Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/177f1d70-475f-3d07-b1ef-c54a858042bc.roa
File:                     177f1d70-475f-3d07-b1ef-c54a858042bc.roa (raw, json)
Hash identifier:          m8eG2iFWCycToGox0F0+N3E+x+99ic0+f0EMTeUR1Ek=
Subject key identifier:   ED:1F:91:F2:3D:AC:C5:06:E8:82:CB:1B:C4:C3:2E:C7:D0:CE:BD:6F
Certificate issuer:       /CN=a7840f46-b135-4a45-8c47-daede4b0b707
Certificate serial:       010D0C9F4328584CD6D217A8BC8C8ECB97215000
Authority key identifier: 91:7C:19:EA:56:6D:ED:DE:A0:7B:D9:31:E6:0D:2E:C3:5A:16:13:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/177f1d70-475f-3d07-b1ef-c54a858042bc.roa
Signing time:             Thu 12 Feb 2026 14:00:40 +0000
ROA not before:           Thu 12 Feb 2026 14:00:40 +0000
ROA not after:            Wed 13 May 2026 13:00:40 +0000
asID:                     12213
IP address blocks:        149.137.192.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d6:d2:17:a8:bc:8c:8e:cb:97:21:50:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7840f46-b135-4a45-8c47-daede4b0b707
        Validity
            Not Before: Feb 12 14:00:40 2026 GMT
            Not After : May 13 13:00:40 2026 GMT
        Subject: CN=aca9e9e3-d448-42b9-b3cf-1a84223a8e94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:ea:ea:52:38:9c:10:45:78:f2:cd:a3:66:c0:
                    73:6c:f8:ea:d2:3a:c5:f4:0a:bf:c3:50:99:3c:01:
                    a9:4b:c2:1a:a9:49:81:05:03:22:97:11:f2:f7:58:
                    07:af:2e:6c:ed:c4:84:62:1b:f5:76:81:da:77:a8:
                    30:f8:57:8f:9c:f4:d6:0e:c4:18:52:97:58:0f:a5:
                    19:35:8b:f8:dc:8f:49:89:65:e9:bc:ca:df:35:d3:
                    1d:c3:ee:62:d3:14:e6:49:4e:b3:9e:0c:ed:5f:c4:
                    32:ae:71:7e:84:5c:08:14:47:e7:6f:fa:d2:b3:90:
                    c7:44:ae:71:6c:9d:2d:66:82:fa:23:f0:81:e1:54:
                    00:37:85:4b:66:bb:04:8f:2c:9d:38:fc:e2:da:23:
                    46:fc:17:5e:64:2e:f9:02:74:8c:f2:1e:41:8a:f2:
                    76:6e:87:6a:53:1a:0f:c0:fe:a1:3d:83:b7:6d:82:
                    91:63:6e:a0:82:e1:5e:4e:a4:80:05:6e:10:44:f5:
                    ab:df:4f:b9:61:1b:82:fd:f7:9e:83:2f:05:f8:d0:
                    f3:be:d0:12:52:a4:1e:e0:35:b5:d1:f4:17:44:2d:
                    26:2d:5d:68:96:c2:6b:e4:fa:7a:c6:f8:0e:4e:45:
                    32:95:a2:d8:c5:95:9c:4d:9f:c4:02:32:f5:49:79:
                    10:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:1F:91:F2:3D:AC:C5:06:E8:82:CB:1B:C4:C3:2E:C7:D0:CE:BD:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/177f1d70-475f-3d07-b1ef-c54a858042bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.crl

            X509v3 Authority Key Identifier:
                keyid:91:7C:19:EA:56:6D:ED:DE:A0:7B:D9:31:E6:0D:2E:C3:5A:16:13:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.137.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:8e:7e:ae:c0:7d:ef:43:10:69:db:b9:40:84:f1:d8:f1:78:
         e2:93:1f:b3:c9:4d:4a:7d:33:7e:32:c2:14:96:75:ab:cd:cd:
         3b:47:f2:42:7f:24:5c:ee:c1:59:46:89:f3:b1:2a:1e:50:83:
         1e:d9:6b:6b:2f:cf:98:b3:e4:88:d9:20:a9:92:8a:73:18:16:
         65:8b:3a:04:be:13:09:8e:98:2a:85:ad:82:36:f4:68:53:06:
         36:9b:c7:c9:54:0d:51:81:38:30:fe:77:8d:c5:af:f3:61:c5:
         82:47:71:71:cb:c8:ed:19:78:fe:12:22:ac:cb:b9:d4:00:fd:
         1b:a6:91:c0:07:69:7d:3e:f1:09:c7:74:c6:9f:fd:21:be:e5:
         c6:b7:55:2a:fb:5b:9a:99:58:01:34:88:a4:bf:b9:06:da:ed:
         f6:cb:52:2c:e8:db:36:89:de:dd:fd:90:e8:9a:c3:6e:52:cd:
         51:50:00:5d:ec:d0:f7:d5:8b:0c:96:d6:bb:51:57:b2:70:7c:
         25:c1:e1:99:e2:51:82:8b:c0:d4:36:4b:a2:ec:17:20:f2:d3:
         9a:6b:87:3a:44:00:ac:45:3d:83:7d:9f:a2:8a:ae:83:28:7d:
         60:17:aa:82:50:b8:70:7f:ae:e9:a0:b2:9d:6a:16:a7:ea:16:
         c9:75:ad:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:10:09 2026 by rpki-client