Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/edbfca7b-3448-3901-8971-c4e406baf9f0.roa
File:                     edbfca7b-3448-3901-8971-c4e406baf9f0.roa (raw, json)
Hash identifier:          NmC/R0kKjHil2U3zJv6smm2A95XyylA2WGaktzO8ztU=
Subject key identifier:   41:4C:E9:86:11:37:E2:B2:BF:E0:22:0C:EE:55:FE:64:8F:08:28:85
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584CD99CF2BA74B7BB7BFC6F8900
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/edbfca7b-3448-3901-8971-c4e406baf9f0.roa
Signing time:             Fri 13 Feb 2026 14:00:41 +0000
ROA not before:           Fri 13 Feb 2026 14:00:41 +0000
ROA not after:            Thu 14 May 2026 13:00:41 +0000
asID:                     22516
IP address blocks:        134.16.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d9:9c:f2:ba:74:b7:bb:7b:fc:6f:89:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Feb 13 14:00:41 2026 GMT
            Not After : May 14 13:00:41 2026 GMT
        Subject: CN=fb69c325-f9f7-447f-b2b9-c06c76845679
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b2:43:f3:9d:81:3a:75:e0:0c:6a:3a:b2:ed:
                    a0:78:b6:fc:b1:ee:89:7a:6c:7a:6e:76:1d:d7:37:
                    01:52:42:67:99:06:d2:8b:75:80:a4:f9:62:f9:33:
                    3b:c4:55:3b:ff:84:98:14:fb:9f:32:11:78:92:77:
                    ba:20:e5:94:e8:72:e6:48:65:54:66:cb:b3:85:cf:
                    e4:d0:6e:ca:99:37:4c:65:0e:55:13:c0:ca:d1:ab:
                    1d:1a:fe:5a:cf:0d:6a:c2:0e:35:11:c8:95:06:5f:
                    3b:c3:24:0a:bc:67:6e:b7:f4:29:66:fc:c8:b9:c2:
                    e0:9e:42:3c:43:dc:4c:ef:ea:30:f1:e0:2c:d1:3e:
                    97:0a:71:63:9f:c9:03:85:a7:37:1d:5e:c4:1b:d1:
                    cb:32:fd:23:4e:65:07:48:34:f7:7b:da:8a:3d:de:
                    43:96:d9:60:d5:d4:6a:38:6e:cd:2f:bc:62:95:9d:
                    7e:fc:1f:57:56:ac:78:b1:ed:4f:73:b8:74:9f:16:
                    ea:24:1e:b5:62:30:ab:7c:ea:f3:9f:a9:2f:90:24:
                    46:70:a2:5a:7f:28:d1:11:40:71:0e:e0:f9:30:b8:
                    c6:99:3b:e0:9f:9b:87:43:83:34:2c:cc:1c:49:75:
                    79:8d:26:0d:a5:a3:0f:8d:10:09:ab:c7:96:c5:d1:
                    f1:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:4C:E9:86:11:37:E2:B2:BF:E0:22:0C:EE:55:FE:64:8F:08:28:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/edbfca7b-3448-3901-8971-c4e406baf9f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.16.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:24:00:83:fe:8f:19:70:61:b1:24:db:9c:a1:9f:85:da:85:
         ea:ef:42:d0:fe:47:f8:68:c9:9b:d7:eb:96:a0:02:43:74:bc:
         ef:eb:cd:c4:56:02:57:c4:8f:94:bc:ad:d4:4c:fd:d8:32:5d:
         f5:e9:eb:b3:7e:c7:17:14:f7:b2:08:64:c1:74:2d:fc:65:3d:
         2c:41:28:ab:76:25:ec:00:f4:b2:e3:d9:b1:ea:2c:c9:9f:9e:
         b5:54:0e:b5:0b:9b:aa:d4:ee:c2:ec:4f:00:6e:10:66:96:e8:
         83:e0:44:40:e8:9e:7c:82:b8:b7:fb:b8:ca:14:88:77:73:e8:
         fc:d4:97:e0:d6:8e:97:10:b9:a9:b3:3b:c5:8a:59:d3:ec:68:
         f8:20:bf:3d:33:82:d4:88:a4:e4:6e:cc:f7:0e:ac:65:5f:66:
         ba:d3:3a:5e:f0:dd:c2:eb:b6:92:22:0a:36:a7:ef:65:70:70:
         f2:13:f7:21:88:f7:8f:e6:82:9e:e4:67:a0:79:37:0a:4f:4c:
         0e:08:d5:84:f1:fc:b1:7b:40:21:9b:f4:20:01:a2:7e:7e:7a:
         d8:fc:4a:a0:8e:ad:b6:df:d8:99:6e:24:3d:25:18:fc:60:97:
         cd:5b:9f:ab:51:a7:d2:e0:eb:af:21:7f:e2:21:c9:f0:93:59:
         b9:29:48:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:52:48 2026 by rpki-client