e:35:56:a8:cc:ff:b0:85:84:
                    02:70:ef:dc:3b:4b:58:2f:d1:0f:63:8a:ce:a0:50:
                    09:e6:0b:0c:0a:70:b4:3e:83:a6:68:2d:59:5b:9b:
                    4d:bf:fb:86:8a:f6:56:8d:fd:77:17:40:0b:8c:c3:
                    a6:86:6a:0b:00:ce:95:3f:df:1e:ce:f8:ec:7d:a0:
                    7b:bb:c8:b8:ad:f4:84:f5:af:2d:b8:9f:43:6a:61:
                    e9:f8:26:7c:5e:01:a3:68:f0:24:6a:dc:9a:e9:13:
                    2a:e4:47:b5:21:0d:5c:41:b4:6f:ee:cd:4e:54:b7:
                    92:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:42:97:5D:36:C1:66:73:80:57:F5:65:74:81:C8:15:9E:EF:EB:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/141291a2-0ed7-3337-b072-e0411a6bdf5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/5da1b383-f975-4fb1-9ce6-e43611eafa1a.crl

            X509v3 Authority Key Identifier:
                keyid:A2:6C:1C:4F:B6:21:94:6F:FA:A6:86:8E:E6:28:2B:79:CE:34:1F:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.137.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:05:45:61:a6:bf:8f:9d:35:29:b2:e5:03:ef:ff:93:35:20:
         21:12:f6:7b:f2:32:59:6b:01:33:52:8d:60:89:aa:36:77:c7:
         e4:60:3c:d9:22:79:60:75:2e:08:f6:94:54:89:b0:75:07:f5:
         a4:1d:46:08:1f:ea:a4:d4:af:92:fb:99:76:07:5e:7f:ca:35:
         7c:df:86:72:f2:91:44:a9:ca:64:2d:bf:f3:14:84:d3:19:dd:
         e7:00:d3:71:9f:07:8d:2c:c9:de:f0:35:cd:2d:40:0c:b9:4e:
         d9:47:1d:2e:ac:fa:fa:1c:53:f3:90:1c:4d:0d:41:2b:73:64:
         cf:7d:2a:a0:79:65:0f:c9:e8:db:b8:b4:83:b6:ba:12:38:22:
         0a:c9:88:6b:e9:54:3a:c7:51:a2:c6:99:1f:e9:3b:0b:58:21:
         73:a0:74:06:fd:17:b2:70:24:d1:89:01:44:6e:42:21:a4:87:
         64:92:6c:b2:8b:b6:01:8e:57:3b:ec:e9:f0:d8:95:a0:5a:e2:
         f3:cb:fb:0a:8f:97:5b:1a:64:10:0d:2a:08:65:7c:8e:8b:f6:
         d4:23:ad:47:d5:39:91:cf:f7:e6:97:43:2c:7c:2e:af:e3:3d:
         a2:8f:48:25:c8:c5:94:27:f0:3e:9d:a6:83:5d:8f:66:2a:78:
         0f:1a:ee:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:53:09 2026 by rpki-client