Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/b129fe3d-6288-38e8-826b-245ab9b23c9e.roa
File:                     b129fe3d-6288-38e8-826b-245ab9b23c9e.roa (raw, json)
Hash identifier:          e6Pw9ipyG3hRmITeBU2vZNqzb4mvkIsM7PFsyFIrkB0=
Subject key identifier:   15:22:5F:5C:85:79:F9:E2:15:50:BA:8F:B8:29:B9:12:53:29:4D:E3
Certificate issuer:       /CN=5da1b383-f975-4fb1-9ce6-e43611eafa1a
Certificate serial:       010D0C9F4328584CD6F83E29AE9517C0CBF3AAC0
Authority key identifier: A2:6C:1C:4F:B6:21:94:6F:FA:A6:86:8E:E6:28:2B:79:CE:34:1F:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/b129fe3d-6288-38e8-826b-245ab9b23c9e.roa
Signing time:             Thu 12 Feb 2026 15:17:48 +0000
ROA not before:           Thu 12 Feb 2026 15:17:48 +0000
ROA not after:            Wed 13 May 2026 14:17:48 +0000
asID:                     397362
IP address blocks:        216.198.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/5da1b383-f975-4fb1-9ce6-e43611eafa1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/5da1b383-f975-4fb1-9ce6-e43611eafa1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d6:f8:3e:29:ae:95:17:c0:cb:f3:aa:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5da1b383-f975-4fb1-9ce6-e43611eafa1a
        Validity
            Not Before: Feb 12 15:17:48 2026 GMT
            Not After : May 13 14:17:48 2026 GMT
        Subject: CN=e404aa4b-eb7c-4a82-82e8-ef7fd8f63ddb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:93:19:50:d7:70:4f:32:a3:81:8a:9d:e8:90:
                    cb:1e:ad:9f:87:c3:7f:f1:a6:4e:37:02:07:22:52:
                    f0:e8:3e:1f:4f:1e:21:ef:b3:df:68:3b:24:ab:d9:
                    e0:e4:3e:bc:b3:8d:74:66:a5:6f:9c:42:ed:2a:99:
                    a5:7f:c4:80:dd:c4:d0:01:6b:aa:e7:70:22:c6:97:
                    29:2f:95:d9:40:f1:45:da:e0:fc:22:9d:cb:40:23:
                    a0:c8:21:06:c0:f6:05:b9:12:26:20:08:8c:f7:22:
                    1b:1f:4d:73:33:9f:df:53:da:40:1e:41:29:a8:ab:
                    eb:e3:a8:77:2f:c3:cb:28:09:59:03:4b:a5:a6:d4:
                    0e:07:58:4c:46:77:d4:83:5f:54:0a:6b:4e:bc:21:
                    44:32:29:a2:ce:f8:97:cb:b9:e0:8c:ab:40:d8:a8:
                    ec:8a:42:f3:9e:e1:08:b3:69:52:dc:be:89:54:48:
                    3c:d2:f2:4c:7d:49:09:af:a8:8f:d9:5e:82:f2:01:
                    18:64:76:01:7a:1f:72:f2:0b:23:c7:b7:84:1f:52:
                    10:51:62:52:62:4a:7e:8d:70:99:57:d3:1e:b4:b8:
                    ba:c1:89:ab:b0:ce:80:ee:d9:94:bc:66:1c:0f:f5:
                    c4:b5:cb:99:bc:c3:5a:e6:eb:c9:fc:f2:82:61:75:
                    42:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:22:5F:5C:85:79:F9:E2:15:50:BA:8F:B8:29:B9:12:53:29:4D:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/b129fe3d-6288-38e8-826b-245ab9b23c9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/5da1b383-f975-4fb1-9ce6-e43611eafa1a.crl

            X509v3 Authority Key Identifier:
                keyid:A2:6C:1C:4F:B6:21:94:6F:FA:A6:86:8E:E6:28:2B:79:CE:34:1F:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.198.173.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:ab:e6:ec:de:95:29:fb:97:75:a7:e2:0d:62:70:16:57:11:
         13:64:e0:91:48:9a:1c:d2:f4:dd:2b:2d:09:f3:fb:11:29:11:
         72:18:71:a7:8b:57:72:54:bf:2a:31:b1:dd:fb:6c:32:32:a4:
         69:cb:e2:10:23:b4:63:1d:6f:f9:1f:23:30:14:ed:39:14:6e:
         18:f0:2f:3d:05:bc:df:95:35:e8:0e:47:dc:93:81:98:b8:db:
         54:e5:0d:7a:d1:6c:f9:cb:e8:eb:a2:5e:87:1c:32:e5:44:a4:
         e3:67:e9:05:23:61:11:e6:23:fc:a6:1d:a7:66:d3:86:66:82:
         6e:6d:88:e9:c7:d8:9c:ea:c5:1b:16:fd:f4:2d:61:83:7e:de:
         ea:3e:9e:f9:66:4e:1f:b6:d8:b0:7c:4b:8d:77:ec:0f:3a:33:
         8e:23:d4:16:68:11:6c:69:25:60:9c:ae:ff:ec:88:69:bb:b4:
         4f:e9:4d:5e:28:2e:61:b5:77:49:23:44:80:e3:a7:dd:73:da:
         86:e0:6a:79:b5:84:ab:cf:69:11:a1:2c:5a:f4:7f:7a:7f:c5:
         de:f7:fb:9f:04:25:d6:15:35:26:02:d8:68:37:cc:40:b9:5a:
         6e:f7:50:25:95:ff:c0:dd:4e:47:c7:4f:2a:7d:70:f7:4d:d0:
         8c:52:53:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:30:42 2026 by rpki-client