Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/dc72472d-44a3-3787-94da-f1ac290fccda.roa
File:                     dc72472d-44a3-3787-94da-f1ac290fccda.roa (raw, json)
Hash identifier:          7SNZD/qGz+L7d9BUfAxxZ8SRqsBfT+jzSBY5Ery006o=
Subject key identifier:   A1:56:23:01:1C:9C:AA:43:87:5F:63:19:A3:D3:72:3E:44:F6:5E:B8
Certificate issuer:       /CN=5f1a24bc-718c-4500-ad0b-a29f8b85d774
Certificate serial:       010D0C9F4328584CE8F77DA3AB49FE9B30CC46C0
Authority key identifier: 7B:B1:48:2E:6D:78:D7:CB:6A:51:DC:75:C7:EE:CF:C3:29:3A:B3:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/dc72472d-44a3-3787-94da-f1ac290fccda.roa
Signing time:             Thu 19 Feb 2026 02:00:32 +0000
ROA not before:           Thu 19 Feb 2026 02:00:32 +0000
ROA not after:            Wed 20 May 2026 01:00:32 +0000
asID:                     11808
IP address blocks:        129.101.108.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/5f1a24bc-718c-4500-ad0b-a29f8b85d774.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/5f1a24bc-718c-4500-ad0b-a29f8b85d774.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e8:f7:7d:a3:ab:49:fe:9b:30:cc:46:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f1a24bc-718c-4500-ad0b-a29f8b85d774
        Validity
            Not Before: Feb 19 02:00:32 2026 GMT
            Not After : May 20 01:00:32 2026 GMT
        Subject: CN=5e7f8206-4f8b-4baa-afb2-d97c4bb0edd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:72:29:23:6d:35:92:e3:66:c7:8a:71:96:d0:
                    19:e9:bb:49:de:5f:6a:bc:d8:03:9f:a7:f8:a7:6b:
                    50:0a:c3:d4:e1:d2:cd:f0:ae:e9:53:c2:a8:32:fb:
                    6b:7b:8d:ff:e4:f9:55:e5:fa:f8:17:d4:cf:7b:8e:
                    6b:83:c8:08:4b:84:5d:c5:10:b6:75:d7:12:47:23:
                    1e:d5:9c:ae:7c:ec:5b:4a:a2:a7:90:06:4f:d8:35:
                    f2:4b:a5:36:c3:e3:75:e6:78:4e:d5:39:ee:b4:ab:
                    ee:ab:75:e4:ff:dd:9d:11:13:26:9d:53:1c:d7:4c:
                    25:53:b7:e0:9b:f4:d2:9c:3a:2b:c5:3b:98:22:61:
                    70:a1:62:d2:90:24:21:72:bd:53:1b:74:15:66:4b:
                    ee:f1:4c:68:b0:cd:0a:c5:7a:58:48:82:0a:a2:e9:
                    8d:50:8f:bd:08:50:5c:8d:1b:f5:2b:3c:c0:c4:c8:
                    fb:15:d3:a1:11:d1:16:b0:f3:0e:2a:aa:eb:c9:27:
                    b8:03:1e:84:ba:91:7d:d5:ee:9d:25:11:3d:8a:65:
                    23:23:0c:d2:a4:d9:b0:93:ef:e9:3e:a3:03:ca:4e:
                    d9:f4:79:fb:5e:43:c2:ab:39:bc:33:ab:19:37:1e:
                    8e:a3:60:05:86:ff:15:b8:d5:fb:df:a1:d3:95:ed:
                    b0:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:56:23:01:1C:9C:AA:43:87:5F:63:19:A3:D3:72:3E:44:F6:5E:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/dc72472d-44a3-3787-94da-f1ac290fccda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/5f1a24bc-718c-4500-ad0b-a29f8b85d774.crl

            X509v3 Authority Key Identifier:
                keyid:7B:B1:48:2E:6D:78:D7:CB:6A:51:DC:75:C7:EE:CF:C3:29:3A:B3:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.101.108.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:00:b1:a7:bb:d4:cb:ba:2c:1c:b3:87:55:e4:3d:60:5d:93:
         dd:08:62:af:0d:af:9a:ba:47:6a:22:44:ce:62:97:78:d5:07:
         6c:ee:72:bd:06:1d:f5:36:4d:22:c2:9f:0d:8d:68:77:0f:38:
         d9:57:d9:f5:32:35:10:86:20:9e:35:d4:97:35:c6:d8:78:4d:
         0d:58:bf:29:96:03:86:e5:ef:25:77:31:d2:08:6c:e8:83:22:
         8b:62:8f:95:7e:45:2a:e7:81:8c:80:b4:17:bf:ec:0c:08:6c:
         e4:89:5d:ec:3b:fc:86:ac:1d:f1:39:68:17:82:1b:81:17:c9:
         4f:ba:01:9f:6a:4d:e8:e0:57:90:57:f3:a2:2f:8d:85:ea:05:
         f6:9f:74:5c:45:af:ac:3e:e0:5c:d0:49:e4:2b:d9:a3:6d:56:
         ae:9a:56:12:4a:a3:98:37:de:99:0e:19:74:3b:f9:4a:87:00:
         84:99:c8:a7:68:40:6b:33:08:e7:82:e7:cd:bb:b4:09:6b:0d:
         d2:3a:c3:21:31:52:c5:59:9c:98:74:ca:06:f2:42:21:9c:bc:
         aa:e3:5a:0c:e3:da:78:9f:40:3f:69:fa:6b:57:26:7c:08:4c:
         fa:94:01:ea:11:3e:c0:8c:58:93:bd:9a:32:8e:2c:10:76:03:
         97:7c:1b:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:51:30 2026 by rpki-client