Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/95a09691-19ca-3a29-ba4c-510e9379fb3c.roa
File:                     95a09691-19ca-3a29-ba4c-510e9379fb3c.roa (raw, json)
Hash identifier:          J9snZd6mjqUIe/0eKN/zZZFQXN1gQ6FiYNohgJ8u8B8=
Subject key identifier:   64:88:B0:FE:F7:69:CE:56:B5:1C:E3:7A:D1:42:17:29:7E:46:37:48
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584CE62CCFCB98BD1D3068806768
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/95a09691-19ca-3a29-ba4c-510e9379fb3c.roa
Signing time:             Wed 18 Feb 2026 02:00:31 +0000
ROA not before:           Wed 18 Feb 2026 02:00:31 +0000
ROA not after:            Tue 19 May 2026 01:00:31 +0000
asID:                     3257
IP address blocks:        173.44.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e6:2c:cf:cb:98:bd:1d:30:68:80:67:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Feb 18 02:00:31 2026 GMT
            Not After : May 19 01:00:31 2026 GMT
        Subject: CN=d2abc4ca-9032-4ec2-88c9-060ca8a79f6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:0e:6e:a6:55:0d:ab:85:a7:0a:2b:57:ab:48:
                    99:69:ca:db:33:c0:cc:28:16:b8:5c:6d:ff:ea:04:
                    62:8b:27:9b:cc:b0:80:9c:c8:92:f9:68:03:b4:9e:
                    09:b8:7c:02:f5:c8:7d:70:ac:43:5a:b0:b7:47:48:
                    a7:f5:58:7b:fa:f2:9e:86:db:ff:47:d2:b3:37:43:
                    32:35:70:4e:b9:60:fe:59:00:e5:2b:1d:54:20:93:
                    8b:23:e3:62:96:a1:54:9c:21:fb:09:d8:09:a6:c2:
                    ed:7d:9a:40:9e:b2:14:15:45:e3:96:7f:5e:58:fc:
                    03:90:a7:17:02:4e:07:76:d6:6c:ba:72:14:b4:35:
                    a9:da:fa:53:06:e0:fe:47:43:5d:71:27:5b:81:a2:
                    0e:b5:7e:22:44:07:9f:4d:3d:f3:1a:de:e2:9d:a3:
                    f0:a7:12:28:df:7a:19:42:70:3b:89:d2:fb:43:33:
                    36:59:79:cf:49:f6:15:c7:e5:dd:83:f7:71:c9:50:
                    77:62:21:a0:d6:1b:f5:7f:5b:f3:95:45:f3:aa:74:
                    9e:c6:ce:a6:6c:7d:01:66:ad:77:cd:ae:67:ca:fa:
                    18:ed:8f:5b:c2:55:03:e0:70:7c:56:7b:7e:74:90:
                    9e:73:10:d4:02:97:4b:23:d5:2b:30:e4:f4:d2:e8:
                    8b:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:88:B0:FE:F7:69:CE:56:B5:1C:E3:7A:D1:42:17:29:7E:46:37:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/95a09691-19ca-3a29-ba4c-510e9379fb3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.44.146.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:5d:61:95:cc:d2:90:ec:af:b5:28:bb:d7:ae:04:29:40:de:
         69:23:da:71:60:f7:14:16:9e:f5:55:55:73:1f:63:e7:e4:b2:
         de:78:43:c0:2b:82:b4:5f:9c:e0:59:90:18:07:05:07:5e:3f:
         98:bb:80:0e:29:0d:8a:4d:a1:b5:7e:99:0d:41:80:05:71:1f:
         c9:dc:e8:7c:46:82:ea:a1:c4:7f:0b:bb:19:e7:ce:a7:fa:44:
         0b:16:72:0a:88:f0:10:f6:0f:2e:58:0c:c6:0b:6d:1e:04:cd:
         7d:03:a1:5f:b0:56:8f:4c:6b:58:73:c8:e9:70:8c:e5:ac:50:
         11:28:d5:5c:d5:8e:88:09:26:91:5b:58:a2:ff:6c:1c:75:f8:
         45:0a:79:33:81:40:58:fb:62:98:25:da:45:52:bf:fa:d7:96:
         ad:6c:fd:4c:73:57:bb:bf:3d:ab:96:c4:13:41:56:89:88:d5:
         4c:df:f9:25:9a:cd:ab:46:05:20:59:48:88:f5:84:3f:73:f7:
         71:39:af:cd:2d:56:70:17:01:b0:55:65:d2:7a:37:5b:6c:29:
         99:30:52:a0:8b:c3:0d:0d:83:be:ab:1e:6a:f5:27:df:02:8d:
         9f:4c:a3:00:17:9c:fd:11:b8:94:3b:f0:0f:26:40:1c:3d:ad:
         7e:d3:b6:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:11:52 2026 by rpki-client