Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/af4beeb0-4520-3e16-8579-b418f81e6cfc.roa
File:                     af4beeb0-4520-3e16-8579-b418f81e6cfc.roa (raw, json)
Hash identifier:          aqFZQzlEzfTXnsMjVu4Bwb5IIbv9ecnXI1Bsy6bja2A=
Subject key identifier:   56:06:5C:1F:EE:EA:A4:7C:8A:A1:87:CA:9B:A5:B9:8B:D2:9F:A8:D3
Certificate issuer:       /CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
Certificate serial:       010D0C9F4328584CEFF23BE742AE9E05645F0F00
Authority key identifier: DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/af4beeb0-4520-3e16-8579-b418f81e6cfc.roa
Signing time:             Sat 21 Feb 2026 14:00:41 +0000
ROA not before:           Sat 21 Feb 2026 14:00:41 +0000
ROA not after:            Fri 22 May 2026 13:00:41 +0000
asID:                     6621
IP address blocks:        69.35.56.0/22 maxlen: 22
                          69.35.80.0/21 maxlen: 21
                          69.35.88.0/21 maxlen: 21
                          69.35.96.0/20 maxlen: 20
                          69.35.112.0/21 maxlen: 21
                          69.35.160.0/21 maxlen: 21
                          69.35.168.0/21 maxlen: 21
                          69.35.176.0/21 maxlen: 21
                          69.35.184.0/21 maxlen: 21
                          69.35.192.0/21 maxlen: 21
                          69.35.200.0/21 maxlen: 21
                          69.35.208.0/21 maxlen: 21
                          69.35.216.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 26 Feb 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ef:f2:3b:e7:42:ae:9e:05:64:5f:0f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
        Validity
            Not Before: Feb 21 14:00:41 2026 GMT
            Not After : May 22 13:00:41 2026 GMT
        Subject: CN=fab77811-6afd-4b9e-a69f-bb7e50fbb213
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:3c:ca:ff:bc:5d:33:34:f1:d0:91:db:42:de:
                    c0:81:e7:78:99:5b:e6:ac:03:0a:ba:9f:a4:31:b4:
                    f8:78:19:75:04:be:ea:e5:6f:1d:50:e1:b5:20:b4:
                    93:95:23:ca:78:87:54:4c:8f:40:7d:a4:49:2a:74:
                    43:ac:69:53:52:dc:6a:13:d7:75:5f:a5:d0:48:33:
                    ad:a7:f4:e6:8e:44:4c:51:cf:7e:b3:56:fc:bd:d8:
                    e4:76:c2:b0:f0:ee:54:f3:ee:9d:25:bf:66:e9:1f:
                    a9:68:ae:c5:fa:9f:13:1f:f0:fa:c2:1f:96:f2:b2:
                    51:ff:3d:35:ac:1e:46:bd:d1:d8:b9:65:c4:03:20:
                    f9:44:77:1a:bb:eb:2b:be:2f:98:e1:7e:ba:72:13:
                    89:61:05:0f:ba:95:c4:34:cd:6d:15:75:75:1a:93:
                    62:c2:00:25:14:bb:f4:78:81:89:7f:eb:3d:b1:7b:
                    11:b5:24:7c:aa:60:7b:bb:20:00:74:00:ca:ec:f5:
                    c6:63:27:4a:d4:39:97:8e:be:3e:85:d4:66:ef:97:
                    e6:05:e7:68:e8:16:26:e1:bb:47:ca:5b:d9:15:31:
                    c8:e2:00:14:08:59:8b:53:2d:27:ed:25:f7:24:dc:
                    14:c0:67:0c:10:00:c9:3b:44:e1:29:6b:f7:8a:63:
                    74:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:06:5C:1F:EE:EA:A4:7C:8A:A1:87:CA:9B:A5:B9:8B:D2:9F:A8:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/af4beeb0-4520-3e16-8579-b418f81e6cfc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl

            X509v3 Authority Key Identifier:
                keyid:DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.35.56.0/22
                  69.35.80.0-69.35.119.255
                  69.35.160.0-69.35.223.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:bb:a2:6a:ae:22:3d:51:c8:d5:6f:0e:2d:1b:1c:94:36:a7:
         8b:2f:62:a2:4e:d8:d4:78:86:8b:c4:d0:64:9d:9b:c6:b3:09:
         29:a5:ef:08:9e:5b:ef:18:39:ba:c9:59:c0:7a:8d:cf:dd:c7:
         d0:71:89:3a:ce:92:22:22:0b:25:10:79:1d:2f:21:8c:1c:df:
         56:b2:24:67:b2:09:45:65:22:6c:4c:36:20:96:fb:98:9a:3c:
         7c:1f:b8:a1:07:47:d0:a5:6b:58:4b:9e:48:79:70:e5:1f:1f:
         4d:ce:76:81:79:fe:d9:79:61:fe:73:18:0c:c1:df:ed:64:9e:
         8a:36:a4:ec:ca:03:39:0d:1f:36:ae:27:ec:cc:a1:5a:c7:f2:
         a0:e2:b3:c4:7e:f7:48:0a:95:83:9b:40:c3:25:b2:3a:d8:ed:
         8f:5e:17:55:c9:3e:d4:a7:bb:c6:e6:fb:96:d1:0e:8a:7e:62:
         9b:ab:08:b3:49:3c:49:fd:57:a3:4c:f7:b0:3f:05:98:b4:49:
         67:6b:d4:8e:a8:b9:45:59:c9:37:d8:e0:d3:f0:3c:37:9e:08:
         e4:6a:79:c2:8c:10:a8:37:c8:23:60:23:b9:4b:0a:c2:cf:05:
         db:09:ea:ed:34:40:c1:51:7a:87:02:86:91:64:ff:4f:36:19:
         02:d9:52:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 18:43:05 2026 by rpki-client