Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/46e29740-0c80-4bd4-9623-90d73a3fa618/690736af-dc4f-39b4-bab0-e96be3281ec9.roa
File:                     690736af-dc4f-39b4-bab0-e96be3281ec9.roa (raw, json)
Hash identifier:          ZrSYYvKIdkyis4GLOJDCj4yR95J9TVS45opCgY9hxq0=
Subject key identifier:   70:AA:6C:DC:43:FE:BA:4B:91:AF:8B:B3:51:31:8E:21:9F:DD:92:0F
Certificate issuer:       /CN=46e29740-0c80-4bd4-9623-90d73a3fa618
Certificate serial:       010D0C9F4328584CEE8CC142448D850834ECF400
Authority key identifier: C0:5E:34:43:61:80:08:8E:A8:73:FC:BD:F0:83:F8:86:54:12:2A:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/46e29740-0c80-4bd4-9623-90d73a3fa618.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/46e29740-0c80-4bd4-9623-90d73a3fa618/690736af-dc4f-39b4-bab0-e96be3281ec9.roa
Signing time:             Sat 21 Feb 2026 02:00:32 +0000
ROA not before:           Sat 21 Feb 2026 02:00:32 +0000
ROA not after:            Fri 22 May 2026 01:00:32 +0000
asID:                     198949
IP address blocks:        129.95.0.0/16 maxlen: 24
                          137.53.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/46e29740-0c80-4bd4-9623-90d73a3fa618/46e29740-0c80-4bd4-9623-90d73a3fa618.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/46e29740-0c80-4bd4-9623-90d73a3fa618/46e29740-0c80-4bd4-9623-90d73a3fa618.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/46e29740-0c80-4bd4-9623-90d73a3fa618.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Feb 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ee:8c:c1:42:44:8d:85:08:34:ec:f4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46e29740-0c80-4bd4-9623-90d73a3fa618
        Validity
            Not Before: Feb 21 02:00:32 2026 GMT
            Not After : May 22 01:00:32 2026 GMT
        Subject: CN=0fb5f7ad-f44d-492c-b4b0-eb5b205d32f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:75:8b:34:c2:89:77:70:cc:ef:0e:8c:44:d6:
                    64:fa:1f:86:77:cb:a6:26:1b:18:47:d7:aa:63:64:
                    e6:9c:5a:40:cf:96:0f:7c:56:22:89:ed:00:4a:48:
                    17:6d:6c:30:95:cf:b5:1d:65:d4:0f:d0:d4:63:e2:
                    50:b7:24:30:75:d2:84:3e:9b:26:ec:35:68:e5:e9:
                    76:11:07:af:d9:18:d5:06:44:e0:fa:cc:22:5b:26:
                    a6:4b:e7:74:ae:59:88:dc:3f:6a:5d:2e:97:a6:d3:
                    df:2c:28:a7:3c:3f:4e:23:34:ae:2d:55:29:18:6d:
                    f7:9a:37:2b:89:d5:ff:ce:fd:a5:0a:b1:4d:22:e9:
                    ef:f5:4b:89:36:9f:0a:83:84:66:02:a7:4f:0a:dc:
                    ae:be:0a:e7:9e:eb:c3:b8:8b:92:28:da:71:4e:b5:
                    df:9f:9c:d1:44:33:54:d6:2b:00:7c:03:dc:b4:fc:
                    39:94:38:42:0b:e2:c3:3e:22:76:19:9c:7b:ad:44:
                    20:b6:28:42:bb:ce:12:8b:28:73:42:4c:8d:07:76:
                    7a:69:f6:c8:6e:91:00:04:4a:d1:e6:fe:52:92:7c:
                    f7:ae:76:42:15:84:c8:9d:65:61:1a:0a:ea:ca:76:
                    d2:ea:10:ae:c8:41:b5:05:f1:21:95:b2:c6:df:d3:
                    d7:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:AA:6C:DC:43:FE:BA:4B:91:AF:8B:B3:51:31:8E:21:9F:DD:92:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/46e29740-0c80-4bd4-9623-90d73a3fa618/690736af-dc4f-39b4-bab0-e96be3281ec9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/46e29740-0c80-4bd4-9623-90d73a3fa618/46e29740-0c80-4bd4-9623-90d73a3fa618.crl

            X509v3 Authority Key Identifier:
                keyid:C0:5E:34:43:61:80:08:8E:A8:73:FC:BD:F0:83:F8:86:54:12:2A:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/46e29740-0c80-4bd4-9623-90d73a3fa618.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.95.0.0/16
                  137.53.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:15:fe:39:50:49:b5:ca:b2:30:03:a6:b4:9f:8e:b3:40:37:
         93:f1:35:b7:9e:c9:cb:ed:c5:5d:d3:7f:da:58:05:52:b1:78:
         e6:dc:19:7f:5e:19:8f:9b:c0:2a:d2:56:24:6e:a0:25:ce:8e:
         5c:2d:0e:9b:25:a8:be:80:15:26:a9:72:f7:22:a1:2b:8b:6e:
         b0:8c:2e:26:e2:98:7a:4a:a7:ed:54:20:84:6e:22:a6:17:87:
         4e:ae:25:e0:71:75:72:c9:38:f5:a4:8b:f2:db:fb:72:83:7a:
         0e:34:ff:a8:78:4b:da:d2:28:25:d2:9d:9c:91:70:5d:51:ed:
         57:9a:d1:c6:87:e7:d1:a7:32:5e:21:2c:5f:94:95:08:0e:a3:
         a7:de:3e:08:18:bb:d8:91:4b:5d:8a:94:46:f3:16:26:1d:20:
         78:bf:39:72:7d:b7:47:bc:02:39:a4:11:fe:5b:37:e1:bf:79:
         f6:db:22:ca:c2:d0:9e:f2:4e:a8:b2:04:b2:0a:11:5d:ca:73:
         7d:22:76:59:5b:0b:1b:75:6f:ab:4f:17:0e:ba:aa:1d:34:4a:
         07:ce:b3:43:4e:3d:bf:9a:cb:e1:4b:aa:e4:4a:b4:3c:3d:2f:
         87:81:af:99:2f:46:cc:90:02:b7:3a:21:c7:54:d6:43:cf:2b:
         30:7b:ff:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 03:56:30 2026 by rpki-client