Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c0a098d0-0ad9-35ce-b4b1-230c3f41a1bf.roa
File:                     c0a098d0-0ad9-35ce-b4b1-230c3f41a1bf.roa (raw, json)
Hash identifier:          UknNGUzVUg4llqFY6JhAlYfRe9+bwCMH3bCfW95ZXu8=
Subject key identifier:   61:3E:1F:EB:8D:2C:40:6A:89:F0:ED:A1:D9:39:2F:9B:09:40:6C:6E
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584CE62CBA7C737BDD2006F19080
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c0a098d0-0ad9-35ce-b4b1-230c3f41a1bf.roa
Signing time:             Wed 18 Feb 2026 02:00:31 +0000
ROA not before:           Wed 18 Feb 2026 02:00:31 +0000
ROA not after:            Tue 19 May 2026 01:00:31 +0000
asID:                     54253
IP address blocks:        164.152.100.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e6:2c:ba:7c:73:7b:dd:20:06:f1:90:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Feb 18 02:00:31 2026 GMT
            Not After : May 19 01:00:31 2026 GMT
        Subject: CN=17ceb8c9-41ee-4d07-9806-025798e79340
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:d6:25:8e:b8:17:5c:30:72:4f:a7:49:99:06:
                    a0:d3:ce:48:c7:78:9f:0c:7b:0a:52:4d:ec:94:01:
                    6e:1d:75:70:09:05:f3:85:de:31:53:07:3f:8a:75:
                    2c:97:ed:5b:97:8d:f7:d0:12:d8:dc:f3:ed:8d:3b:
                    64:e5:e0:53:a1:23:7a:cb:73:d4:13:f6:b7:98:9d:
                    ea:a7:45:3c:eb:74:66:72:36:bd:fa:7a:fd:50:aa:
                    1b:ee:9c:7f:3c:4a:ad:a6:f1:22:f0:63:85:dd:eb:
                    1a:05:43:08:dd:03:51:13:35:ac:00:3b:df:63:6b:
                    6c:9f:0d:a5:4d:0f:8b:0e:c8:87:c5:6f:32:3d:c4:
                    75:bc:2b:fe:eb:ca:9b:00:97:ea:71:28:0a:eb:06:
                    47:25:5d:c4:31:0d:1e:8b:08:15:59:0b:53:01:71:
                    47:8f:44:f5:88:75:93:42:e2:17:db:41:c7:24:17:
                    c8:b0:59:3d:2f:c2:db:63:bb:3f:56:ee:63:99:34:
                    df:bb:92:83:1e:ce:7d:52:27:ed:15:91:c2:9b:69:
                    04:19:38:36:45:d6:11:62:a5:c4:c6:03:4c:aa:ba:
                    bc:fc:ef:9a:82:77:ea:eb:7b:2d:be:33:fa:cd:3d:
                    cc:3d:79:f1:59:e0:29:c3:bc:46:7d:b4:ea:d8:0c:
                    61:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:3E:1F:EB:8D:2C:40:6A:89:F0:ED:A1:D9:39:2F:9B:09:40:6C:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c0a098d0-0ad9-35ce-b4b1-230c3f41a1bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.152.100.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:fc:d0:83:11:c2:23:e6:41:0e:32:59:93:e1:07:bf:53:52:
         87:0a:56:9e:2d:42:75:b0:82:a8:3b:2f:4b:5f:fd:92:82:43:
         a2:55:89:69:b6:8e:81:a1:6e:ec:67:9a:27:d8:de:4f:81:4e:
         ca:1f:6c:69:63:ed:95:74:09:93:1e:e5:e6:8e:b4:e7:5b:c0:
         2b:6b:58:fa:76:bc:39:97:7a:79:22:57:97:d8:9f:b4:9a:42:
         82:22:8e:05:e9:44:00:1c:ca:90:1c:62:31:56:b1:6c:af:96:
         33:1e:c0:ed:ba:98:21:95:55:fa:9b:74:49:b5:8b:68:d8:2a:
         54:89:d3:b7:70:78:79:a6:8d:e8:96:b8:ad:95:1e:87:85:e6:
         80:ad:5c:27:a1:37:e3:da:64:f8:1a:9c:d0:d8:a8:d1:58:cb:
         c9:eb:eb:23:75:21:79:fe:a0:ac:8e:24:cc:61:18:70:cf:4a:
         5d:fd:2c:75:aa:de:26:da:05:2d:82:5b:8c:48:24:31:2a:8e:
         7f:9d:ca:4e:89:37:1c:72:bf:9e:c5:3e:6e:1f:87:8f:1e:88:
         3d:ee:ad:fb:d6:e3:27:82:4a:19:fe:82:82:00:20:fe:52:27:
         c4:9f:ca:b9:a9:2a:c3:70:65:d3:be:75:2e:f8:42:f4:ff:63:
         56:d7:f1:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:57:22 2026 by rpki-client