Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b430551-8bf9-4310-8a7f-b2233e29affd/89ce6886-5a3c-3e1b-a8e7-211977089ac7.roa
File:                     89ce6886-5a3c-3e1b-a8e7-211977089ac7.roa (raw, json)
Hash identifier:          iTs4QIpy7qOR7iWFOsOklrWc1oeYvs8UelEmnwecugU=
Subject key identifier:   46:80:E2:2F:E3:AC:59:79:CB:20:84:2F:14:20:7E:E9:C4:61:4D:3E
Certificate issuer:       /CN=7b430551-8bf9-4310-8a7f-b2233e29affd
Certificate serial:       010D0C9F4328584C602BF0DC15125F46DFB27000
Authority key identifier: 6E:BE:D9:86:8F:66:C6:07:35:6F:A7:B3:E7:50:17:8D:D8:22:7C:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b430551-8bf9-4310-8a7f-b2233e29affd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b430551-8bf9-4310-8a7f-b2233e29affd/89ce6886-5a3c-3e1b-a8e7-211977089ac7.roa
Signing time:             Thu 01 Jan 2026 02:00:31 +0000
ROA not before:           Thu 01 Jan 2026 02:00:31 +0000
ROA not after:            Wed 01 Apr 2026 01:00:31 +0000
asID:                     17456
IP address blocks:        199.127.236.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b430551-8bf9-4310-8a7f-b2233e29affd/7b430551-8bf9-4310-8a7f-b2233e29affd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b430551-8bf9-4310-8a7f-b2233e29affd/7b430551-8bf9-4310-8a7f-b2233e29affd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b430551-8bf9-4310-8a7f-b2233e29affd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Feb 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:60:2b:f0:dc:15:12:5f:46:df:b2:70:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b430551-8bf9-4310-8a7f-b2233e29affd
        Validity
            Not Before: Jan  1 02:00:31 2026 GMT
            Not After : Apr  1 01:00:31 2026 GMT
        Subject: CN=6be74e76-3bde-4049-b3b6-3f7f98e040ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:b0:f1:e4:dc:d9:a1:f0:6a:07:f8:95:29:ec:
                    d3:bc:ef:23:d0:93:ce:41:93:ec:4b:0d:9a:73:18:
                    3a:0f:ad:a9:5a:51:88:88:02:4b:00:37:87:46:85:
                    41:81:30:fd:c3:a4:7e:83:7f:38:2c:96:1c:eb:f2:
                    70:a8:af:f2:fd:88:1a:88:90:66:63:ad:de:92:fb:
                    60:54:fc:73:68:c3:3d:2f:04:51:df:ec:99:13:4f:
                    88:01:fb:97:b1:2c:2e:e7:82:52:2a:15:b0:eb:06:
                    e9:a8:d8:3f:76:60:57:b8:de:e7:e0:4e:6b:3c:f0:
                    aa:9f:ce:f2:5a:2b:58:ea:a7:74:1f:b7:2e:d7:ed:
                    e1:28:80:aa:51:80:07:a5:bb:d6:a4:ca:90:08:e6:
                    6b:15:ea:80:7e:aa:a5:94:79:10:06:cb:d2:46:98:
                    10:e8:22:69:f6:b2:9c:c4:d6:80:26:b2:4b:df:74:
                    9a:38:cf:b2:45:2e:ca:67:f7:95:27:7a:de:78:23:
                    68:f5:d4:6a:2f:20:2b:b2:e9:03:8d:61:33:9d:82:
                    9d:f4:86:15:c9:87:8c:02:66:95:26:e5:4a:d9:34:
                    33:0f:24:29:f0:76:ab:26:5a:26:78:3f:73:38:90:
                    69:3f:d1:b6:2b:45:4f:34:86:ad:d0:6a:b5:87:03:
                    56:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:80:E2:2F:E3:AC:59:79:CB:20:84:2F:14:20:7E:E9:C4:61:4D:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b430551-8bf9-4310-8a7f-b2233e29affd/89ce6886-5a3c-3e1b-a8e7-211977089ac7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b430551-8bf9-4310-8a7f-b2233e29affd/7b430551-8bf9-4310-8a7f-b2233e29affd.crl

            X509v3 Authority Key Identifier:
                keyid:6E:BE:D9:86:8F:66:C6:07:35:6F:A7:B3:E7:50:17:8D:D8:22:7C:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b430551-8bf9-4310-8a7f-b2233e29affd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.127.236.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:31:ab:28:d0:e3:2b:19:dd:41:ee:b7:ba:0a:56:d3:71:cf:
         a4:28:7a:8f:b2:5d:d6:2d:20:09:53:25:8c:ec:ec:93:18:88:
         c1:76:1e:98:26:d5:18:9d:0e:34:38:b5:bb:c6:c4:91:e9:0f:
         5a:7a:e3:ac:d4:27:72:01:b6:95:26:7d:a6:89:15:44:82:95:
         4f:49:5c:2b:75:7b:2e:00:07:1e:65:c6:f9:d4:08:b6:23:7e:
         45:87:96:42:0d:2e:28:ef:1c:56:0e:04:49:44:d6:0e:48:17:
         4d:01:5d:b4:e4:f6:3f:6f:06:a6:10:ab:5c:fc:2d:a8:d0:0e:
         4a:23:5f:13:a5:c0:ce:c2:10:db:48:b7:d2:9a:13:5b:ad:88:
         7e:d0:e9:08:dd:96:71:a3:f2:8c:50:1f:9f:56:cb:62:62:86:
         44:e3:cc:51:e6:a8:0f:1e:97:5a:78:14:59:39:67:3e:a3:ee:
         71:40:a0:44:cf:9f:f4:0f:ee:7d:a3:8d:1d:92:06:22:a7:d2:
         5c:5e:a5:ac:6d:9a:a9:bb:43:24:ee:d3:d2:a2:49:35:62:eb:
         a3:9e:5b:de:a3:c6:2d:2a:23:29:39:bc:cf:99:a3:6b:58:00:
         a8:75:7f:7a:a0:de:82:cb:d6:b1:0b:95:83:36:0b:1e:70:db:
         8c:34:03:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 00:46:54 2026 by rpki-client