Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4360f85a-59d7-3694-bd01-392eb9214953.roa
File:                     4360f85a-59d7-3694-bd01-392eb9214953.roa (raw, json)
Hash identifier:          iPfzD9KfQojhpIsUsjDjm3nDjsMXWq8iLEnXeVm+Z4g=
Subject key identifier:   F5:E4:91:57:A7:DB:93:86:7A:27:D9:C4:46:0A:EF:0A:87:FC:93:CA
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584CF58787FA751447DB2277FD80
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4360f85a-59d7-3694-bd01-392eb9214953.roa
Signing time:             Mon 23 Feb 2026 14:00:41 +0000
ROA not before:           Mon 23 Feb 2026 14:00:41 +0000
ROA not after:            Sun 24 May 2026 13:00:41 +0000
asID:                     15169
IP address blocks:        192.178.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f5:87:87:fa:75:14:47:db:22:77:fd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Feb 23 14:00:41 2026 GMT
            Not After : May 24 13:00:41 2026 GMT
        Subject: CN=e72ead52-5fcd-4ecb-9186-3d123c0c85e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:29:78:fb:94:0d:9e:5a:a7:24:33:28:74:da:
                    3d:ce:10:cb:7a:68:a6:61:35:15:ac:6a:81:27:0d:
                    b0:fc:ee:6d:99:22:b4:44:11:bf:49:f3:64:4d:3a:
                    24:7c:f8:6e:19:3c:da:37:a5:52:ad:e5:a7:92:3b:
                    eb:a0:77:35:ce:92:f1:52:af:da:be:3f:4f:e4:3a:
                    41:1b:0f:56:5f:db:d8:1d:65:81:20:c6:59:d0:8d:
                    75:f8:12:e2:fa:d9:76:2f:39:ef:8a:cc:23:ba:5a:
                    b8:8c:1c:82:86:6b:2f:da:cb:1c:4c:0b:65:2a:31:
                    10:3a:9d:ad:e6:1b:07:fa:b4:13:88:de:fb:dc:16:
                    33:fa:f7:66:6b:99:86:5a:35:d6:50:f9:09:71:41:
                    69:65:b1:c2:51:8b:aa:dc:13:93:84:f5:a4:2f:a5:
                    12:05:03:66:c7:02:89:d3:a0:a6:22:68:bc:47:71:
                    72:f5:91:60:2c:69:f3:72:55:bc:8c:ce:35:2b:bf:
                    ba:77:9d:e7:07:10:12:36:13:aa:dd:3b:13:39:4a:
                    3d:16:eb:41:10:c2:6a:87:db:2c:c5:29:34:5b:88:
                    f6:d2:95:ec:55:06:86:c9:e3:0f:9f:cb:0e:bd:db:
                    04:66:d8:94:0d:63:90:ae:11:91:a2:81:58:98:48:
                    cf:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:E4:91:57:A7:DB:93:86:7A:27:D9:C4:46:0A:EF:0A:87:FC:93:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4360f85a-59d7-3694-bd01-392eb9214953.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.178.227.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:6a:37:13:c3:5d:3e:9a:e6:b2:08:23:ee:29:60:32:42:79:
         f4:81:cf:09:2a:0d:7f:1e:42:a4:7f:56:b4:6e:89:d0:fb:c6:
         e5:8c:2f:c1:06:b6:1a:bf:25:bf:79:9e:5c:0f:8b:96:d7:5f:
         02:b3:83:df:c4:51:ec:9e:ef:19:f3:bd:e0:fe:ba:38:2c:4a:
         a1:36:19:f8:ea:c7:65:54:eb:48:ea:e9:86:38:a0:99:7a:38:
         9f:d4:85:d0:5c:2a:2f:bd:a8:ee:52:61:3c:6c:25:4a:16:c4:
         28:eb:5c:c9:f6:70:79:a0:1f:af:d6:7a:26:c3:d6:95:a7:4f:
         f3:dc:be:c4:e2:7c:1f:ed:e2:d8:f4:30:eb:72:e9:16:85:e6:
         68:26:ea:40:5c:7d:08:a1:c2:4a:33:8f:a7:19:84:68:5e:c1:
         9e:b0:43:a1:5b:57:2d:75:71:ed:f2:ae:03:c7:ed:ff:e7:46:
         d6:cc:fa:c5:57:1e:68:9d:49:7f:b8:c3:5a:84:41:5e:71:30:
         73:8e:1f:7f:f8:f2:4b:4e:1e:1f:a4:76:75:5a:79:d8:31:ec:
         3a:ff:ee:56:1c:f0:25:21:a8:0e:a9:54:7e:ec:6d:66:4a:3d:
         0d:3b:4c:1d:57:d7:b4:a4:07:d3:18:61:d1:dd:ff:a5:4a:03:
         aa:1c:d9:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:52:16 2026 by rpki-client