Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ae158e8b-9bf3-373e-8e12-aa952bd4a686.roa
File:                     ae158e8b-9bf3-373e-8e12-aa952bd4a686.roa (raw, json)
Hash identifier:          p6mSpv3Nvk3S5zAGmGBSzVTs3xEpXoI5u+MN+3emqT8=
Subject key identifier:   18:A5:FD:BB:0E:B4:7A:CD:60:0C:BD:8A:2A:6A:77:C5:A3:B6:22:F0
Certificate issuer:       /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
Certificate serial:       010D0C9F4328584CC07C9C60B7279C7835318BC0
Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ae158e8b-9bf3-373e-8e12-aa952bd4a686.roa
Signing time:             Wed 04 Feb 2026 14:00:39 +0000
ROA not before:           Wed 04 Feb 2026 14:00:39 +0000
ROA not after:            Tue 05 May 2026 13:00:39 +0000
asID:                     33392
IP address blocks:        137.83.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Feb 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c0:7c:9c:60:b7:27:9c:78:35:31:8b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
        Validity
            Not Before: Feb  4 14:00:39 2026 GMT
            Not After : May  5 13:00:39 2026 GMT
        Subject: CN=128c06db-3ed8-42ef-bfb2-578f12e2c9cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c3:91:ea:2c:de:b6:28:b1:43:ff:9e:7a:57:
                    29:6a:71:c3:94:82:68:42:fd:cb:a5:d5:38:01:e3:
                    c9:60:6f:7f:61:b8:0e:a0:7d:42:d0:f5:24:1c:d9:
                    c6:fd:fa:40:b9:25:d8:81:a6:f6:ec:93:7b:00:19:
                    2e:b4:58:fa:36:fc:75:b2:d6:ab:fd:5d:2f:b6:3a:
                    c7:9d:0b:36:62:07:25:80:16:34:be:38:50:49:49:
                    22:f2:a3:55:cc:a6:e7:3e:53:4a:f9:e4:f4:66:58:
                    d2:9e:68:59:01:32:03:b5:ba:36:1a:f6:80:35:4b:
                    97:81:d6:cf:53:23:0d:38:65:b9:02:d1:55:cc:84:
                    e9:b6:23:b9:63:db:e6:43:00:97:8b:d9:5e:aa:9e:
                    2f:8b:b8:22:0a:2f:d9:3c:ce:67:fc:82:8b:8c:9a:
                    4d:5d:6a:15:c5:93:d3:ae:30:e1:54:fc:9b:f4:48:
                    8e:a3:85:a6:d5:e5:79:c7:e6:89:e5:1d:83:ff:7b:
                    90:4a:2a:3c:31:1f:c6:cf:8a:0a:a6:a8:83:7b:a9:
                    e9:60:71:6c:b0:5f:ae:73:e5:2e:bb:9d:45:bb:1b:
                    ea:21:aa:59:cb:45:5b:0b:04:ee:7f:80:30:50:bb:
                    b1:18:2a:ce:07:ac:ef:48:36:75:9c:c7:6a:9a:40:
                    0b:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:A5:FD:BB:0E:B4:7A:CD:60:0C:BD:8A:2A:6A:77:C5:A3:B6:22:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ae158e8b-9bf3-373e-8e12-aa952bd4a686.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl

            X509v3 Authority Key Identifier:
                keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.83.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:45:ab:1a:a6:35:11:be:6c:a1:a1:bd:da:9f:fb:8c:74:29:
         39:56:dc:9e:34:c5:fc:83:ef:4a:18:77:91:bc:47:e9:30:2f:
         64:db:8e:16:3b:1b:ef:1f:d3:09:e4:f9:9b:e3:98:b1:27:e0:
         de:00:19:b5:54:f0:bb:aa:d0:77:ff:dd:e8:0d:58:71:89:d9:
         26:54:05:52:5c:65:0d:59:14:5b:33:ac:d4:35:05:af:5d:0b:
         ba:06:e8:55:bf:67:a7:e2:00:65:53:bb:d2:c2:8e:f3:09:1b:
         9f:6e:62:4a:4a:9d:7c:b0:3d:bb:99:f4:e7:c1:8c:7c:29:fb:
         4d:46:0b:7f:88:5d:22:3c:f2:55:10:65:c5:6c:50:14:96:c8:
         e8:15:00:96:68:dc:35:52:f1:47:99:a5:5f:1f:00:64:f2:dd:
         ee:77:e5:88:d4:4d:a0:a8:87:17:a6:b4:6d:bb:3a:80:6c:f8:
         44:23:9c:8d:34:11:87:34:58:af:81:2e:be:45:5c:b9:eb:4c:
         d0:e6:5b:c8:be:ad:7d:b9:29:78:05:8f:bb:ca:7a:4a:b5:18:
         d6:44:84:c1:09:54:53:fb:ee:bc:5b:10:a4:61:d7:b1:57:1a:
         78:ed:e0:3f:0f:55:f4:e9:0e:9e:4a:ec:c4:c5:58:f9:fe:75:
         61:4b:c5:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 18 23:19:39 2026 by rpki-client