Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/35f8cbc4-68be-3123-b822-aef3426ff483.roa
File:                     35f8cbc4-68be-3123-b822-aef3426ff483.roa (raw, json)
Hash identifier:          oPv2CknvkLH/Zjrb6BpRFBNW1ZtjSFwuMmGqxgQi20Q=
Subject key identifier:   EB:19:27:4D:21:23:5B:CC:1A:57:F3:52:12:F5:DF:96:50:3F:35:E8
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584CC6226EAF01F0229B66D08E80
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/35f8cbc4-68be-3123-b822-aef3426ff483.roa
Signing time:             Fri 06 Feb 2026 14:34:04 +0000
ROA not before:           Fri 06 Feb 2026 14:34:04 +0000
ROA not after:            Thu 07 May 2026 13:34:04 +0000
asID:                     265693
IP address blocks:        38.253.76.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Feb 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c6:22:6e:af:01:f0:22:9b:66:d0:8e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Feb  6 14:34:04 2026 GMT
            Not After : May  7 13:34:04 2026 GMT
        Subject: CN=33db6c1f-e425-4e5d-b7d0-f140d6616e7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:47:a2:c5:ba:9a:6e:16:65:8b:ee:3c:50:68:
                    d5:6f:98:87:19:30:05:19:67:13:23:4e:aa:56:cb:
                    2c:30:2d:d8:f9:bd:cf:7e:35:ea:ab:a2:8f:e9:a1:
                    e2:9b:a2:02:9e:50:fa:3a:f8:15:47:f6:09:ca:96:
                    49:96:d1:39:b3:1e:22:87:07:3a:d0:1f:19:c5:4c:
                    f5:cb:7b:21:85:d2:30:bb:bc:a2:e0:9e:8b:57:6a:
                    e0:5a:44:03:bd:ac:78:76:4c:50:92:da:47:11:f0:
                    71:f6:5f:c5:01:be:05:d8:77:ff:ef:13:50:4e:da:
                    96:45:b3:bf:73:a2:98:c7:c8:67:10:f1:9d:a8:56:
                    fe:27:9c:81:8a:f3:39:b8:dd:65:dd:33:ce:c2:86:
                    b5:18:13:8c:58:df:13:ff:c1:9a:ed:c7:8b:e5:2a:
                    99:39:75:10:90:d2:dd:61:3d:48:d0:21:d9:46:b1:
                    cd:7e:94:7b:72:e7:0c:d7:b9:68:9f:08:98:af:95:
                    7a:52:23:d3:3e:72:e9:28:6e:93:62:9b:e3:29:8a:
                    06:c6:c3:71:67:18:1a:0f:a0:5e:a4:fd:fc:51:da:
                    90:99:85:09:65:d9:39:50:e5:4a:94:3b:25:ff:5b:
                    d3:38:08:75:2c:01:b4:91:7a:dc:ad:7d:d1:c3:e9:
                    09:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:19:27:4D:21:23:5B:CC:1A:57:F3:52:12:F5:DF:96:50:3F:35:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/35f8cbc4-68be-3123-b822-aef3426ff483.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.253.76.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cc:bb:c9:4d:ac:01:5f:83:b7:c4:89:aa:76:61:c3:8f:e6:ae:
         be:d0:0b:27:4a:9a:b4:7d:2e:38:e4:c9:0b:f5:c8:d9:13:9c:
         19:3b:d8:d5:61:8e:52:f8:ce:19:d5:60:48:1f:29:0e:7a:0d:
         45:c9:ac:0a:df:56:fc:22:22:e9:48:04:3f:ab:4c:aa:c6:a9:
         eb:10:c2:cd:73:cf:7f:86:06:cb:38:19:7b:1e:6d:c8:08:5d:
         b5:13:9e:d9:6f:e8:11:da:95:e2:cd:7e:07:4a:bb:33:71:e7:
         23:a5:50:38:51:8b:f2:c0:94:94:ac:5a:d3:95:e5:a4:9d:8d:
         47:c6:fb:61:bb:03:b5:8e:f4:8b:1c:4c:33:91:d2:02:32:c3:
         1f:cc:03:6d:1c:7e:4e:c3:51:74:3f:06:9f:4a:76:58:6a:c9:
         f8:ad:e7:6d:64:db:75:61:57:51:d1:70:b2:a3:05:f9:1d:d0:
         22:ff:7e:90:b0:d9:1c:58:31:74:fa:0b:f5:2e:97:9c:21:4b:
         e6:90:7e:97:f8:e9:c0:95:85:6c:d3:1f:93:9b:a5:12:5f:9d:
         bb:bc:81:99:8b:56:25:04:3c:96:1b:9d:89:c0:95:e3:9a:64:
         ac:b7:10:79:12:34:83:cd:fb:a9:e8:97:d9:72:78:9a:94:ab:
         a8:88:66:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 02:59:08 2026 by rpki-client