Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7a66e7fb-89d9-467a-83cb-031bb17ccfbe/e789f24a-b2b4-39c6-a1a6-c15ef9588d04.roa
File:                     e789f24a-b2b4-39c6-a1a6-c15ef9588d04.roa (raw, json)
Hash identifier:          1t5AulxUipLVOsah+KHpQ//E6F2wUnvnWvkr3MUZXqg=
Subject key identifier:   53:B2:90:54:D3:6D:8C:64:91:74:C7:2B:B8:00:39:6B:E7:C8:41:9A
Certificate issuer:       /CN=7a66e7fb-89d9-467a-83cb-031bb17ccfbe
Certificate serial:       010D0C9F4328584CD72D6C811DA5EB95D6372140
Authority key identifier: 9A:ED:B1:FF:91:E4:42:89:3D:78:4D:56:EF:CB:03:06:EB:CE:E9:BD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7a66e7fb-89d9-467a-83cb-031bb17ccfbe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7a66e7fb-89d9-467a-83cb-031bb17ccfbe/e789f24a-b2b4-39c6-a1a6-c15ef9588d04.roa
Signing time:             Thu 12 Feb 2026 17:04:57 +0000
ROA not before:           Thu 12 Feb 2026 17:04:57 +0000
ROA not after:            Wed 13 May 2026 16:04:57 +0000
asID:                     399938
IP address blocks:        131.219.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7a66e7fb-89d9-467a-83cb-031bb17ccfbe/7a66e7fb-89d9-467a-83cb-031bb17ccfbe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7a66e7fb-89d9-467a-83cb-031bb17ccfbe/7a66e7fb-89d9-467a-83cb-031bb17ccfbe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7a66e7fb-89d9-467a-83cb-031bb17ccfbe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d7:2d:6c:81:1d:a5:eb:95:d6:37:21:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a66e7fb-89d9-467a-83cb-031bb17ccfbe
        Validity
            Not Before: Feb 12 17:04:57 2026 GMT
            Not After : May 13 16:04:57 2026 GMT
        Subject: CN=015dae41-c35e-4808-a591-3e9e253a4d8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:9c:4a:00:14:d2:f0:b0:a8:50:d0:b9:86:b0:
                    9c:17:38:e1:da:ec:eb:76:70:62:0e:d1:f4:95:5f:
                    18:48:32:6c:45:87:5c:07:fe:3f:02:d4:42:c7:dc:
                    d5:09:74:50:fb:42:5c:00:b9:28:88:0f:9b:c1:a5:
                    1f:a9:c4:22:1c:55:24:60:b1:e7:e3:07:2d:8e:97:
                    35:4d:a8:1d:a9:bd:83:16:4c:0a:6a:65:c7:85:6f:
                    5f:63:31:0e:26:6e:b0:cf:c2:43:94:3a:56:05:6a:
                    78:fe:4c:21:34:4e:cb:9d:65:fe:61:a1:5a:19:64:
                    eb:79:8a:f3:1f:2b:92:56:13:45:a9:a0:79:ee:43:
                    a5:00:b1:28:12:72:67:f4:15:9a:91:27:5a:c2:e1:
                    6d:39:14:76:f7:96:a1:b9:78:0b:a3:37:6c:82:71:
                    c0:05:64:7e:26:f9:10:38:09:bb:19:c6:93:d5:c2:
                    94:61:03:b9:3b:d5:a3:34:da:dc:12:2a:dd:ed:88:
                    a5:84:82:1f:1e:6e:48:74:f8:82:5b:42:6c:7c:73:
                    87:66:81:a9:96:ab:80:85:c8:3f:a2:6e:68:08:7a:
                    6f:45:2e:8c:e5:38:7b:9e:72:48:72:89:96:6e:27:
                    84:47:a7:13:11:b7:e7:db:81:e7:67:bb:ae:4d:ba:
                    ff:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:B2:90:54:D3:6D:8C:64:91:74:C7:2B:B8:00:39:6B:E7:C8:41:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7a66e7fb-89d9-467a-83cb-031bb17ccfbe/e789f24a-b2b4-39c6-a1a6-c15ef9588d04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7a66e7fb-89d9-467a-83cb-031bb17ccfbe/7a66e7fb-89d9-467a-83cb-031bb17ccfbe.crl

            X509v3 Authority Key Identifier:
                keyid:9A:ED:B1:FF:91:E4:42:89:3D:78:4D:56:EF:CB:03:06:EB:CE:E9:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7a66e7fb-89d9-467a-83cb-031bb17ccfbe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.219.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:92:5b:3f:39:cb:fb:33:16:73:09:f5:ee:71:d1:18:9a:9c:
         79:6e:82:c8:18:2d:ed:fc:ca:3b:c2:4a:01:f4:53:d2:81:c6:
         4f:91:ac:52:f6:33:b9:29:c4:6b:c0:04:94:8e:8e:c8:df:85:
         65:e3:e8:08:2b:cf:8e:70:8f:be:d9:4c:a3:f2:4b:b1:18:56:
         59:02:51:41:03:b1:52:91:bb:1b:1d:2b:33:cb:d9:26:d0:0c:
         8e:eb:a5:42:33:8b:32:07:53:aa:91:fe:91:76:4a:3d:ee:46:
         64:ab:25:35:b0:23:1f:f9:c4:d7:ef:b1:7a:9e:fe:9c:92:e2:
         7a:f9:9e:fb:30:b6:6b:fe:1e:50:9f:f2:f8:91:20:f7:77:7b:
         92:7c:a6:69:d1:00:8e:1b:da:8b:ef:87:a7:4d:57:c0:87:d9:
         a7:59:52:9f:76:8f:95:cd:be:2b:e9:32:2e:80:67:b6:86:c5:
         c2:02:83:2c:15:44:4a:29:a5:31:c4:de:e0:03:cb:63:61:60:
         92:c0:60:c7:69:74:3c:55:df:1f:e4:1b:84:d7:b8:c0:5b:dd:
         97:f7:b6:aa:05:96:5f:97:87:aa:65:57:e8:47:e0:b9:ce:5d:
         65:d7:0f:eb:80:af:e7:27:b4:c2:10:ac:5f:30:40:9e:1b:0c:
         d1:1f:11:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:48:46 2026 by rpki-client