Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a8d93f88-38d3-3194-af65-ba25e5f1b405.roa
File:                     a8d93f88-38d3-3194-af65-ba25e5f1b405.roa (raw, json)
Hash identifier:          DwFhQ+z0Y9fkf3ZUKTWwIag6FhSSb7YL+0ECtkW+fNY=
Subject key identifier:   57:8A:90:C2:C3:DE:48:2A:86:F9:A6:50:EA:58:0A:8D:B4:ED:39:59
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584CD99CCFBFFF1770682133E9C0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a8d93f88-38d3-3194-af65-ba25e5f1b405.roa
Signing time:             Fri 13 Feb 2026 14:00:41 +0000
ROA not before:           Fri 13 Feb 2026 14:00:41 +0000
ROA not after:            Thu 14 May 2026 13:00:41 +0000
asID:                     22516
IP address blocks:        97.86.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d9:9c:cf:bf:ff:17:70:68:21:33:e9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Feb 13 14:00:41 2026 GMT
            Not After : May 14 13:00:41 2026 GMT
        Subject: CN=c4793c70-8ac6-4c95-b454-771a9e653633
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:48:6e:1f:06:71:c2:8d:24:8c:c2:7d:db:df:
                    02:64:59:e8:85:f8:03:8a:89:be:ec:09:d1:73:91:
                    24:36:c4:3f:fc:5a:5f:e1:fa:bc:8e:fa:ca:e6:e8:
                    ea:d9:e1:82:ff:85:71:63:a6:24:bf:91:be:58:87:
                    3c:8a:10:fa:6c:52:23:fc:69:83:7e:62:a9:a8:6b:
                    6a:9f:d1:99:0e:cd:f9:5e:08:8d:4e:c4:0b:0d:66:
                    a2:0b:f9:d2:2b:83:7e:79:af:88:36:0c:31:92:bd:
                    dc:03:9d:31:24:1f:5f:e5:3f:1b:51:66:95:16:4f:
                    89:eb:a9:7d:d2:1c:d9:62:fe:67:f3:84:9d:1e:00:
                    76:82:73:7b:a9:5f:ee:fa:b0:16:41:58:64:2a:00:
                    4e:2a:b3:01:33:79:d8:c8:92:e1:81:5f:ff:65:82:
                    e0:c4:89:5f:6b:e6:e2:b4:68:ff:f1:e7:53:cc:a9:
                    f3:a6:86:de:9c:de:61:92:21:9e:30:cc:d6:3b:2c:
                    a2:96:07:0c:6b:db:d7:18:e7:ce:d7:0d:59:19:93:
                    ee:56:7b:ee:51:49:af:57:f4:75:1a:48:1a:c9:ba:
                    0c:f6:78:4e:bc:da:ff:2a:81:2b:2c:30:ca:b5:4d:
                    c2:62:b2:a2:68:1d:73:9c:4e:44:4a:6f:13:81:10:
                    72:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:8A:90:C2:C3:DE:48:2A:86:F9:A6:50:EA:58:0A:8D:B4:ED:39:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a8d93f88-38d3-3194-af65-ba25e5f1b405.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.86.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:0e:a4:e8:7f:ce:9f:16:63:5e:89:e6:70:dc:d4:5f:53:d2:
         74:1f:5b:fd:c8:e6:d6:f5:f3:ee:fe:f5:0f:32:e4:67:34:16:
         27:8b:f8:d7:47:d8:f7:41:30:32:25:61:d6:9a:24:6e:bb:83:
         f9:37:10:d9:d9:f4:53:da:05:92:42:1a:24:cf:4a:3e:32:c6:
         27:31:ac:12:99:11:b1:22:82:85:e6:1d:5d:67:79:c2:04:cc:
         92:30:5a:11:00:f1:9b:d0:fd:db:cf:9d:2e:42:ae:ea:9c:0d:
         c8:e4:d7:20:d1:a0:01:4f:0e:20:8b:8f:30:0f:ce:83:3f:26:
         7c:ba:b0:8d:66:4c:17:8b:33:d6:f6:7c:e9:98:92:b1:af:43:
         e0:d1:35:a1:f8:46:a4:1c:e9:d3:d5:28:7d:c7:00:c3:20:c3:
         02:ce:4d:62:71:6a:d8:ce:db:6f:2f:57:6a:31:25:ca:43:2b:
         06:03:35:c9:4a:eb:75:92:82:49:88:0e:71:51:1b:42:2a:0a:
         80:9d:3e:2d:40:64:6a:d3:6f:d5:dd:28:9f:e9:59:a3:5a:ee:
         ad:8b:d7:8c:83:10:00:57:b5:e8:f6:69:da:64:bd:a0:7c:3f:
         19:db:37:e5:d7:cc:7b:92:62:c2:09:02:0c:ad:ed:6d:23:59:
         fa:23:5c:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:41:04 2026 by rpki-client