Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/7e4d2991-b174-397d-ab71-e22961c20e23.roa
File:                     7e4d2991-b174-397d-ab71-e22961c20e23.roa (raw, json)
Hash identifier:          Bskvu7MuBz9GJSM+EdqNSsZ6GK2deUFUiTnQZrn+9Y4=
Subject key identifier:   26:1B:8A:7D:12:E6:45:0A:34:DE:C6:26:65:92:0B:15:92:06:C8:39
Certificate issuer:       /CN=f3281a82-6c17-4658-80f7-ee1327b4779a
Certificate serial:       010D0C9F4328584CC8DC93A87D22AB131A0291D0
Authority key identifier: 9C:00:C9:04:FC:22:91:1C:43:F4:C7:03:B8:E3:17:BE:F5:6B:D5:88
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/7e4d2991-b174-397d-ab71-e22961c20e23.roa
Signing time:             Sat 07 Feb 2026 14:00:41 +0000
ROA not before:           Sat 07 Feb 2026 14:00:41 +0000
ROA not after:            Fri 08 May 2026 13:00:41 +0000
asID:                     395383
IP address blocks:        192.157.82.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/f3281a82-6c17-4658-80f7-ee1327b4779a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/f3281a82-6c17-4658-80f7-ee1327b4779a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c8:dc:93:a8:7d:22:ab:13:1a:02:91:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3281a82-6c17-4658-80f7-ee1327b4779a
        Validity
            Not Before: Feb  7 14:00:41 2026 GMT
            Not After : May  8 13:00:41 2026 GMT
        Subject: CN=08dae538-db9d-4be0-9301-da74361e9766
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:69:1f:99:ab:ae:a5:a7:ab:a7:f0:52:85:7a:
                    c8:c8:30:40:15:61:7d:d6:1c:a0:6c:25:48:2d:38:
                    ce:02:a7:f6:7c:be:be:3e:ac:63:d8:54:a1:36:f3:
                    a6:c9:96:ae:e7:a5:ff:23:61:6c:45:07:90:ad:98:
                    f7:a2:fc:a8:3d:3c:62:8b:51:22:f0:db:c7:bd:4a:
                    ce:6b:de:35:74:4b:33:0e:d0:7a:bc:06:87:43:43:
                    01:48:ba:1d:29:8e:51:28:a0:19:7d:46:17:05:6f:
                    90:d6:f6:53:1e:98:d7:a3:ef:c5:7a:da:16:7c:bc:
                    77:5e:e0:dd:fa:73:53:c3:58:6a:97:f1:e6:84:84:
                    1c:db:2a:22:d6:44:da:7f:c0:a0:ed:80:8f:ce:31:
                    ce:fb:60:37:0d:c3:bd:6b:5f:d9:09:4a:90:f3:fc:
                    05:2c:30:a8:0a:ab:3e:ac:d9:71:af:ba:52:ee:aa:
                    23:1a:20:1d:5d:7c:e5:f4:6c:f3:18:43:ab:e8:61:
                    8e:23:6d:12:aa:a6:5e:f9:07:a8:88:0e:12:59:ab:
                    5b:ed:f5:bc:eb:c7:a6:fd:1b:c8:db:79:5f:88:2b:
                    45:69:1e:96:d1:39:52:66:8d:36:f2:9c:be:0f:87:
                    a0:2c:22:2e:10:e5:f0:c3:d3:53:b7:2d:a8:ba:86:
                    cb:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:1B:8A:7D:12:E6:45:0A:34:DE:C6:26:65:92:0B:15:92:06:C8:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/7e4d2991-b174-397d-ab71-e22961c20e23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/f3281a82-6c17-4658-80f7-ee1327b4779a.crl

            X509v3 Authority Key Identifier:
                keyid:9C:00:C9:04:FC:22:91:1C:43:F4:C7:03:B8:E3:17:BE:F5:6B:D5:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.157.82.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:3f:6d:b4:93:35:78:91:08:1a:e1:dd:e8:b4:79:fa:6f:4e:
         33:15:7e:1d:58:65:24:de:50:81:a0:82:1a:50:6b:50:d6:ea:
         39:a7:cd:f1:3e:df:ec:2b:f2:3b:d3:df:89:30:5f:09:21:d8:
         83:44:d5:c5:20:4a:ba:c6:4f:3c:5c:5c:c2:74:24:f5:ec:0b:
         bb:52:d4:f4:33:20:02:77:b0:24:d2:4b:c2:e2:bc:cd:71:58:
         11:c3:de:17:a8:1b:45:41:72:4a:e7:a7:2d:84:69:ed:36:7c:
         08:b9:2c:fc:1c:4a:37:56:8e:3d:8c:90:a4:45:bc:b0:07:d9:
         b8:bd:d5:70:67:9c:f4:ea:f2:98:11:2a:4b:69:84:ce:62:a1:
         14:42:e3:87:7e:31:ef:a9:08:93:62:71:6d:64:b4:4a:d2:86:
         80:b9:af:6c:d7:2d:24:63:33:0d:95:cc:50:ff:e3:60:e2:4a:
         bb:b4:85:20:6f:34:d4:ed:f2:60:96:6c:0b:11:d1:51:4f:81:
         a8:ac:13:f6:5d:df:09:2f:9f:c4:2d:e8:b8:be:b1:ba:88:52:
         4b:ab:7e:36:d7:49:01:e7:96:a6:de:85:ad:4c:ae:b9:40:06:
         ec:25:5b:4f:66:1b:7a:ec:b9:0f:43:22:ce:a4:a2:a8:70:0b:
         8a:76:9d:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:12:17 2026 by rpki-client