Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fab1a958-ded9-4a94-97d9-0ff41a67ab25/33843f95-5170-3761-9f6b-ef4bc13b712c.roa
File:                     33843f95-5170-3761-9f6b-ef4bc13b712c.roa (raw, json)
Hash identifier:          v9XOQuUDTdr1Xd5Zrn8mKDeFdIQdBlM7t1+xhCn+Hk8=
Subject key identifier:   83:FD:AC:F3:01:72:59:91:35:50:31:91:9E:C8:F2:06:95:94:39:1D
Certificate issuer:       /CN=fab1a958-ded9-4a94-97d9-0ff41a67ab25
Certificate serial:       010D0C9F4328584CEFF22E0B2B300F2E4ABF5246
Authority key identifier: F5:8D:66:1A:71:A8:F2:70:03:41:53:6D:90:C9:C3:61:5F:FA:7C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fab1a958-ded9-4a94-97d9-0ff41a67ab25.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fab1a958-ded9-4a94-97d9-0ff41a67ab25/33843f95-5170-3761-9f6b-ef4bc13b712c.roa
Signing time:             Sat 21 Feb 2026 14:00:41 +0000
ROA not before:           Sat 21 Feb 2026 14:00:41 +0000
ROA not after:            Fri 22 May 2026 13:00:41 +0000
asID:                     23309
IP address blocks:        169.199.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fab1a958-ded9-4a94-97d9-0ff41a67ab25/fab1a958-ded9-4a94-97d9-0ff41a67ab25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fab1a958-ded9-4a94-97d9-0ff41a67ab25/fab1a958-ded9-4a94-97d9-0ff41a67ab25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fab1a958-ded9-4a94-97d9-0ff41a67ab25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ef:f2:2e:0b:2b:30:0f:2e:4a:bf:52:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fab1a958-ded9-4a94-97d9-0ff41a67ab25
        Validity
            Not Before: Feb 21 14:00:41 2026 GMT
            Not After : May 22 13:00:41 2026 GMT
        Subject: CN=f460e7e8-bcad-408c-891b-364ccc55a57a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:fd:78:de:df:f0:17:24:dd:12:f7:6b:04:ee:
                    7e:99:eb:33:a4:ea:f0:2b:ce:70:cb:22:33:5f:b4:
                    da:4b:51:a1:9a:c2:ce:68:80:30:54:fb:8e:a0:67:
                    f1:cc:66:a2:64:2c:6b:e2:97:75:f6:c7:b5:9e:3b:
                    09:7f:1c:cd:e4:71:63:1b:a8:99:51:22:77:f3:bd:
                    44:03:a0:7b:85:d0:95:8c:f1:5a:37:ba:3c:18:5e:
                    ac:e0:ee:9d:93:7d:d7:dd:f2:23:ec:d8:de:70:d7:
                    f0:82:33:60:17:e5:b1:2c:94:c8:2b:2a:8e:c5:7b:
                    dd:78:b7:a0:79:62:a2:81:ff:73:6f:be:0a:9e:06:
                    40:63:1a:76:60:b9:20:d5:fb:70:17:52:ff:94:74:
                    32:4c:63:08:d3:8d:65:20:68:91:18:7d:d6:5f:b7:
                    8f:07:17:dc:56:aa:a6:04:a2:ee:9c:cc:54:ec:d5:
                    cf:f7:c1:9f:e9:75:d4:4a:61:39:8b:13:45:5a:69:
                    58:4c:97:31:e0:bd:ec:83:f7:fb:2f:e9:56:be:20:
                    b6:e9:e9:68:62:09:bd:44:77:f7:0c:83:db:25:2b:
                    87:ce:c1:36:24:c5:61:bf:25:cb:21:1d:9c:bc:e4:
                    bf:e2:64:e7:3f:53:3a:d2:15:57:ca:23:35:ec:04:
                    b7:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:FD:AC:F3:01:72:59:91:35:50:31:91:9E:C8:F2:06:95:94:39:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fab1a958-ded9-4a94-97d9-0ff41a67ab25/33843f95-5170-3761-9f6b-ef4bc13b712c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fab1a958-ded9-4a94-97d9-0ff41a67ab25/fab1a958-ded9-4a94-97d9-0ff41a67ab25.crl

            X509v3 Authority Key Identifier:
                keyid:F5:8D:66:1A:71:A8:F2:70:03:41:53:6D:90:C9:C3:61:5F:FA:7C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fab1a958-ded9-4a94-97d9-0ff41a67ab25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.199.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:f4:79:1a:73:1b:27:e1:a1:3c:48:0a:8b:49:61:d3:18:09:
         f6:95:11:e9:78:ab:37:ed:87:cc:ff:c8:2e:8b:34:9c:bc:bd:
         05:2c:d4:fe:dc:d8:fb:0a:c2:69:d6:22:f6:88:f3:bb:53:91:
         7b:c2:23:92:dd:dc:9f:95:0d:c9:0e:97:cc:de:a4:22:c4:f4:
         17:a1:58:13:14:58:ff:7d:54:b6:61:9e:1a:eb:b6:16:43:3d:
         a7:82:fb:89:8c:55:77:1a:d4:6a:b9:9a:98:f8:cb:e5:ea:c7:
         75:64:34:e1:92:7e:bc:a1:34:40:0b:2d:02:c2:f0:9f:de:60:
         7d:b8:1e:b1:91:01:4b:48:7f:0c:69:72:b2:7d:ab:15:02:10:
         63:d0:5b:60:e0:a9:b4:e6:14:d3:b7:3d:6d:e0:17:e6:19:3d:
         89:bd:75:b1:29:82:e1:ce:4f:8d:81:8a:12:f2:9f:36:af:84:
         6c:2f:5b:4d:b6:b4:bf:6d:51:65:a6:dc:b5:39:88:3c:0c:c9:
         24:9b:cd:56:d4:1a:e0:3d:e6:c7:92:99:d9:a2:c4:15:c4:f7:
         c2:b1:24:6f:eb:4f:18:2d:a2:94:74:cd:a9:6d:80:fb:08:74:
         1a:14:47:de:c9:d7:1c:71:95:c1:14:b8:bd:b7:08:58:28:f2:
         8a:b8:75:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:37:36 2026 by rpki-client