Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/5402a110-1b9b-3bb4-9717-335e1f5e16ca.roa
File:                     5402a110-1b9b-3bb4-9717-335e1f5e16ca.roa (raw, json)
Hash identifier:          Gr3MPStR6+7T+TGQmT4u4UTdJelgefM2KfJq3bTmEWQ=
Subject key identifier:   54:99:9A:1A:71:B5:ED:E4:B5:B5:A4:5D:1C:25:C9:D6:BC:E2:95:C9
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F4328584CD99D0B6081372E0AE1C51C80
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/5402a110-1b9b-3bb4-9717-335e1f5e16ca.roa
Signing time:             Fri 13 Feb 2026 14:00:41 +0000
ROA not before:           Fri 13 Feb 2026 14:00:41 +0000
ROA not after:            Thu 14 May 2026 13:00:41 +0000
asID:                     14618
IP address blocks:        170.114.58.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d9:9d:0b:60:81:37:2e:0a:e1:c5:1c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Feb 13 14:00:41 2026 GMT
            Not After : May 14 13:00:41 2026 GMT
        Subject: CN=b4d4adea-b694-4b2f-a77c-b5c4e62694a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:b1:cb:3a:90:cc:6e:7c:8d:91:6f:2a:ca:59:
                    ef:1f:64:48:e1:07:fb:9d:b9:18:c2:51:74:ab:45:
                    26:58:37:fa:2c:96:9f:40:6d:98:32:25:c9:8e:08:
                    6b:8e:70:68:c8:83:08:1c:49:fc:3b:38:0b:20:cd:
                    f9:51:e7:08:ce:c6:7b:3f:b0:13:c8:da:6a:84:93:
                    44:07:bb:d9:5b:56:64:ef:5c:2f:01:f5:8d:f6:04:
                    7b:c3:42:23:45:5b:55:03:8f:84:00:e7:c9:28:53:
                    3b:2a:7c:04:7c:dd:d3:c8:12:cb:e1:37:f7:1c:58:
                    28:2f:da:1f:46:6e:1a:fa:0e:4f:13:93:14:34:d7:
                    95:ff:eb:b4:c2:49:a8:88:1a:d6:bb:a9:1b:f5:61:
                    b6:b3:fc:69:66:a8:5c:a3:7f:ac:97:30:a0:53:a4:
                    5e:27:62:a0:c5:d6:41:84:f1:b5:61:17:d5:0c:6e:
                    d0:00:bc:0d:91:7e:4a:21:0e:bf:11:bc:a8:9f:90:
                    54:78:5c:e0:09:8a:e7:a8:aa:55:ff:be:4c:61:c5:
                    60:dc:00:bd:cb:ad:c3:40:d0:c9:a4:1f:7e:dd:7e:
                    f2:67:01:a7:78:66:19:9c:e0:53:94:86:f4:09:d3:
                    c2:cb:5a:de:4b:bf:74:9d:e5:2e:de:5b:44:7f:bc:
                    7a:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:99:9A:1A:71:B5:ED:E4:B5:B5:A4:5D:1C:25:C9:D6:BC:E2:95:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/5402a110-1b9b-3bb4-9717-335e1f5e16ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.114.58.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:12:77:bc:4c:2f:82:81:08:bf:0a:32:96:1a:7d:7a:c3:c3:
         c5:18:6e:b0:c3:ee:e4:f6:c3:37:24:3d:ce:9a:3f:9f:44:01:
         eb:8b:67:d7:76:7f:55:ed:d7:76:61:ca:6a:c9:e3:7d:c8:7f:
         75:f9:b8:83:fc:cb:2b:54:b7:9a:66:30:77:b3:9f:09:0c:e6:
         d8:c2:c1:77:c3:d7:cc:92:fd:cb:d0:6b:57:73:be:1d:53:bd:
         f0:96:48:cd:b1:92:1b:a0:d0:81:41:39:23:25:21:e5:15:6d:
         c8:1c:b7:79:8a:53:c2:c1:24:dc:ed:dd:51:f1:7c:b4:94:df:
         18:0d:df:3e:6f:df:20:9d:fb:b9:a1:80:03:89:a8:e5:fd:b6:
         9d:e1:44:42:6b:b7:14:8c:e0:ac:9f:73:ce:52:1a:12:0f:29:
         32:80:d1:3d:1e:3f:13:10:1b:b2:d9:cc:62:69:fb:a6:0c:34:
         3b:0d:b1:2b:41:9f:45:8d:fd:b0:ab:86:31:fb:fc:f9:b1:94:
         28:df:29:dc:6c:f3:3d:40:33:ce:f0:9a:ba:85:cc:20:25:2c:
         05:85:2e:bd:1d:51:8a:20:9c:9b:13:fc:16:93:cb:18:29:df:
         8d:ef:3e:7b:ad:80:1b:9c:41:73:5a:84:22:27:62:89:db:83:
         1c:47:5f:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 19:09:02 2026 by rpki-client