Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/f2983f60-df74-3593-83d6-9699aa4424c4.roa
File:                     f2983f60-df74-3593-83d6-9699aa4424c4.roa (raw, json)
Hash identifier:          4DUsAL3Qu7c2yGyNGZ4k1iM5miUYLMqbG5Gt9SeGWxc=
Subject key identifier:   92:6F:33:8F:C4:84:81:81:96:90:41:14:C8:72:95:EF:0A:02:23:9A
Certificate issuer:       /CN=687c869a-fd9c-4db9-8dab-54b737103513
Certificate serial:       010D0C9F4328584CC07C9D0F479AA5DBEFBB0EE0
Authority key identifier: E2:E8:8D:09:45:CD:AE:02:95:34:DB:6E:B0:B2:01:38:22:F7:1E:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/f2983f60-df74-3593-83d6-9699aa4424c4.roa
Signing time:             Wed 04 Feb 2026 14:00:39 +0000
ROA not before:           Wed 04 Feb 2026 14:00:39 +0000
ROA not after:            Tue 05 May 2026 13:00:39 +0000
asID:                     33392
IP address blocks:        199.101.188.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/687c869a-fd9c-4db9-8dab-54b737103513.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/687c869a-fd9c-4db9-8dab-54b737103513.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Feb 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c0:7c:9d:0f:47:9a:a5:db:ef:bb:0e:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=687c869a-fd9c-4db9-8dab-54b737103513
        Validity
            Not Before: Feb  4 14:00:39 2026 GMT
            Not After : May  5 13:00:39 2026 GMT
        Subject: CN=caa613aa-281d-4bfb-ab54-33afd5e6ad78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:61:4e:8d:b3:30:18:9c:17:b0:d3:d8:19:76:
                    a9:7c:10:6c:a8:0c:01:b4:0a:d8:08:ac:7d:d7:77:
                    bd:ce:62:bc:22:24:2e:79:a4:11:f6:d3:01:63:6e:
                    04:50:79:11:48:30:eb:2f:9e:ad:d6:0f:2f:7b:45:
                    ad:ed:f5:68:b0:03:49:ee:15:bc:0d:28:5c:f5:48:
                    ca:7b:98:af:11:b8:8f:57:7c:f6:6b:ae:fc:53:ec:
                    ca:e8:96:68:7c:9e:f5:8b:4a:df:31:42:04:c4:e3:
                    57:fe:67:aa:c1:46:4f:37:0c:8d:8a:b6:6f:5d:e6:
                    47:e0:2b:8f:11:45:81:3a:93:b0:f3:68:77:5e:93:
                    53:ca:85:41:2c:7c:4a:83:53:15:0c:05:9d:88:d9:
                    ca:45:e3:b5:8d:f2:ac:f6:71:c0:d2:b7:90:b1:eb:
                    a2:0e:45:88:ce:47:49:0d:7b:ea:9f:d6:b5:91:48:
                    c4:de:97:4b:1b:48:4c:5c:3b:66:15:af:78:a2:71:
                    88:7c:15:08:f4:c0:b9:05:0a:6a:8e:ce:e2:1b:ff:
                    ab:fe:66:2d:6e:c7:83:bc:09:d8:1d:47:43:89:61:
                    65:2b:0f:8d:dd:88:76:26:4f:db:38:5c:32:26:56:
                    ea:3a:fd:59:8a:c5:9c:4c:de:3d:dc:d3:46:d7:bd:
                    40:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:6F:33:8F:C4:84:81:81:96:90:41:14:C8:72:95:EF:0A:02:23:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/f2983f60-df74-3593-83d6-9699aa4424c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/687c869a-fd9c-4db9-8dab-54b737103513.crl

            X509v3 Authority Key Identifier:
                keyid:E2:E8:8D:09:45:CD:AE:02:95:34:DB:6E:B0:B2:01:38:22:F7:1E:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.101.188.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:f6:81:6a:21:43:d4:3d:02:9e:7f:f2:42:8f:a7:ba:1b:ae:
         8b:3a:81:76:48:7d:10:2c:57:6f:23:43:cf:e9:7b:86:bf:30:
         fd:f4:59:d6:fa:e3:c0:16:18:bb:b3:04:a2:bc:52:2d:c3:71:
         44:e9:29:a8:b0:cd:c1:71:db:22:64:55:1d:b9:5d:91:5b:4f:
         fc:5f:5a:86:8e:7c:4e:ba:64:b9:f8:ba:b3:81:86:09:b0:d6:
         f8:cc:bb:67:34:fd:59:e5:2c:6b:fa:92:dc:d0:d1:0d:6b:d2:
         63:64:1b:0a:dd:72:aa:e4:9d:06:0d:93:88:68:a4:0d:19:ea:
         68:54:3b:69:52:7a:e8:ee:56:a5:ab:8f:45:a1:40:95:bc:6d:
         29:0e:af:0f:b9:7e:4c:07:ab:97:5f:fd:10:d3:90:ae:2d:46:
         21:7a:19:ec:ad:4f:f9:3b:ae:9e:2e:8e:4f:d8:4a:8a:27:d9:
         87:42:d3:69:3e:63:6d:f7:1f:93:2e:b7:bc:88:c0:d3:7c:55:
         19:92:a4:bc:b4:43:9b:74:69:71:5e:27:b4:e2:0f:41:ef:a0:
         32:ef:ff:99:39:78:ba:99:2d:a2:24:74:31:af:46:bc:37:46:
         ee:a2:73:76:6c:15:02:06:8d:61:36:0c:4b:a0:3d:51:74:9a:
         71:bd:c0:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 18 23:20:00 2026 by rpki-client