Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/d183da02-01fd-3ce0-b7e9-14abdd41a450.roa
File:                     d183da02-01fd-3ce0-b7e9-14abdd41a450.roa (raw, json)
Hash identifier:          t9VmMSTiTuX7Rrn6Dp5in5ad0Tcd+XD53kfLHIfphl8=
Subject key identifier:   81:A9:DB:C0:45:41:26:DD:B9:E8:64:24:A5:B5:45:89:EA:18:07:1C
Certificate issuer:       /CN=2aa438c9-0cbb-4364-946d-9714249a8222
Certificate serial:       010D0C9F4328584CDC67E784847F39ADE9145C80
Authority key identifier: 05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/d183da02-01fd-3ce0-b7e9-14abdd41a450.roa
Signing time:             Sat 14 Feb 2026 14:00:41 +0000
ROA not before:           Sat 14 Feb 2026 14:00:41 +0000
ROA not after:            Fri 15 May 2026 13:00:41 +0000
asID:                     63293
IP address blocks:        157.240.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:dc:67:e7:84:84:7f:39:ad:e9:14:5c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2aa438c9-0cbb-4364-946d-9714249a8222
        Validity
            Not Before: Feb 14 14:00:41 2026 GMT
            Not After : May 15 13:00:41 2026 GMT
        Subject: CN=a0b72105-5549-4292-85ce-b9ad92288b18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:4b:ae:52:dd:51:5f:6e:15:bd:f7:82:ab:f1:
                    8d:bb:02:0c:33:98:4b:f3:5a:55:ca:c6:19:7d:3b:
                    5e:06:6f:53:26:7f:7e:c9:af:d2:1b:1a:25:3b:3b:
                    dc:af:c0:9a:96:63:dd:b3:5d:ae:0f:ef:ba:c6:c8:
                    d5:2f:71:97:51:d5:1d:ba:af:e0:09:00:b9:5d:5e:
                    e0:fc:c1:d1:aa:32:e1:bb:96:fe:81:cb:ec:09:e4:
                    d5:08:ef:28:2e:d8:83:a8:45:df:43:6c:d1:e9:89:
                    b0:e1:06:77:e0:ec:6e:36:e9:e0:02:87:10:26:31:
                    d8:01:32:78:4b:6f:76:3a:d0:87:60:2e:87:20:2b:
                    59:b6:dc:af:4d:72:a1:ad:b4:c3:8b:ee:79:cf:0c:
                    10:24:3b:d1:25:59:db:1e:51:d0:35:9c:46:10:fd:
                    08:45:b7:0e:2a:a3:0a:c1:c7:6f:ad:05:c5:cc:54:
                    ae:1b:e1:0e:3d:f1:e2:c9:cf:f3:c7:b0:39:94:65:
                    2d:6f:a5:7c:6e:2c:95:30:ff:fd:5b:ad:66:0c:b8:
                    6b:62:32:df:5a:a7:bb:4d:8e:f6:f4:42:ac:24:9c:
                    24:5a:6a:29:f5:6f:f9:ff:d4:d5:02:af:17:94:49:
                    52:b9:4e:84:7a:2e:17:0a:b4:92:cf:e7:6e:79:75:
                    45:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:A9:DB:C0:45:41:26:DD:B9:E8:64:24:A5:B5:45:89:EA:18:07:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/d183da02-01fd-3ce0-b7e9-14abdd41a450.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl

            X509v3 Authority Key Identifier:
                keyid:05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.240.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:e7:47:ac:81:37:bd:bb:69:40:d1:c9:fb:ad:9f:b6:60:18:
         3f:23:dc:7d:d4:f5:43:b3:de:e2:b4:d4:d9:12:f2:40:43:0a:
         03:76:73:5a:c9:8b:14:a5:e3:90:00:c6:90:22:bf:97:6f:11:
         af:cb:74:46:0a:6f:86:a0:cd:d3:ac:11:85:26:31:85:b0:e8:
         9a:a0:70:ee:dd:67:b3:15:7e:69:c7:e8:4b:f7:c3:fc:4d:25:
         12:12:21:b1:90:63:db:69:be:83:24:18:f3:03:c0:ad:f5:70:
         14:8f:ba:c4:c5:ca:6a:14:55:e3:97:da:17:9c:e9:17:93:9a:
         33:59:fa:b8:46:fd:7d:e2:e0:17:2f:66:bb:b6:e2:2f:df:e9:
         40:12:78:56:9a:81:95:22:30:af:9d:32:2f:2f:b3:d1:fa:e3:
         3a:cb:86:b8:b1:6c:28:22:09:2d:85:00:a9:8d:0e:4e:13:be:
         84:c1:b8:67:32:e6:81:e7:a3:94:89:88:29:a2:c6:ee:f8:94:
         0e:23:0c:88:c6:03:27:07:bc:1b:30:a3:44:33:ee:4f:f8:02:
         41:63:55:d5:74:53:a6:16:31:16:a2:c3:9e:2b:84:7b:de:70:
         bc:8b:e1:a3:1d:58:ed:81:46:97:f5:f7:81:6d:2c:78:b4:74:
         82:97:aa:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:14:57 2026 by rpki-client