Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/79d7db1b-e77b-49b5-a68f-49ef9fbe26ee/86f4feea-5ef5-34e1-bbb5-83b0de7d5c76.roa
File:                     86f4feea-5ef5-34e1-bbb5-83b0de7d5c76.roa (raw, json)
Hash identifier:          Yutqj0NlPZQJM2eqkiP+ep7XWlj5O/yg3IgacqI4Cgk=
Subject key identifier:   55:1A:66:94:2C:54:6A:01:FA:03:52:5C:99:C7:B2:AB:3C:34:15:09
Certificate issuer:       /CN=79d7db1b-e77b-49b5-a68f-49ef9fbe26ee
Certificate serial:       010D0C9F4328584CE0974DB9F5DF7CC58958C100
Authority key identifier: E2:5E:D9:3A:A9:DC:FD:05:3F:77:83:A1:B0:70:9E:0E:07:91:E6:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/79d7db1b-e77b-49b5-a68f-49ef9fbe26ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/79d7db1b-e77b-49b5-a68f-49ef9fbe26ee/86f4feea-5ef5-34e1-bbb5-83b0de7d5c76.roa
Signing time:             Mon 16 Feb 2026 02:00:32 +0000
ROA not before:           Mon 16 Feb 2026 02:00:32 +0000
ROA not after:            Sun 17 May 2026 01:00:32 +0000
asID:                     22995
IP address blocks:        208.114.188.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/79d7db1b-e77b-49b5-a68f-49ef9fbe26ee/79d7db1b-e77b-49b5-a68f-49ef9fbe26ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/79d7db1b-e77b-49b5-a68f-49ef9fbe26ee/79d7db1b-e77b-49b5-a68f-49ef9fbe26ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/79d7db1b-e77b-49b5-a68f-49ef9fbe26ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e0:97:4d:b9:f5:df:7c:c5:89:58:c1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79d7db1b-e77b-49b5-a68f-49ef9fbe26ee
        Validity
            Not Before: Feb 16 02:00:32 2026 GMT
            Not After : May 17 01:00:32 2026 GMT
        Subject: CN=fb9816cf-2231-4e9a-8c42-cc7bf9e7e19e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:b4:c8:af:4a:12:5b:c2:8a:27:63:5c:38:b0:
                    0e:75:8f:da:78:53:5b:af:4a:b0:88:ba:74:ad:1c:
                    05:6d:88:7e:b3:b4:6c:ea:7f:58:5d:6b:d7:d4:b9:
                    d1:30:01:90:ef:76:02:f0:17:60:39:ca:68:f0:5b:
                    d5:c0:16:dc:9b:8c:a5:26:0d:b4:5c:ba:17:b2:27:
                    77:6f:4c:e2:e5:ce:2c:df:cf:10:26:b4:8e:0c:cc:
                    21:05:4e:4d:cc:55:67:72:0e:2f:5b:74:fd:1f:42:
                    73:e0:cb:88:f0:a5:43:7e:27:f3:ea:09:0c:e7:40:
                    93:d7:c3:41:ef:7f:b1:bd:64:a2:52:b9:f7:2a:10:
                    a4:13:56:84:93:3e:22:b3:2e:b2:47:6d:90:d6:3c:
                    f2:8f:fe:87:68:0a:bb:42:0b:b3:32:9c:87:6f:d8:
                    1d:60:a9:55:82:f6:30:b8:03:28:b4:bd:62:e9:8d:
                    7f:71:6a:69:4b:39:52:b8:6c:de:ff:03:4f:f9:42:
                    99:71:53:94:d3:ea:ab:00:ec:67:13:0e:2f:36:ae:
                    db:5f:d1:c2:c6:2f:0a:38:0e:40:6c:49:12:e3:7a:
                    40:e3:0e:c1:58:27:f2:1e:30:39:30:20:0c:c8:5c:
                    8b:14:7d:96:39:90:62:be:4f:bb:6e:0b:19:9b:40:
                    6e:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:1A:66:94:2C:54:6A:01:FA:03:52:5C:99:C7:B2:AB:3C:34:15:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/79d7db1b-e77b-49b5-a68f-49ef9fbe26ee/86f4feea-5ef5-34e1-bbb5-83b0de7d5c76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/79d7db1b-e77b-49b5-a68f-49ef9fbe26ee/79d7db1b-e77b-49b5-a68f-49ef9fbe26ee.crl

            X509v3 Authority Key Identifier:
                keyid:E2:5E:D9:3A:A9:DC:FD:05:3F:77:83:A1:B0:70:9E:0E:07:91:E6:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/79d7db1b-e77b-49b5-a68f-49ef9fbe26ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.114.188.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:62:80:6d:aa:f1:81:4d:a8:bb:2f:2c:44:76:77:a2:af:c0:
         62:f6:a8:47:58:6d:13:d8:a2:26:6b:35:dc:56:a9:c7:86:f5:
         ef:fc:c4:b1:95:a9:fa:32:dd:a7:8b:2a:39:2c:52:d7:ab:07:
         93:dd:3f:fb:e9:90:06:42:43:ec:85:a6:7a:1f:34:4a:f2:4c:
         f0:e4:c8:d2:ed:44:ff:2d:63:65:cd:5f:91:a8:be:55:37:bd:
         75:2c:ab:f9:ff:64:8f:2d:d6:6c:4f:2f:3d:15:00:1f:bd:6f:
         e2:d4:7b:d2:2c:dd:f1:20:ef:06:bf:b4:cd:7f:1b:6a:59:a8:
         cb:a5:23:bd:f3:6e:1d:73:46:ab:28:3d:99:ea:9a:89:91:1e:
         0e:b6:af:b3:75:30:36:20:e2:d2:42:c9:df:0c:0b:65:ee:49:
         81:08:51:30:cb:2c:3d:26:66:bd:c6:61:70:ff:ce:38:dc:5b:
         89:5d:96:e6:1b:78:25:60:75:ac:3d:0a:b3:c7:4f:7d:76:41:
         5b:9e:de:38:8a:ea:3a:e8:a4:ef:4d:90:22:78:5e:61:71:fe:
         75:4a:e9:0c:e0:5c:57:d6:1a:87:2e:20:2e:7a:f2:da:b5:d8:
         9f:00:c3:cb:e3:a6:0c:1e:02:d6:3f:1f:6f:b3:39:3f:f7:50:
         c0:ac:b4:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:23:31 2026 by rpki-client