Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/d0c700f9-664c-320a-9ebe-8423a5faed0d.roa
File:                     d0c700f9-664c-320a-9ebe-8423a5faed0d.roa (raw, json)
Hash identifier:          +icST2YZ2yxSiayRkUbMEy702xKxJVQpgCH/376K/Dc=
Subject key identifier:   55:08:03:38:5D:A2:67:81:FA:73:07:10:E1:74:38:82:31:66:12:38
Certificate issuer:       /CN=cb3ad003-aa7b-45b4-b273-e01ca5688976
Certificate serial:       010D0C9F4328584CF4223007BE5F4ED38EC5F3A0
Authority key identifier: A5:7C:76:81:0C:C6:51:D7:2A:B8:6B:F7:9A:92:C5:2F:9C:9C:A4:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/d0c700f9-664c-320a-9ebe-8423a5faed0d.roa
Signing time:             Mon 23 Feb 2026 02:00:31 +0000
ROA not before:           Mon 23 Feb 2026 02:00:31 +0000
ROA not after:            Sun 24 May 2026 01:00:31 +0000
asID:                     54613
IP address blocks:        134.195.76.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/cb3ad003-aa7b-45b4-b273-e01ca5688976.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/cb3ad003-aa7b-45b4-b273-e01ca5688976.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f4:22:30:07:be:5f:4e:d3:8e:c5:f3:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb3ad003-aa7b-45b4-b273-e01ca5688976
        Validity
            Not Before: Feb 23 02:00:31 2026 GMT
            Not After : May 24 01:00:31 2026 GMT
        Subject: CN=29bd5060-ed21-4afd-aad5-0272c76d46fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:72:e4:20:61:21:3c:ca:e6:ae:a5:ac:44:62:
                    f9:18:c9:e0:a8:7b:55:91:d4:fe:21:65:4a:42:70:
                    3a:05:8f:ef:33:53:7d:f4:66:ea:39:b3:ad:6a:cf:
                    bd:61:d8:e2:93:e6:ca:35:6f:3f:a2:a9:37:68:c9:
                    ae:72:c6:cf:8e:56:d9:ea:2a:12:6d:06:75:b8:1e:
                    2a:2d:aa:50:cc:4c:4a:62:38:29:0d:e5:00:b7:45:
                    fb:7f:14:9e:e2:a4:74:f5:04:9b:21:c3:5e:72:34:
                    bc:16:d0:b7:f0:c2:22:16:bf:98:42:05:f8:a6:79:
                    8f:d6:b0:d9:4e:ff:fb:1b:8b:32:54:a2:e8:5f:6b:
                    98:37:75:20:8a:87:65:0f:7c:0b:e0:43:8f:4b:c7:
                    46:61:cc:f5:28:49:56:42:0f:cf:73:59:a4:2d:68:
                    69:67:7a:eb:6e:29:61:bb:69:7f:e7:6b:6a:c7:ac:
                    e7:c5:ce:34:db:a4:67:f1:c3:a1:0e:4f:b0:93:89:
                    82:db:a0:06:45:a3:27:2b:47:3f:b7:6a:29:20:66:
                    6c:56:cc:fd:0b:42:6e:b3:90:82:a2:86:a2:e9:d9:
                    4b:d5:b7:df:2d:d4:9d:47:17:c2:72:7c:81:40:45:
                    a8:c6:6a:ab:f3:f9:a9:ab:c6:32:8b:89:0b:1d:b9:
                    8d:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:08:03:38:5D:A2:67:81:FA:73:07:10:E1:74:38:82:31:66:12:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/d0c700f9-664c-320a-9ebe-8423a5faed0d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/cb3ad003-aa7b-45b4-b273-e01ca5688976.crl

            X509v3 Authority Key Identifier:
                keyid:A5:7C:76:81:0C:C6:51:D7:2A:B8:6B:F7:9A:92:C5:2F:9C:9C:A4:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.195.76.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:f7:d5:56:98:03:58:c2:34:be:d9:de:43:a7:50:11:cf:0d:
         61:26:fe:91:21:fd:bc:b8:a8:1b:99:a5:40:42:fd:1b:cc:86:
         cc:88:d9:26:8d:ca:fd:0b:49:49:d5:15:fd:e9:db:f0:56:dd:
         c3:b2:cd:a4:76:65:18:88:75:62:1e:73:cf:91:4b:2a:1e:65:
         53:28:a6:ab:9b:f3:26:de:b6:d4:f6:07:e4:08:22:75:79:9c:
         16:58:a6:0f:00:82:1c:07:d8:6d:00:d0:93:44:8e:99:b4:c8:
         1e:cf:95:2f:92:e4:9c:8d:f0:5e:cc:a9:78:e0:02:dc:92:f3:
         d0:6d:98:65:2d:ff:2c:14:32:07:cc:45:fb:f4:60:33:6a:26:
         e3:09:22:7f:bb:f6:f5:8a:45:13:93:e7:fa:f4:ff:de:e7:43:
         e5:de:7e:c9:aa:fa:5a:41:f4:55:1c:4b:c3:3e:32:5c:f5:19:
         6d:3d:c3:70:7b:06:3a:65:67:4f:a3:24:92:aa:94:b6:06:24:
         1f:44:f4:a2:cb:c0:4f:4e:a8:19:f8:10:6a:db:06:fc:45:07:
         3c:55:48:63:b4:ad:4d:a2:0b:6d:9f:5a:f1:29:69:f1:45:c0:
         87:7e:2a:6d:c2:91:1f:34:9e:88:d2:ce:59:63:4c:22:18:33:
         4a:e2:04:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:40:21 2026 by rpki-client