Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44c9f20f-94d3-45ab-b941-cca94fba4981/4dd0aad0-dc33-3e7a-9b0e-c9885656b35f.roa
File:                     4dd0aad0-dc33-3e7a-9b0e-c9885656b35f.roa (raw, json)
Hash identifier:          L/IQ/inTtkUdNjUfmpE8+Er9hSvCAeeEdY5nFi8PN0g=
Subject key identifier:   1C:78:6F:06:00:FF:3E:49:E2:F6:33:64:0C:C4:72:2D:B7:AE:3D:8A
Certificate issuer:       /CN=44c9f20f-94d3-45ab-b941-cca94fba4981
Certificate serial:       010D0C9F4328584CE62CCD35B4129DBFC0F465E0
Authority key identifier: 03:F6:F6:1C:42:4C:C7:52:8D:DD:05:02:7D:BD:F4:D8:FD:07:A3:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44c9f20f-94d3-45ab-b941-cca94fba4981.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44c9f20f-94d3-45ab-b941-cca94fba4981/4dd0aad0-dc33-3e7a-9b0e-c9885656b35f.roa
Signing time:             Wed 18 Feb 2026 02:00:31 +0000
ROA not before:           Wed 18 Feb 2026 02:00:31 +0000
ROA not after:            Tue 19 May 2026 01:00:31 +0000
asID:                     26342
IP address blocks:        170.194.134.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44c9f20f-94d3-45ab-b941-cca94fba4981/44c9f20f-94d3-45ab-b941-cca94fba4981.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44c9f20f-94d3-45ab-b941-cca94fba4981/44c9f20f-94d3-45ab-b941-cca94fba4981.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44c9f20f-94d3-45ab-b941-cca94fba4981.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e6:2c:cd:35:b4:12:9d:bf:c0:f4:65:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44c9f20f-94d3-45ab-b941-cca94fba4981
        Validity
            Not Before: Feb 18 02:00:31 2026 GMT
            Not After : May 19 01:00:31 2026 GMT
        Subject: CN=86776da8-1e36-4f74-bf4b-13f04ae6c3f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:6f:33:fa:f2:4e:90:e8:7c:33:86:f0:61:1f:
                    b5:4c:5e:e8:c7:6d:b6:14:25:a9:b1:8c:a3:92:c7:
                    92:02:fa:36:23:64:2d:63:dd:e0:cc:b8:7c:f1:b6:
                    e0:84:65:9f:bb:24:8e:d6:e1:34:bf:4a:45:f9:ba:
                    c5:dc:61:2d:27:04:39:81:b1:ab:a5:f2:6f:ae:d8:
                    72:f2:e9:7f:66:b3:a6:68:d4:ed:12:93:e3:a1:9d:
                    45:0d:bb:44:3e:bd:b3:fa:ef:cb:fa:21:4c:77:00:
                    9b:ff:4a:78:12:02:1e:e5:95:9d:bf:c2:a5:28:da:
                    cc:90:03:43:f2:78:8f:71:fc:71:f1:d6:08:b9:c9:
                    16:32:f1:ef:81:41:c5:31:ed:20:24:ee:8f:ea:b0:
                    60:64:f2:72:55:31:40:f9:92:29:99:3b:46:7f:e8:
                    2e:27:aa:5d:0f:89:9e:2a:a1:05:ed:f3:25:41:bd:
                    13:ed:de:a8:b4:15:8b:17:34:d2:2d:12:7b:22:e1:
                    59:ea:ed:c9:ae:a5:fa:a7:9e:25:eb:62:db:4f:be:
                    54:1e:4e:d0:1e:35:93:bd:23:f5:e1:1a:50:60:93:
                    7d:43:30:e8:97:7a:2a:d5:9a:54:7a:13:75:2e:8a:
                    2d:7a:7e:17:fe:2b:bf:a4:9d:c6:6e:07:78:8c:82:
                    d5:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:78:6F:06:00:FF:3E:49:E2:F6:33:64:0C:C4:72:2D:B7:AE:3D:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44c9f20f-94d3-45ab-b941-cca94fba4981/4dd0aad0-dc33-3e7a-9b0e-c9885656b35f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44c9f20f-94d3-45ab-b941-cca94fba4981/44c9f20f-94d3-45ab-b941-cca94fba4981.crl

            X509v3 Authority Key Identifier:
                keyid:03:F6:F6:1C:42:4C:C7:52:8D:DD:05:02:7D:BD:F4:D8:FD:07:A3:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44c9f20f-94d3-45ab-b941-cca94fba4981.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.194.134.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:92:33:52:db:dc:85:00:8b:59:65:b9:82:9a:e6:c7:89:04:
         49:9f:2a:05:37:7b:d3:eb:c4:8e:73:df:6c:71:78:91:f0:1c:
         bc:ba:10:a0:53:02:0b:ab:af:40:b8:10:57:e1:4f:09:33:eb:
         79:51:08:19:34:ca:20:36:b0:ca:1a:e2:5f:7d:06:f2:ec:96:
         d0:69:ed:76:1a:18:ac:10:e9:a4:13:9c:09:28:dc:25:1f:c3:
         58:c3:a9:43:1b:1c:02:90:0f:94:d9:2b:44:9b:60:fb:10:0a:
         5d:8f:9c:62:7b:8f:c2:a7:71:b2:f7:07:2e:47:c8:e6:5d:af:
         10:22:79:06:b3:da:d8:6d:cb:c2:83:e0:69:5f:fe:90:9f:58:
         3c:8d:b8:ae:cb:d9:7d:3a:fa:6a:4f:b4:d7:2d:e2:a4:ba:b9:
         9e:b7:52:60:00:47:3e:4b:e6:21:cf:b4:a7:34:9b:d2:27:08:
         2d:85:a2:5a:9d:9e:7b:9a:14:79:13:ef:9d:a7:f5:39:7c:e9:
         34:45:24:60:c2:2b:2a:71:7a:3d:0c:de:97:d1:f6:df:0c:79:
         ea:f5:28:f3:12:1d:c6:e5:53:4e:5a:c7:66:3c:da:a7:41:73:
         cb:19:84:f0:20:a1:77:5a:84:29:53:6b:49:bc:86:8b:29:3e:
         6e:67:e8:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 00:30:05 2026 by rpki-client