Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7db346f0-17b1-4b0d-942b-291f70e18910/e289bffb-83d4-374a-b0ae-085e30cda0d5.roa
File:                     e289bffb-83d4-374a-b0ae-085e30cda0d5.roa (raw, json)
Hash identifier:          QRtI9o9JKTIz34yqmiWlleChhnx7wHUdAwUn20Yo4lU=
Subject key identifier:   91:99:F6:99:66:B3:A9:60:EC:0F:C6:30:8A:89:95:7B:5D:19:6A:86
Certificate issuer:       /CN=7db346f0-17b1-4b0d-942b-291f70e18910
Certificate serial:       010D0C9F4328584CDC676CCFE64197D136477CA0
Authority key identifier: 4D:B3:C5:05:6C:88:DD:EA:E8:26:74:75:4A:EA:75:38:D5:7A:4B:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7db346f0-17b1-4b0d-942b-291f70e18910.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7db346f0-17b1-4b0d-942b-291f70e18910/e289bffb-83d4-374a-b0ae-085e30cda0d5.roa
Signing time:             Sat 14 Feb 2026 14:00:41 +0000
ROA not before:           Sat 14 Feb 2026 14:00:41 +0000
ROA not after:            Fri 15 May 2026 13:00:41 +0000
asID:                     40317
IP address blocks:        67.221.128.0/20 maxlen: 24
                          68.168.192.0/20 maxlen: 24
                          69.46.48.0/20 maxlen: 24
                          162.248.236.0/22 maxlen: 24
                          167.89.128.0/17 maxlen: 24
                          192.170.130.0/23 maxlen: 24
                          199.58.76.0/22 maxlen: 24
                          199.96.244.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7db346f0-17b1-4b0d-942b-291f70e18910/7db346f0-17b1-4b0d-942b-291f70e18910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7db346f0-17b1-4b0d-942b-291f70e18910/7db346f0-17b1-4b0d-942b-291f70e18910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7db346f0-17b1-4b0d-942b-291f70e18910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:dc:67:6c:cf:e6:41:97:d1:36:47:7c:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7db346f0-17b1-4b0d-942b-291f70e18910
        Validity
            Not Before: Feb 14 14:00:41 2026 GMT
            Not After : May 15 13:00:41 2026 GMT
        Subject: CN=b036e748-6268-4294-8ff0-810c4c5258b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:77:ba:c4:fa:01:cf:4e:37:d6:38:e4:87:5e:
                    4b:8c:5b:84:29:cf:78:82:b3:85:cb:ae:05:b6:94:
                    c8:ab:c8:6e:01:6a:e8:30:72:6b:d5:c5:2f:9e:89:
                    29:26:31:88:c5:36:30:a4:4f:49:cd:a3:13:c5:e0:
                    b9:d3:d3:e9:ac:80:4f:52:80:59:44:69:b5:61:fe:
                    a7:c7:a9:e5:2a:c6:6e:39:a6:a6:c4:36:88:32:a7:
                    82:f6:43:98:5e:c0:57:4e:ed:fe:ba:e0:7a:35:25:
                    d5:bc:5e:5b:60:15:9b:05:0b:cd:79:06:9a:15:47:
                    61:0b:d9:d7:fe:87:e1:ba:08:c9:39:1f:39:4a:6e:
                    e7:fb:89:bc:30:bc:d8:5e:2f:f0:05:eb:c7:68:2d:
                    92:3c:e0:43:31:f1:08:96:6a:a3:f2:b1:b4:db:26:
                    c1:d2:ef:ea:2d:3c:a5:1b:15:52:42:66:9b:e8:3a:
                    9b:7c:8a:70:95:54:17:4a:0c:21:0a:5a:13:cb:aa:
                    b7:96:1c:d8:67:65:41:fb:96:f9:22:e8:03:3b:da:
                    1b:08:3e:04:b2:60:54:10:ca:40:a5:6d:2b:8b:a5:
                    36:50:0d:16:59:57:82:33:b8:a1:f2:6d:01:ed:77:
                    75:99:da:c0:b9:15:a0:67:ea:09:69:c0:71:31:9b:
                    7c:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:99:F6:99:66:B3:A9:60:EC:0F:C6:30:8A:89:95:7B:5D:19:6A:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7db346f0-17b1-4b0d-942b-291f70e18910/e289bffb-83d4-374a-b0ae-085e30cda0d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7db346f0-17b1-4b0d-942b-291f70e18910/7db346f0-17b1-4b0d-942b-291f70e18910.crl

            X509v3 Authority Key Identifier:
                keyid:4D:B3:C5:05:6C:88:DD:EA:E8:26:74:75:4A:EA:75:38:D5:7A:4B:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7db346f0-17b1-4b0d-942b-291f70e18910.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.221.128.0/20
                  68.168.192.0/20
                  69.46.48.0/20
                  162.248.236.0/22
                  167.89.128.0/17
                  192.170.130.0/23
                  199.58.76.0/22
                  199.96.244.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:66:ad:34:a4:44:4a:45:f0:a3:69:d5:37:d6:86:63:32:d0:
         89:7d:93:34:b5:b5:d7:56:58:46:d2:0b:fe:59:8b:06:5d:f0:
         68:4a:f0:29:90:bf:a2:c5:8d:da:53:3e:bc:64:0a:fd:37:b4:
         cf:34:e4:65:11:50:be:33:35:b1:13:0b:b9:f0:28:a5:ef:3d:
         a5:41:96:42:79:c3:95:3e:4f:35:cb:4f:4e:28:8f:b8:87:83:
         f4:95:85:7d:86:2f:06:be:5e:40:d1:da:af:58:f9:50:94:b6:
         b6:a7:a0:59:0c:64:31:d4:13:8d:3e:d0:66:cc:14:e7:99:4d:
         d4:e5:5e:e6:b5:42:1e:b8:58:2c:52:77:5a:a3:97:ba:18:ec:
         6f:fc:6a:eb:25:84:b4:9d:27:bf:3e:76:4d:5e:46:d4:89:2f:
         fc:ac:37:8e:c0:2d:60:7f:bc:98:40:b3:d9:1a:42:f0:ad:a0:
         b2:c6:be:3c:30:df:ed:c5:52:e5:ce:4c:4d:9a:2e:fe:b5:5d:
         f9:1b:49:d3:3f:d6:31:72:49:d5:0a:d3:8e:16:2b:ec:4d:31:
         a8:ee:42:75:6e:f9:7f:a6:48:e5:5b:7f:5d:80:3f:1e:e2:d7:
         21:09:32:d1:22:99:16:69:26:4f:3f:0d:f7:64:bf:fc:26:3c:
         89:d3:b2:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 27 13:00:12 2026 by rpki-client