Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/ae2d7c57-9385-33b3-8fce-32b111842f86.roa
File:                     ae2d7c57-9385-33b3-8fce-32b111842f86.roa (raw, json)
Hash identifier:          GdrAf9tvwiSayPX1kRPxVNK8X9Fk5wmaENknwebfuC4=
Subject key identifier:   CB:DD:DD:2D:D5:3B:0E:C0:94:E2:55:63:BF:64:C4:A4:8D:B7:87:BC
Certificate issuer:       /CN=b8a29c46-e0f1-4edc-988a-9420affbc339
Certificate serial:       010D0C9F4328584CEE8CDE731A364A659DCC37C0
Authority key identifier: AE:5B:91:0A:1A:F7:6A:0A:F9:C8:61:BA:B9:2C:80:AE:41:E0:79:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/ae2d7c57-9385-33b3-8fce-32b111842f86.roa
Signing time:             Sat 21 Feb 2026 02:00:32 +0000
ROA not before:           Sat 21 Feb 2026 02:00:32 +0000
ROA not after:            Fri 22 May 2026 01:00:32 +0000
asID:                     2386
IP address blocks:        170.2.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/b8a29c46-e0f1-4edc-988a-9420affbc339.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/b8a29c46-e0f1-4edc-988a-9420affbc339.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ee:8c:de:73:1a:36:4a:65:9d:cc:37:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8a29c46-e0f1-4edc-988a-9420affbc339
        Validity
            Not Before: Feb 21 02:00:32 2026 GMT
            Not After : May 22 01:00:32 2026 GMT
        Subject: CN=9af14ad2-32f9-42d0-87d5-f9ed96a9d8b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:31:7f:36:43:a9:c5:5a:35:23:03:77:4b:93:
                    93:aa:38:ff:8a:fb:b9:e8:10:5f:e1:88:5f:dd:08:
                    e9:66:5a:7a:ad:28:2f:d6:b4:58:ec:46:87:54:75:
                    35:19:13:fb:9a:b3:fa:2c:91:a3:d4:c4:f1:3f:a4:
                    d7:44:d6:f1:88:58:3b:ee:9b:ea:f2:2a:f1:2d:d4:
                    06:0b:c3:f5:60:30:b7:b6:48:77:af:be:2f:ba:7e:
                    0e:be:43:d8:48:09:e7:96:6e:85:e8:ee:d4:4e:28:
                    43:e2:fd:e7:f1:e6:0b:37:4b:9a:81:9d:01:50:de:
                    8e:c9:35:31:6d:e2:b3:06:80:8d:c6:e2:3c:fc:d2:
                    7f:a3:0e:65:56:a8:2e:0b:89:81:d7:1c:f2:83:dc:
                    dd:94:6a:eb:cd:70:21:92:8b:19:38:7d:08:f7:0f:
                    e3:a5:53:63:3a:53:56:51:23:02:93:71:3b:8d:7f:
                    ce:1e:21:99:1d:e8:e9:30:05:3a:e2:a7:d4:69:19:
                    6b:6c:c0:79:23:03:d9:1d:e2:f2:a1:c1:f4:79:31:
                    ff:49:36:37:62:b3:77:89:7a:41:41:e8:1f:d9:02:
                    ca:7d:87:ac:df:7c:b1:ed:22:a4:a8:9a:e0:7d:87:
                    f1:63:42:fb:ab:ad:8b:5d:27:df:67:0f:9a:0b:b0:
                    f8:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:DD:DD:2D:D5:3B:0E:C0:94:E2:55:63:BF:64:C4:A4:8D:B7:87:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/ae2d7c57-9385-33b3-8fce-32b111842f86.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/b8a29c46-e0f1-4edc-988a-9420affbc339.crl

            X509v3 Authority Key Identifier:
                keyid:AE:5B:91:0A:1A:F7:6A:0A:F9:C8:61:BA:B9:2C:80:AE:41:E0:79:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.2.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:92:b4:92:bf:44:03:cb:1f:a0:62:81:91:b9:32:cb:9d:78:
         e3:3e:f0:79:58:c2:99:a7:6b:31:26:87:21:1e:f5:70:74:ba:
         8b:ad:a6:37:f4:d9:b4:53:2f:33:09:71:44:df:17:f2:96:94:
         9a:cb:95:21:1c:69:e4:fb:9b:df:c2:a4:b2:cb:4b:6f:e2:e4:
         1b:8a:11:fb:25:29:15:a1:c5:74:ab:58:4c:24:db:e2:3a:ee:
         44:09:c4:65:ea:7d:35:41:c6:96:85:c4:75:c7:91:1f:b2:4c:
         39:16:af:57:a1:42:5f:61:3a:e3:d4:72:43:e3:ea:c3:d3:29:
         39:3e:09:23:ab:dd:f9:32:94:7d:5e:2f:43:83:a7:48:12:b1:
         48:ef:06:4f:c1:f7:b6:89:4d:6c:e8:70:eb:f4:ac:6f:c1:b1:
         e3:45:30:5d:e6:7f:62:87:b2:76:35:37:6d:7c:14:72:33:2e:
         00:e6:b2:9f:f4:f6:6d:ae:3d:96:0d:d8:08:d4:a0:96:cd:5c:
         b7:25:a4:5b:d9:fd:95:a9:68:fd:09:60:94:52:9d:73:cb:ad:
         16:05:86:5e:cd:00:4b:0e:c1:97:bb:44:07:50:08:a5:47:f4:
         91:2e:2a:7d:3b:03:39:c3:9f:9c:11:69:e8:78:c0:48:f2:f8:
         50:49:e5:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:10:40 2026 by rpki-client