Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6534ebb8-2490-4f36-a6d0-f7741019122a/98cc5773-8af9-384a-950d-b09e46d6ef16.roa
File:                     98cc5773-8af9-384a-950d-b09e46d6ef16.roa (raw, json)
Hash identifier:          nDPQ3L4A1IG3d1yjpFwofSS8Uc+RDQws1rQ1wOHyY1I=
Subject key identifier:   69:10:EF:6F:F5:46:EB:AA:77:7B:5A:F7:69:5B:23:95:77:8B:90:85
Certificate issuer:       /CN=6534ebb8-2490-4f36-a6d0-f7741019122a
Certificate serial:       010D0C9F4328584CBF1721AE30D83EC2C75E6480
Authority key identifier: 16:04:FA:B3:29:29:39:B0:DD:77:0A:75:3F:C5:DC:BF:38:9A:5F:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6534ebb8-2490-4f36-a6d0-f7741019122a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6534ebb8-2490-4f36-a6d0-f7741019122a/98cc5773-8af9-384a-950d-b09e46d6ef16.roa
Signing time:             Wed 04 Feb 2026 02:00:31 +0000
ROA not before:           Wed 04 Feb 2026 02:00:31 +0000
ROA not after:            Tue 05 May 2026 01:00:31 +0000
asID:                     19326
IP address blocks:        216.144.192.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6534ebb8-2490-4f36-a6d0-f7741019122a/6534ebb8-2490-4f36-a6d0-f7741019122a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6534ebb8-2490-4f36-a6d0-f7741019122a/6534ebb8-2490-4f36-a6d0-f7741019122a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6534ebb8-2490-4f36-a6d0-f7741019122a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 24 Feb 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:bf:17:21:ae:30:d8:3e:c2:c7:5e:64:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6534ebb8-2490-4f36-a6d0-f7741019122a
        Validity
            Not Before: Feb  4 02:00:31 2026 GMT
            Not After : May  5 01:00:31 2026 GMT
        Subject: CN=efa9ffcc-9178-4882-a317-3d6468763965
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:54:98:63:d6:bc:1e:7e:31:fb:65:ba:5c:be:
                    e5:73:0d:40:e7:7a:86:d3:7d:25:e4:12:03:2c:db:
                    0a:e5:d3:86:12:42:c7:a0:ee:18:74:17:0c:b2:82:
                    b4:34:fd:3f:86:29:67:c9:bd:b0:9f:1c:38:72:8c:
                    11:dc:2b:a9:b8:8e:57:9b:dd:f2:c3:77:ea:11:85:
                    b1:77:7d:0f:da:a8:c4:7f:52:84:af:38:72:c0:e0:
                    30:22:e0:51:a8:38:fa:46:5c:0f:4a:de:80:46:40:
                    f5:bc:78:9f:44:11:70:f9:92:e3:55:4d:10:41:5c:
                    ec:40:8c:45:5e:2d:41:97:09:a7:e7:5d:b5:e7:d9:
                    a0:9b:48:d5:6e:3c:dd:47:5d:7a:07:99:42:bf:bf:
                    f0:75:88:74:3a:6e:86:30:5c:70:4d:84:7d:89:07:
                    d6:3f:5a:de:69:92:81:48:a0:b5:68:c3:c9:0b:9e:
                    70:fe:9b:68:52:4a:92:b3:b4:0c:43:80:c8:87:4b:
                    e3:7e:c7:f8:88:f2:08:d8:fc:cb:93:4b:ac:03:17:
                    1c:2c:de:98:6b:0b:3e:3f:ea:97:3a:38:a1:5f:db:
                    a7:32:ef:c2:b6:35:5b:e7:3f:2f:d9:00:3f:30:50:
                    dd:1b:a7:a3:59:29:56:0d:c0:21:31:e8:80:79:f9:
                    b9:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:10:EF:6F:F5:46:EB:AA:77:7B:5A:F7:69:5B:23:95:77:8B:90:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6534ebb8-2490-4f36-a6d0-f7741019122a/98cc5773-8af9-384a-950d-b09e46d6ef16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6534ebb8-2490-4f36-a6d0-f7741019122a/6534ebb8-2490-4f36-a6d0-f7741019122a.crl

            X509v3 Authority Key Identifier:
                keyid:16:04:FA:B3:29:29:39:B0:DD:77:0A:75:3F:C5:DC:BF:38:9A:5F:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6534ebb8-2490-4f36-a6d0-f7741019122a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.144.192.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:7b:67:83:3a:b7:33:7a:69:0b:de:30:4d:6a:67:78:f5:8e:
         bd:8f:4e:18:b6:84:a3:c6:25:0d:7b:13:b6:7f:0f:17:f6:8e:
         5f:34:ac:3a:bd:ce:4c:8a:ed:4b:a6:ed:0f:f1:de:a5:9b:cc:
         c6:66:9c:e9:eb:48:f0:e8:9b:46:7e:c1:55:2e:11:41:48:7e:
         95:5e:e1:42:97:9c:ad:05:78:2b:0a:3b:56:21:c3:15:2c:4f:
         6c:40:9e:70:ef:d8:1d:aa:86:83:d3:c9:73:5f:5e:96:d1:39:
         3d:21:00:50:33:3d:c6:1b:70:2b:43:10:4a:90:50:fe:b2:73:
         41:b2:00:c3:e3:61:2a:7f:49:f1:e4:1c:ee:0e:f1:01:4a:1b:
         df:5e:ac:22:38:f5:f1:f4:60:72:f6:86:7e:87:5e:fe:ea:6b:
         48:73:df:85:08:c0:88:95:65:10:70:3e:f8:4a:59:49:ff:5b:
         35:d2:37:d0:da:12:76:39:83:f7:cf:6d:55:2b:2a:ac:cf:6f:
         75:f5:76:90:3c:ae:9a:fc:27:69:04:23:69:2d:1c:cf:54:3d:
         08:78:f2:dd:b7:ab:81:3e:5a:66:d2:cf:c5:6b:5f:f7:08:b5:
         ab:ca:5d:61:02:36:a4:9e:60:f1:38:4a:02:39:53:0e:68:c1:
         d4:b7:ce:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 22 11:17:34 2026 by rpki-client