Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e76368c6-7013-4f98-819f-c6329c83d1c8/ad6189f6-e244-38e7-b349-1cba2ac39f25.roa
File:                     ad6189f6-e244-38e7-b349-1cba2ac39f25.roa (raw, json)
Hash identifier:          0y6bHeSbfebOmZoWOLmwpMI2RjCKVIVWKvDFBmaGjOc=
Subject key identifier:   70:7B:A9:DF:DE:30:7D:A3:A5:B7:3F:A7:38:B5:6A:D2:D0:11:AB:D4
Certificate issuer:       /CN=e76368c6-7013-4f98-819f-c6329c83d1c8
Certificate serial:       010D0C9F4328584CD13C9C4E9A93A04E0E9AD0C0
Authority key identifier: 54:D3:BB:D3:22:94:EC:01:29:86:F8:67:56:E4:78:C1:EE:17:1F:3E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e76368c6-7013-4f98-819f-c6329c83d1c8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e76368c6-7013-4f98-819f-c6329c83d1c8/ad6189f6-e244-38e7-b349-1cba2ac39f25.roa
Signing time:             Tue 10 Feb 2026 14:00:41 +0000
ROA not before:           Tue 10 Feb 2026 14:00:41 +0000
ROA not after:            Mon 11 May 2026 13:00:41 +0000
asID:                     14618
IP address blocks:        198.2.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e76368c6-7013-4f98-819f-c6329c83d1c8/e76368c6-7013-4f98-819f-c6329c83d1c8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e76368c6-7013-4f98-819f-c6329c83d1c8/e76368c6-7013-4f98-819f-c6329c83d1c8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e76368c6-7013-4f98-819f-c6329c83d1c8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d1:3c:9c:4e:9a:93:a0:4e:0e:9a:d0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e76368c6-7013-4f98-819f-c6329c83d1c8
        Validity
            Not Before: Feb 10 14:00:41 2026 GMT
            Not After : May 11 13:00:41 2026 GMT
        Subject: CN=473c1eee-f278-4c31-b07f-46f7efb293b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:54:a8:21:c7:60:63:5d:b1:c5:31:fb:f6:71:
                    46:3e:77:36:28:e7:f2:22:96:18:49:ad:76:9f:36:
                    c9:77:9a:0d:08:f1:fd:05:a5:32:4f:ff:b5:43:75:
                    fb:af:ca:c6:1e:70:77:67:e3:64:00:52:a3:d8:07:
                    26:2b:bc:6e:b9:bf:b4:88:96:05:35:52:a5:79:e6:
                    ba:1a:b9:ae:27:b0:61:1a:9d:44:9a:a4:bd:a8:79:
                    fe:06:ab:b2:75:db:87:76:81:4c:01:a2:7f:0b:64:
                    71:07:89:1d:31:87:cf:a2:21:25:15:de:fb:ab:84:
                    b3:ef:70:9d:c5:48:5a:32:07:92:d9:b4:75:1b:8f:
                    a3:96:45:c9:d9:7f:a8:dc:b2:f3:3d:05:5b:5c:eb:
                    a2:1d:a1:81:44:cb:5d:8e:36:fc:6c:d5:4f:33:96:
                    95:48:29:62:b2:af:33:da:8a:f8:af:b6:3a:62:e0:
                    46:39:db:46:52:2b:2c:e4:f4:8e:20:e3:1b:25:fd:
                    f2:64:cc:ec:6a:19:ef:3a:d1:da:16:f1:e3:ec:07:
                    59:c1:fd:38:87:01:15:57:83:27:a4:5a:ca:72:a2:
                    1b:d6:37:d2:6b:4a:6c:3b:98:0e:76:c0:8b:75:e5:
                    eb:30:f0:1b:e7:c4:ea:12:6a:a3:28:74:11:45:ed:
                    8a:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:7B:A9:DF:DE:30:7D:A3:A5:B7:3F:A7:38:B5:6A:D2:D0:11:AB:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e76368c6-7013-4f98-819f-c6329c83d1c8/ad6189f6-e244-38e7-b349-1cba2ac39f25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e76368c6-7013-4f98-819f-c6329c83d1c8/e76368c6-7013-4f98-819f-c6329c83d1c8.crl

            X509v3 Authority Key Identifier:
                keyid:54:D3:BB:D3:22:94:EC:01:29:86:F8:67:56:E4:78:C1:EE:17:1F:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e76368c6-7013-4f98-819f-c6329c83d1c8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.2.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:36:69:a4:c5:8b:93:00:d7:6b:2f:52:81:6f:1c:d4:ef:e9:
         19:de:9e:cc:aa:13:5b:35:5c:bb:eb:0f:a4:af:b5:bd:2c:38:
         39:69:07:69:18:cf:85:f3:a9:33:d6:65:f5:4b:a1:c5:3d:99:
         89:1e:b6:26:e1:7e:89:ad:b1:75:11:1f:65:23:5d:2e:72:78:
         63:bd:7e:51:96:a9:5e:d3:d5:71:4c:26:22:27:6e:86:3f:ef:
         a7:55:58:53:4a:c6:fb:cb:a1:b3:e6:8c:16:c4:be:b6:03:68:
         45:35:38:02:25:d7:a5:a3:21:06:02:f7:fa:88:73:02:d0:eb:
         5e:db:db:61:a7:02:aa:5c:21:0f:02:e6:e5:17:cb:2d:6b:32:
         9e:bf:c8:2b:33:8d:14:20:ac:09:37:38:96:df:6a:1a:92:bc:
         e4:1c:7e:ce:a7:61:87:54:94:fd:6b:e7:4f:3c:6e:61:ba:e3:
         10:b9:e4:d2:93:7e:5b:f3:88:ec:02:d7:d1:8e:d8:33:a6:25:
         bd:a6:23:74:09:e6:db:19:e7:70:18:c0:60:22:29:68:ab:cd:
         e4:47:55:41:78:e3:c4:1b:1d:b4:d6:f9:a5:db:48:3c:77:72:
         fd:db:de:3e:b4:9c:cc:78:03:0c:1a:ac:f1:13:d4:ce:7b:2f:
         fd:76:1d:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:24:19 2026 by rpki-client