Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/76c44b00-989e-36fc-900c-bd70d2bf1e52.roa
File:                     76c44b00-989e-36fc-900c-bd70d2bf1e52.roa (raw, json)
Hash identifier:          jGEx7rxmdprKZyrkjnkI2/1vOw7cvgTaifPR7hUMEL0=
Subject key identifier:   89:3E:9E:8B:51:64:2D:BF:FF:F0:65:77:D1:AD:13:2F:F8:DB:39:E3
Certificate issuer:       /CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06
Certificate serial:       010D0C9F4328584CED277C67B3C373A3E91F3540
Authority key identifier: B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/76c44b00-989e-36fc-900c-bd70d2bf1e52.roa
Signing time:             Fri 20 Feb 2026 14:00:41 +0000
ROA not before:           Fri 20 Feb 2026 14:00:41 +0000
ROA not after:            Thu 21 May 2026 13:00:41 +0000
asID:                     33442
IP address blocks:        149.23.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Feb 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ed:27:7c:67:b3:c3:73:a3:e9:1f:35:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06
        Validity
            Not Before: Feb 20 14:00:41 2026 GMT
            Not After : May 21 13:00:41 2026 GMT
        Subject: CN=6b4058bc-9805-4be8-b8c7-533b3d1cb9a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c0:40:d2:62:0a:17:8a:fe:1a:ba:18:2b:05:
                    6b:4e:9c:f4:58:08:4b:64:3d:7a:88:e4:54:25:67:
                    5f:b9:2d:a4:c6:84:a5:93:65:e3:1a:88:ca:86:43:
                    4d:52:67:ed:6b:46:67:e9:4b:80:40:c2:6f:9a:d2:
                    72:43:59:53:f2:84:dc:bd:f1:47:73:22:21:3e:b9:
                    c9:dd:f3:39:7c:ee:e6:8e:45:26:33:dc:f3:9b:61:
                    10:53:42:72:9b:eb:d0:1e:84:e8:1a:7d:24:a1:a7:
                    dc:f5:e4:b7:3d:8d:ca:31:df:35:8a:5f:3f:6a:55:
                    13:10:5b:8d:38:1b:9e:dd:90:d1:10:4b:19:b2:ee:
                    b8:69:ff:c2:34:98:f2:c4:04:61:60:94:12:61:44:
                    d4:61:76:11:52:2c:33:ce:11:23:e9:8f:92:44:a1:
                    a8:31:1e:00:0f:c9:b4:f3:79:d3:be:86:b5:c8:d6:
                    44:b2:bf:fc:88:34:d7:54:ff:0a:58:f5:3d:a7:b4:
                    22:58:9a:0f:2b:f5:a5:95:5a:2a:8d:85:2e:26:81:
                    98:7b:2b:74:0f:35:35:21:84:57:91:fb:59:85:e9:
                    9a:38:59:27:e7:7b:2b:9f:00:ee:dc:f4:c1:30:cf:
                    e3:bd:8f:6d:d2:0d:7d:20:03:1f:a1:6e:66:07:05:
                    95:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:3E:9E:8B:51:64:2D:BF:FF:F0:65:77:D1:AD:13:2F:F8:DB:39:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/76c44b00-989e-36fc-900c-bd70d2bf1e52.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl

            X509v3 Authority Key Identifier:
                keyid:B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.23.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:85:e5:c3:93:a5:28:84:01:50:dc:f7:f1:b8:e2:54:89:df:
         a4:ca:2b:f5:b1:c7:b0:f2:b2:45:bd:99:40:47:f4:64:e7:13:
         68:f9:69:54:0d:e9:89:88:4e:97:0c:9b:6c:d4:b5:be:7c:90:
         53:00:44:75:96:24:6c:d9:59:df:80:71:5b:4d:31:82:04:de:
         4d:9a:26:b4:fc:34:61:bc:30:28:00:c0:cc:9d:3f:1b:08:83:
         81:62:29:4d:95:4b:fd:cb:45:fd:6d:55:1f:53:cc:f8:25:66:
         8f:15:31:dd:82:53:16:3a:c5:04:e0:a1:73:da:ff:a3:13:3b:
         0c:95:75:75:47:b6:af:67:51:a7:bd:7c:fb:2a:50:f4:3d:17:
         50:7e:cd:e5:9a:94:b4:bd:05:60:1b:46:fc:ce:54:c2:4d:64:
         01:c7:1e:65:7c:38:64:b3:98:3a:fb:2e:50:67:f5:49:8c:25:
         d8:63:35:b4:0d:d1:aa:d8:be:54:9c:5b:b1:d8:24:d7:4e:9a:
         cc:7b:2d:75:ac:53:6a:05:67:ce:ba:a3:d5:f4:cc:06:fd:4f:
         93:9b:54:40:6d:a3:99:c3:be:71:12:ce:2c:29:04:ea:c2:c8:
         d7:f0:f1:6c:94:ad:bd:fb:17:50:8c:0e:57:c3:e3:f3:d5:90:
         f0:60:46:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 07:27:52 2026 by rpki-client