Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/91de1e25-74f1-3efc-b8c5-339a8c47e2c7.roa
File:                     91de1e25-74f1-3efc-b8c5-339a8c47e2c7.roa (raw, json)
Hash identifier:          zZVq87ZHbHVgAqB/m0+GX8MqPS6Jj+NnnKlfaKpGplI=
Subject key identifier:   F4:93:4C:C2:6A:61:E9:7A:40:03:D4:2D:27:F3:B6:FF:E0:38:28:81
Certificate issuer:       /CN=d184e471-080a-4e54-bf94-60dd0c8beb48
Certificate serial:       010D0C9F4328584CE362063727076C4F4F0EE900
Authority key identifier: 82:2A:C6:5F:05:77:96:D6:12:FB:24:86:E6:72:C6:12:A5:B6:41:51
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/91de1e25-74f1-3efc-b8c5-339a8c47e2c7.roa
Signing time:             Tue 17 Feb 2026 02:00:31 +0000
ROA not before:           Tue 17 Feb 2026 02:00:31 +0000
ROA not after:            Mon 18 May 2026 01:00:31 +0000
asID:                     22926
IP address blocks:        96.47.192.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/d184e471-080a-4e54-bf94-60dd0c8beb48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/d184e471-080a-4e54-bf94-60dd0c8beb48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e3:62:06:37:27:07:6c:4f:4f:0e:e9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d184e471-080a-4e54-bf94-60dd0c8beb48
        Validity
            Not Before: Feb 17 02:00:31 2026 GMT
            Not After : May 18 01:00:31 2026 GMT
        Subject: CN=bf024ca6-7ce8-4568-90e5-1619b1dffbc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:e2:cb:49:ff:5f:bf:6f:8f:56:16:6e:b4:90:
                    f1:43:28:0b:6c:56:b7:c8:09:5f:ab:a3:56:61:53:
                    32:14:66:c3:1e:00:06:a2:d1:0d:07:2b:eb:35:30:
                    44:7e:de:95:5f:b4:75:6d:b0:f6:16:93:2b:5d:83:
                    35:45:a7:32:d4:6a:df:14:8f:e6:05:c8:91:05:b2:
                    aa:7b:88:97:a5:09:6d:de:12:a4:30:b2:6b:9e:5c:
                    fe:c3:3f:b4:be:76:9e:42:95:d5:30:2f:fd:49:77:
                    44:fd:d6:25:a4:67:b8:6a:ff:d3:9e:39:75:15:8a:
                    ab:f5:1a:ea:e4:74:d5:cf:16:83:02:c5:c8:1e:e2:
                    d2:1e:51:3b:e1:c3:33:0e:bc:dc:3b:7e:c7:87:9a:
                    5b:92:69:83:f7:8b:2c:73:e3:3e:35:fb:52:6b:a2:
                    3d:9f:e2:01:55:81:8d:c4:78:a9:2f:7e:1d:49:0c:
                    ef:84:12:34:11:80:92:ff:d9:14:40:b0:f5:c1:fc:
                    b6:67:b2:fe:35:46:de:8a:3d:a7:1b:00:13:79:f5:
                    13:60:28:d7:6c:11:a4:f0:3f:5f:e2:ea:bb:f2:b3:
                    1f:28:f3:c2:c9:90:22:2a:05:44:54:31:d7:70:e1:
                    71:08:30:c8:68:cb:ae:34:ae:f9:63:e2:fb:86:97:
                    dd:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:93:4C:C2:6A:61:E9:7A:40:03:D4:2D:27:F3:B6:FF:E0:38:28:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/91de1e25-74f1-3efc-b8c5-339a8c47e2c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/d184e471-080a-4e54-bf94-60dd0c8beb48.crl

            X509v3 Authority Key Identifier:
                keyid:82:2A:C6:5F:05:77:96:D6:12:FB:24:86:E6:72:C6:12:A5:B6:41:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.47.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:d0:81:14:dc:ed:49:e4:25:70:d1:95:95:fa:e8:90:fd:68:
         53:2f:48:b8:9e:97:e8:23:16:10:66:fc:e4:cc:d4:12:17:85:
         69:1c:24:cf:31:36:60:a5:64:0d:79:a2:8a:3b:e3:dc:ad:7c:
         a1:d1:a2:f0:7a:c6:05:25:33:f4:8f:ed:44:02:0d:2c:97:97:
         cb:9c:b3:e0:60:f8:b8:02:de:5d:97:55:f5:27:46:d4:3d:67:
         37:12:19:5a:fb:58:a9:5e:e6:53:f0:fe:2b:82:92:3d:f9:38:
         72:73:2d:18:47:28:e2:70:d0:07:70:9b:e7:9c:f0:95:ee:a1:
         e6:9e:85:b0:89:21:53:ee:d3:00:e3:1f:73:ce:2f:a3:2c:69:
         21:42:a7:ea:71:62:af:94:c5:c5:42:e2:7b:93:7d:52:09:fb:
         f0:d6:f4:10:b1:38:1c:4e:c7:d0:34:d5:db:3f:eb:e5:75:2f:
         fb:ba:6b:11:95:d0:3b:bc:ec:9b:c2:42:a2:4c:e2:ec:d0:18:
         21:27:92:b8:ec:1a:6f:10:ff:3d:01:47:98:4f:2b:31:bf:ca:
         39:c5:dc:d1:f2:e8:02:1e:4a:80:b3:b3:4a:2a:d8:c5:f8:bf:
         08:e7:16:52:85:81:c2:42:bb:a5:a4:3f:8f:73:65:04:93:ff:
         ee:eb:8a:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:40:04 2026 by rpki-client