Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/bffed463-e1b1-3e6f-a43a-3d908f32acd7.roa
File:                     bffed463-e1b1-3e6f-a43a-3d908f32acd7.roa (raw, json)
Hash identifier:          X/WsdYh+MYaEP+lw/GxzYn29YsW/0oIIks53eTk92XI=
Subject key identifier:   44:59:E8:B7:9B:7A:3C:92:38:BA:ED:22:3B:07:A5:4F:0D:E9:65:5B
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584CE1FCC9C06B50017EEE05F880
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/bffed463-e1b1-3e6f-a43a-3d908f32acd7.roa
Signing time:             Mon 16 Feb 2026 14:00:40 +0000
ROA not before:           Mon 16 Feb 2026 14:00:40 +0000
ROA not after:            Sun 17 May 2026 13:00:40 +0000
asID:                     20115
IP address blocks:        159.111.164.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e1:fc:c9:c0:6b:50:01:7e:ee:05:f8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Feb 16 14:00:40 2026 GMT
            Not After : May 17 13:00:40 2026 GMT
        Subject: CN=87dcd5f9-a34d-4f61-a1e8-a80063ac22e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:0c:7d:46:98:b9:38:82:73:8c:02:e0:dd:93:
                    b6:89:f3:01:de:fc:56:d9:ad:8b:22:62:59:6b:6c:
                    e9:7d:52:7d:78:7d:bd:e0:27:91:bc:4f:ea:83:8a:
                    57:e1:24:02:38:5a:b0:16:05:be:e9:6d:69:4d:7e:
                    0f:bd:23:7e:09:d5:43:90:3d:97:9c:60:75:15:95:
                    b5:49:57:36:5c:47:bf:48:5f:93:2e:cf:66:0c:f7:
                    3d:63:69:a9:80:22:04:48:fb:b4:81:4c:98:9f:c0:
                    f7:7c:43:ab:05:ab:05:b7:a3:7a:1c:e5:d1:e7:a4:
                    03:43:54:e8:ea:ba:52:20:79:cf:50:e9:2f:5f:77:
                    13:26:0c:c2:d0:48:f9:3c:4d:c3:73:82:da:68:48:
                    b7:c4:cb:2d:a1:13:99:94:ec:85:3c:65:a9:31:7b:
                    0d:0f:49:41:ee:02:9f:5b:10:18:b2:b3:8e:7c:91:
                    bb:dc:19:10:50:14:bc:fe:3c:36:cd:8c:95:df:87:
                    67:59:36:cb:84:fb:b8:f9:8d:f1:6b:e7:cf:34:2a:
                    2f:d2:3a:d8:60:2b:c4:22:ce:4f:06:ea:9a:3b:0f:
                    37:c5:81:e9:ec:db:ed:b5:5c:70:cf:76:93:8c:a0:
                    a4:c3:fe:0b:18:60:ac:9b:05:85:90:49:01:6d:b2:
                    57:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:59:E8:B7:9B:7A:3C:92:38:BA:ED:22:3B:07:A5:4F:0D:E9:65:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/bffed463-e1b1-3e6f-a43a-3d908f32acd7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.111.164.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:a2:9c:48:fa:79:e9:30:13:fc:d9:3a:1c:d8:36:9a:ac:41:
         24:4b:0c:a6:ed:d8:d6:b7:f8:0f:68:33:ad:11:08:ac:5e:b0:
         dc:5a:45:f3:45:3f:43:ed:47:27:e6:cc:61:f8:cf:d8:99:28:
         77:bd:6b:8a:64:1f:f7:6f:45:a3:8e:4a:d1:33:30:64:2f:0a:
         ab:1d:a6:90:5b:37:02:6e:74:33:82:6e:84:6f:62:f8:d2:4f:
         e5:75:be:ba:be:8f:17:a6:f6:b0:e1:00:d4:cb:5e:02:e9:b7:
         95:0e:91:e8:70:94:3f:f7:ae:36:91:4b:d0:b9:46:fe:17:79:
         20:95:7b:3a:de:8d:71:62:e3:59:35:85:96:c2:43:d6:85:36:
         92:fa:01:d7:f3:5a:8b:9d:99:41:65:c2:de:be:49:03:69:f5:
         38:ed:2a:69:a4:61:cc:fc:c6:cb:31:a3:01:68:e1:87:0d:ea:
         56:7d:ed:17:5a:bb:d4:7e:6d:3b:1d:c5:f6:44:79:af:1c:17:
         ca:4b:20:4a:e5:18:d0:07:72:b1:b7:c9:8c:6b:c1:16:d6:e5:
         08:b5:94:dd:4d:2d:f4:4e:8b:66:93:fd:10:1c:f8:7c:93:23:
         b8:70:24:c4:95:73:cf:09:ed:5b:ce:09:2a:0f:33:f1:d8:56:
         cd:c4:bb:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:11:22 2026 by rpki-client