Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d4f8e71e-cbf2-356c-a6c2-a772f5db3669.roa
File:                     d4f8e71e-cbf2-356c-a6c2-a772f5db3669.roa (raw, json)
Hash identifier:          PeLcrM1VHUpkXIvefMPxTYc+ojNimGLUFlN88r+sR/8=
Subject key identifier:   94:C4:30:F9:A5:6A:64:D0:A5:9A:C6:72:58:12:8C:60:E2:0F:74:6F
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584CE36207D5DD2335ED6F3C3D00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d4f8e71e-cbf2-356c-a6c2-a772f5db3669.roa
Signing time:             Tue 17 Feb 2026 02:00:31 +0000
ROA not before:           Tue 17 Feb 2026 02:00:31 +0000
ROA not after:            Mon 18 May 2026 01:00:31 +0000
asID:                     577
IP address blocks:        142.68.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e3:62:07:d5:dd:23:35:ed:6f:3c:3d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Feb 17 02:00:31 2026 GMT
            Not After : May 18 01:00:31 2026 GMT
        Subject: CN=a0c69604-1af1-4cfa-9793-fa9888c3d894
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:09:0e:38:0c:0f:fa:b1:18:07:5f:5f:8d:66:
                    6c:41:e6:f7:d7:84:b6:72:a5:3d:a5:c8:27:7d:da:
                    7b:34:b3:1f:29:10:a9:3b:00:24:51:2c:03:93:f6:
                    9d:ed:6e:d5:a0:b5:b9:ca:3e:5a:4f:ab:7e:8d:de:
                    6b:8e:cc:b5:7b:b0:f8:79:c9:b2:9e:0c:f0:4d:72:
                    c0:24:3d:95:9c:67:18:11:d6:0f:86:c0:3e:5e:0c:
                    13:7e:9a:3c:c1:9f:e6:91:1f:3d:3b:ed:3e:d7:f8:
                    49:d7:51:91:39:e3:19:f8:68:ef:d4:f9:da:b2:d0:
                    58:63:1d:b3:9d:00:71:e4:b1:ae:3a:03:c3:23:c3:
                    85:65:7b:d9:5e:27:c1:e6:28:68:85:57:06:10:98:
                    cb:2b:89:b9:b2:c5:ac:45:6f:a3:51:91:e3:b7:df:
                    a9:22:18:84:69:76:ef:79:ec:05:82:09:50:d2:da:
                    9b:dd:17:1d:f5:f5:4a:e9:a8:9a:02:0a:86:db:ec:
                    46:93:c9:2f:92:87:ce:83:3e:ea:14:d3:a0:ad:b0:
                    6f:10:6a:da:4d:76:ba:61:a9:ac:c2:d1:e0:d4:2f:
                    b7:73:a3:a0:59:b0:4d:21:c0:48:24:4a:c5:d2:0e:
                    20:40:dd:a1:3b:77:85:71:d1:85:f9:28:6f:b2:b0:
                    9f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:C4:30:F9:A5:6A:64:D0:A5:9A:C6:72:58:12:8C:60:E2:0F:74:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d4f8e71e-cbf2-356c-a6c2-a772f5db3669.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.68.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:72:02:e8:c0:da:f8:a5:a5:f8:2f:4e:78:9a:65:5f:ec:e7:
         97:a4:76:7d:58:2d:1d:65:a7:75:e9:09:42:5a:33:87:28:a7:
         45:e7:4c:8b:11:d9:89:7a:e5:23:23:8b:f1:7a:ca:cd:c5:ee:
         c7:d7:35:d2:6c:e0:dd:15:91:b8:15:f9:6e:44:53:21:0a:4c:
         2f:4f:26:85:62:5b:0f:6a:24:a7:f0:f1:c8:98:77:8a:ce:9a:
         59:fe:40:08:b1:e2:a0:67:ff:f3:1e:37:6a:d0:5e:69:60:69:
         57:b7:ff:c4:ff:1b:4c:da:04:89:63:8b:d4:97:66:32:7c:b5:
         8f:b3:f4:50:4e:28:ff:1c:3a:84:f0:6c:d6:90:d5:b4:b8:62:
         54:cb:58:39:f5:a6:8f:04:d9:86:82:6e:27:c4:f8:2d:22:fb:
         5f:86:30:54:28:59:1b:59:ed:3b:1c:d2:c6:3f:71:b4:ba:d7:
         ed:a2:2b:bc:ec:65:45:d4:01:27:87:6c:26:8a:07:6c:e8:38:
         0e:a9:b8:a7:e1:84:b2:22:7a:4a:d9:b1:0e:28:64:fe:b8:f1:
         bd:b9:6f:ac:71:8d:7d:81:41:ca:da:6a:33:4b:45:ed:c8:9e:
         68:25:6b:2d:b7:bf:f7:88:01:7b:0a:f5:d6:9c:3d:f4:d9:52:
         3e:3f:e4:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 27 04:50:01 2026 by rpki-client