Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5/4a3e3800-5ec5-3b00-932f-a0909a00190a.roa
File:                     4a3e3800-5ec5-3b00-932f-a0909a00190a.roa (raw, json)
Hash identifier:          lTmuu7UPoAqO8697WzinLrsV5Cq8gEsr6a2HcC1W9XQ=
Subject key identifier:   68:8D:6A:A2:74:47:9D:35:EE:AC:27:90:11:65:9A:1C:A4:55:92:12
Certificate issuer:       /CN=8387d894-d2ba-4e33-8e84-44b9d9d6e3d5
Certificate serial:       010D0C9F4328584CF1577E8668768248849D6840
Authority key identifier: B6:7F:57:84:BA:40:74:5E:DC:4F:E4:B1:F0:64:B7:99:79:38:68:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5/4a3e3800-5ec5-3b00-932f-a0909a00190a.roa
Signing time:             Sun 22 Feb 2026 02:00:32 +0000
ROA not before:           Sun 22 Feb 2026 02:00:32 +0000
ROA not after:            Sat 23 May 2026 01:00:32 +0000
asID:                     396982
IP address blocks:        161.223.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f1:57:7e:86:68:76:82:48:84:9d:68:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8387d894-d2ba-4e33-8e84-44b9d9d6e3d5
        Validity
            Not Before: Feb 22 02:00:32 2026 GMT
            Not After : May 23 01:00:32 2026 GMT
        Subject: CN=3f98d902-b614-4ed6-a280-a09da45a523d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:bb:4d:2b:d7:aa:a4:25:b1:cf:b1:46:14:c0:
                    0f:88:17:1a:41:9e:7a:70:f9:2f:d1:db:c6:d1:ce:
                    6b:41:d6:b4:47:c3:42:94:d0:0f:6f:b4:a8:fc:1e:
                    f0:fa:03:1b:e4:6e:b7:48:22:0d:b6:5f:53:7d:4a:
                    4d:45:cc:1f:e9:7a:8d:6c:54:0b:51:6e:40:54:00:
                    06:77:be:85:d7:ff:59:a1:47:4a:9a:df:65:9e:db:
                    b4:f6:b0:ae:3c:d6:64:30:03:93:d7:51:70:6d:cf:
                    3f:5c:9a:b3:47:d0:f6:0b:4a:e9:04:ef:d6:d4:ea:
                    c3:87:54:47:44:62:30:7b:71:7e:b7:1b:89:70:e0:
                    0e:8d:e7:02:1a:ce:ff:2f:b0:3a:4a:ae:6e:af:e2:
                    ec:f9:07:44:eb:27:da:d6:ad:12:63:14:15:8c:5a:
                    f4:d1:af:e8:4a:d5:8c:3a:24:3f:07:4d:59:da:cb:
                    cf:7a:4f:79:10:92:8c:bc:a5:aa:d7:a0:5e:c0:a9:
                    a6:f5:fa:bd:fa:92:8e:08:42:87:d5:09:13:c5:7b:
                    6d:76:1d:dd:4f:04:8c:b6:b3:ab:5b:25:e7:19:f3:
                    a0:0d:c9:3b:9f:69:4f:ae:41:ba:c8:10:66:b4:fe:
                    31:2f:c7:6d:e0:20:1a:d3:d9:23:53:32:3c:58:64:
                    2b:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:8D:6A:A2:74:47:9D:35:EE:AC:27:90:11:65:9A:1C:A4:55:92:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5/4a3e3800-5ec5-3b00-932f-a0909a00190a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5.crl

            X509v3 Authority Key Identifier:
                keyid:B6:7F:57:84:BA:40:74:5E:DC:4F:E4:B1:F0:64:B7:99:79:38:68:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.223.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:59:3f:e9:7e:d1:5a:90:98:07:ca:30:1b:cd:ff:cd:9a:0c:
         27:6d:31:ac:b7:d0:87:19:b0:3f:d4:f5:4a:cf:59:7b:08:7b:
         92:2a:f7:a8:81:c7:1e:ed:9c:dd:eb:d0:b7:b3:de:83:8a:74:
         ff:df:6a:d8:48:b9:b5:4a:46:8f:c0:29:c0:31:36:3d:1b:b8:
         22:8b:9f:9c:bc:b3:02:5e:47:78:e5:99:1a:e5:85:af:4c:51:
         73:83:bf:49:d8:f8:95:50:df:75:30:52:98:72:49:6f:13:e8:
         eb:e9:ec:d4:e0:e3:f8:4f:6e:8d:2e:2c:a9:85:50:19:9e:96:
         1f:cc:8a:33:6d:f4:1b:ca:8f:cf:b3:59:8d:1a:5a:bc:19:2f:
         1b:ba:b7:6f:a4:e0:e4:33:67:e7:40:75:a3:99:dd:28:1f:0a:
         99:30:fc:2b:88:20:5c:bd:a4:d9:52:6a:e3:c0:40:35:bd:01:
         a1:1e:9e:a0:f4:ab:89:15:93:75:09:ab:67:92:ea:37:3b:9c:
         4a:6f:6e:64:c9:6f:87:6d:ff:49:68:d4:6f:68:da:20:1b:07:
         5b:35:b8:0e:0f:8f:a5:50:ec:af:6a:34:96:32:eb:42:77:df:
         d4:4a:ba:d1:8c:e3:5a:d8:a4:6d:f7:08:92:a1:fe:f1:bd:cf:
         56:80:5b:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:27:29 2026 by rpki-client