Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/04906f0f-7fa0-3613-ba97-043ddae2854e.roa
File:                     04906f0f-7fa0-3613-ba97-043ddae2854e.roa (raw, json)
Hash identifier:          7G8jKJTYprCKiPXXPEA+t45NtEcAGVm7CzrNYBYcFoY=
Subject key identifier:   73:19:A4:CC:10:3F:36:95:2A:40:73:BF:E8:E0:B5:B2:5B:7F:1F:F1
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584CE3622725EA106F2E9AC6FA80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/04906f0f-7fa0-3613-ba97-043ddae2854e.roa
Signing time:             Tue 17 Feb 2026 02:00:31 +0000
ROA not before:           Tue 17 Feb 2026 02:00:31 +0000
ROA not after:            Mon 18 May 2026 01:00:31 +0000
asID:                     577
IP address blocks:        142.163.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e3:62:27:25:ea:10:6f:2e:9a:c6:fa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Feb 17 02:00:31 2026 GMT
            Not After : May 18 01:00:31 2026 GMT
        Subject: CN=b9199cce-78a7-4fb9-a218-1d6141b9eb79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d4:6a:01:67:36:d8:97:74:67:2a:0b:25:25:
                    31:c0:a4:bf:a3:09:24:10:b8:c8:04:b7:9c:14:85:
                    ee:bb:04:3c:83:09:09:ff:fe:b4:cb:5f:3a:7d:4d:
                    4e:dd:26:45:90:57:8e:1d:d9:c2:d4:08:79:b7:13:
                    61:a9:69:19:43:1f:3c:37:d7:f4:e3:da:08:de:a5:
                    fd:fc:b8:ff:ae:73:d8:b8:de:93:d3:3c:5e:60:0b:
                    b3:68:b3:a3:eb:8e:46:94:12:ee:d6:e2:c1:d4:b1:
                    15:ae:51:29:b2:20:e4:bd:a9:29:a5:09:1a:6d:3a:
                    6d:b0:57:f5:2f:fe:8e:de:45:ef:91:01:3a:08:5f:
                    b0:bd:91:2e:7b:bf:9c:da:06:38:f8:70:9d:b5:f3:
                    65:f9:09:48:5f:86:3b:ec:4b:08:7b:57:33:4f:c4:
                    c4:09:99:74:b8:98:3d:d1:2e:e0:4f:4e:fb:70:e2:
                    c7:58:cb:3e:ff:f7:ee:18:cd:82:62:91:f6:ee:5e:
                    1b:79:41:4a:4c:16:bc:de:be:cf:d7:9d:8d:31:37:
                    a9:d9:84:2d:bf:12:6f:5d:da:d8:36:93:fc:bf:75:
                    e5:da:5d:ae:0d:0f:42:9c:46:d8:05:7f:7a:b7:5f:
                    a0:9a:15:fd:72:bf:b3:57:d9:ad:99:08:aa:73:7e:
                    9b:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:19:A4:CC:10:3F:36:95:2A:40:73:BF:E8:E0:B5:B2:5B:7F:1F:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/04906f0f-7fa0-3613-ba97-043ddae2854e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.163.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:47:bd:a4:39:9c:e5:c4:36:c5:5a:24:2b:0c:36:5a:ac:e6:
         45:73:4a:20:90:a6:9a:35:3a:ce:ee:79:0b:ae:1f:92:0a:60:
         1b:2b:ea:89:d8:6d:dc:b4:aa:c9:c4:6c:60:64:81:63:42:86:
         7a:a1:33:ca:f6:72:67:02:70:ae:eb:bd:3d:f1:a9:09:43:0d:
         db:8b:bc:fb:c5:b2:5d:84:cb:ca:d8:06:8f:fa:86:7e:df:16:
         5a:c5:24:77:98:71:f4:ab:29:89:47:da:59:65:c2:9b:f8:b0:
         21:44:94:a3:58:1f:f4:bd:79:58:99:a1:00:59:30:e1:97:79:
         d6:0e:8f:15:09:e8:1c:ca:d4:18:ed:68:7e:bd:74:b1:20:ec:
         0d:da:79:78:d4:e6:22:5a:75:50:53:50:9d:a9:df:f5:31:3d:
         27:3f:90:32:b4:96:37:e7:0c:28:c5:71:2d:06:af:42:15:5f:
         e9:80:0a:3b:b4:e8:4f:ec:ad:5f:c5:91:5e:63:ac:dd:30:8f:
         8b:b5:02:40:42:54:dc:71:3b:57:5b:07:b5:56:bb:6c:bc:79:
         9c:66:e2:d9:84:5f:18:a0:bb:ee:b4:5a:0d:25:c1:f4:56:b5:
         d3:69:9b:68:25:ec:29:1a:8c:dc:2d:80:4f:4a:77:a9:b0:31:
         bf:62:ba:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 27 04:53:39 2026 by rpki-client