Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/960156d9-d41c-43da-b054-170189dcb5bc/19df955f-fc01-3bcc-800f-720f08ca391b.roa
File:                     19df955f-fc01-3bcc-800f-720f08ca391b.roa (raw, json)
Hash identifier:          knj1QJxOvoy2v9olOGca7D5S/3SoHIaqwGtUaT/Nr14=
Subject key identifier:   7E:A1:49:ED:7A:2E:4D:E2:0A:A8:50:8F:CD:FF:BE:35:1F:A1:57:24
Certificate issuer:       /CN=960156d9-d41c-43da-b054-170189dcb5bc
Certificate serial:       010D0C9F4328584CE8F77B895D5A6DB1E054D800
Authority key identifier: F9:5A:4C:23:A1:6E:1E:8A:03:3E:0D:12:E3:59:7C:D8:57:86:CE:DE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/960156d9-d41c-43da-b054-170189dcb5bc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/960156d9-d41c-43da-b054-170189dcb5bc/19df955f-fc01-3bcc-800f-720f08ca391b.roa
Signing time:             Thu 19 Feb 2026 02:00:32 +0000
ROA not before:           Thu 19 Feb 2026 02:00:32 +0000
ROA not after:            Wed 20 May 2026 01:00:32 +0000
asID:                     20162
IP address blocks:        129.110.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/960156d9-d41c-43da-b054-170189dcb5bc/960156d9-d41c-43da-b054-170189dcb5bc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/960156d9-d41c-43da-b054-170189dcb5bc/960156d9-d41c-43da-b054-170189dcb5bc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/960156d9-d41c-43da-b054-170189dcb5bc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e8:f7:7b:89:5d:5a:6d:b1:e0:54:d8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=960156d9-d41c-43da-b054-170189dcb5bc
        Validity
            Not Before: Feb 19 02:00:32 2026 GMT
            Not After : May 20 01:00:32 2026 GMT
        Subject: CN=2dd4b006-d54e-42a5-b728-57840ca36c27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d2:92:7f:8c:91:bc:73:49:87:4b:2d:65:55:
                    71:20:51:70:ed:cf:66:9a:fe:24:29:be:dd:0d:8f:
                    23:30:bf:dc:8d:a1:84:d8:43:f7:1e:c9:75:80:fc:
                    1f:87:84:ae:66:a8:b7:d2:32:04:98:06:7d:4d:cd:
                    da:80:be:70:52:f5:15:6d:97:26:63:d9:9c:51:4d:
                    84:ce:99:dc:47:cb:73:9b:dd:26:d9:7e:ab:98:76:
                    5d:d8:65:0d:25:41:42:cf:52:c4:0c:ee:9d:22:c6:
                    60:e2:16:e1:58:1c:b3:b1:1a:8f:d5:50:2b:87:54:
                    98:e3:ac:80:1b:ff:5a:34:5c:ea:17:b8:cd:33:02:
                    31:9f:e7:e0:d5:a1:fb:0f:0b:de:36:3a:ac:72:e4:
                    97:b9:ef:70:50:2a:3d:45:ff:14:e8:b2:44:08:44:
                    5c:35:91:79:2d:77:28:24:3f:c4:00:28:23:ee:a8:
                    64:bb:4b:71:b2:10:09:3e:71:0c:e7:3c:aa:73:4f:
                    08:95:83:5c:89:41:71:09:e1:48:88:5f:c8:23:98:
                    76:fd:a2:a7:74:10:7a:4f:cb:b2:c8:53:6f:69:52:
                    e2:6a:05:1a:6a:8f:ae:06:46:22:3c:df:b1:66:86:
                    20:44:b9:78:28:da:cb:08:01:5a:22:86:dc:df:6c:
                    31:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:A1:49:ED:7A:2E:4D:E2:0A:A8:50:8F:CD:FF:BE:35:1F:A1:57:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/960156d9-d41c-43da-b054-170189dcb5bc/19df955f-fc01-3bcc-800f-720f08ca391b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/960156d9-d41c-43da-b054-170189dcb5bc/960156d9-d41c-43da-b054-170189dcb5bc.crl

            X509v3 Authority Key Identifier:
                keyid:F9:5A:4C:23:A1:6E:1E:8A:03:3E:0D:12:E3:59:7C:D8:57:86:CE:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/960156d9-d41c-43da-b054-170189dcb5bc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.110.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:05:c7:5a:32:c4:6e:9c:91:0a:ac:be:bc:78:ff:1b:85:7f:
         a5:6b:b8:51:a2:ae:84:3c:df:0d:96:0c:43:4b:30:a9:01:02:
         e1:14:61:73:d5:7f:0a:83:80:88:b4:54:96:dd:0e:2c:66:94:
         a0:bb:e3:94:a4:0e:44:98:6b:8e:18:72:62:d0:24:db:8b:7d:
         e2:24:74:da:08:fb:33:cb:d6:3a:a8:69:b5:b6:f0:ec:d3:f9:
         c7:79:35:39:28:f7:db:fc:18:d8:f4:f4:4c:68:24:b2:a5:3d:
         02:91:fc:85:43:7a:10:b6:36:ed:bb:d6:eb:bb:41:81:5c:d1:
         92:92:63:63:f3:46:8d:a8:48:f1:af:20:24:2c:d9:69:8d:3b:
         96:00:e9:3d:e0:85:71:6e:67:0a:77:01:26:fb:72:37:70:63:
         c7:20:cd:4d:d3:9c:3a:8f:cb:bf:a1:d6:3c:b0:1e:c9:13:95:
         05:a1:1d:a1:0c:6b:2a:21:08:ff:c6:91:37:81:df:44:50:2b:
         2d:64:35:a1:8a:b1:d1:c8:68:80:ec:52:d2:da:e0:1e:25:52:
         0f:28:da:a1:bb:f7:18:de:7e:7f:c3:32:14:53:88:cb:89:85:
         7c:67:5a:aa:bc:df:87:ed:8b:2d:8b:b8:fa:b5:0b:0d:fe:31:
         85:3e:e4:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:38:11 2026 by rpki-client