Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3981f6b8-c323-411d-b6b8-03bb44d2adb1/ec968a43-a3bc-35cd-9cae-298d0643c351.roa
File:                     ec968a43-a3bc-35cd-9cae-298d0643c351.roa (raw, json)
Hash identifier:          0NANEgucCd/IXocobgZV1h0EhLgUj7k9qON7DKvEPgI=
Subject key identifier:   73:EB:16:47:48:2F:E3:77:CE:34:D1:D4:1D:3F:AB:F6:7D:3D:70:1B
Certificate issuer:       /CN=3981f6b8-c323-411d-b6b8-03bb44d2adb1
Certificate serial:       010D0C9F4328584C8A0C37B9232E87478A344067
Authority key identifier: 65:C1:6F:A7:39:A0:7A:F7:DE:CA:41:22:DC:8E:56:E3:F7:BC:74:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3981f6b8-c323-411d-b6b8-03bb44d2adb1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3981f6b8-c323-411d-b6b8-03bb44d2adb1/ec968a43-a3bc-35cd-9cae-298d0643c351.roa
Signing time:             Fri 16 Jan 2026 02:00:31 +0000
ROA not before:           Fri 16 Jan 2026 02:00:31 +0000
ROA not after:            Thu 16 Apr 2026 01:00:31 +0000
asID:                     21693
IP address blocks:        170.152.0.0/16 maxlen: 24
                          192.234.136.0/24 maxlen: 24
                          192.234.137.0/24 maxlen: 24
                          192.234.138.0/24 maxlen: 24
                          192.234.139.0/24 maxlen: 24
                          192.234.140.0/24 maxlen: 24
                          198.179.151.0/24 maxlen: 24
                          198.179.152.0/24 maxlen: 24
                          198.179.153.0/24 maxlen: 24
                          198.179.154.0/24 maxlen: 24
                          198.179.155.0/24 maxlen: 24
                          198.179.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3981f6b8-c323-411d-b6b8-03bb44d2adb1/3981f6b8-c323-411d-b6b8-03bb44d2adb1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3981f6b8-c323-411d-b6b8-03bb44d2adb1/3981f6b8-c323-411d-b6b8-03bb44d2adb1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3981f6b8-c323-411d-b6b8-03bb44d2adb1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Feb 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:8a:0c:37:b9:23:2e:87:47:8a:34:40:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3981f6b8-c323-411d-b6b8-03bb44d2adb1
        Validity
            Not Before: Jan 16 02:00:31 2026 GMT
            Not After : Apr 16 01:00:31 2026 GMT
        Subject: CN=544853e6-5329-4805-8eac-db75610ac24e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:4b:3a:cb:5c:7f:c4:2d:2e:d7:9c:dd:7b:d1:
                    28:02:12:c9:65:8b:68:e8:9f:70:9d:85:e1:26:b3:
                    7e:a0:94:52:ab:f2:6e:99:46:b2:27:e0:a2:91:9d:
                    59:cf:d1:72:35:1b:80:4e:85:3a:79:37:6b:5c:5d:
                    ed:0c:56:58:13:69:b9:45:9a:e8:84:db:b6:b7:90:
                    18:42:a3:3b:16:ac:34:f0:fa:11:75:05:d5:78:47:
                    c2:d4:88:4d:4c:d8:bb:11:9d:ae:fd:4f:71:15:2d:
                    c3:3f:1e:4d:21:e0:da:9c:48:ab:aa:1a:6e:1d:2e:
                    db:cc:f1:72:97:eb:46:90:53:ed:7b:cf:d5:e3:96:
                    e1:e5:a8:f3:d6:86:f9:b3:dd:b7:2a:aa:25:ee:1b:
                    ce:74:62:e3:16:88:a3:9a:7b:72:37:e7:cd:7b:fc:
                    38:56:bc:d9:d7:8a:0d:1f:43:df:da:39:ef:68:26:
                    b1:63:97:92:9e:5b:85:b0:53:61:e0:80:7f:81:b5:
                    a0:81:56:ef:12:72:1e:eb:bc:52:d5:2f:f0:38:87:
                    46:1c:d8:78:ff:2f:d5:23:95:1c:a6:d0:0c:cf:7c:
                    e6:c7:e3:44:10:9a:80:89:60:b5:37:e3:b8:39:53:
                    49:7e:e4:1e:c1:2f:7c:ba:f4:7b:8b:ad:5d:7b:c2:
                    f3:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:EB:16:47:48:2F:E3:77:CE:34:D1:D4:1D:3F:AB:F6:7D:3D:70:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3981f6b8-c323-411d-b6b8-03bb44d2adb1/ec968a43-a3bc-35cd-9cae-298d0643c351.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3981f6b8-c323-411d-b6b8-03bb44d2adb1/3981f6b8-c323-411d-b6b8-03bb44d2adb1.crl

            X509v3 Authority Key Identifier:
                keyid:65:C1:6F:A7:39:A0:7A:F7:DE:CA:41:22:DC:8E:56:E3:F7:BC:74:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3981f6b8-c323-411d-b6b8-03bb44d2adb1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.152.0.0/16
                  192.234.136.0-192.234.140.255
                  198.179.151.0-198.179.156.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:2c:46:bd:c5:a2:0a:f9:c5:b0:2e:25:ef:cc:85:92:e8:30:
         62:91:03:4d:0d:8b:60:93:0a:03:01:c2:2c:89:60:a8:90:97:
         31:10:97:6d:75:af:c6:57:c8:da:f9:9a:91:9c:e7:eb:30:e6:
         83:2c:7e:ad:72:57:a5:c0:04:25:e8:69:ec:c2:d2:84:83:2d:
         c1:d2:0d:89:cf:af:09:e8:89:58:fd:3d:83:e9:e7:57:f2:2b:
         c7:4c:25:f3:61:dc:ce:45:f2:81:d2:f3:77:08:d9:e9:13:44:
         fb:c9:98:83:94:dc:16:1a:8a:e8:80:90:6f:06:bb:c1:74:ad:
         a4:2c:6c:81:e4:79:90:24:ff:35:e6:22:78:c5:bb:d0:c4:17:
         85:3c:19:2e:aa:eb:c5:11:74:01:5a:ac:a1:51:dc:07:0f:a4:
         33:0d:99:5f:9b:1f:17:19:d5:3b:14:85:0f:34:9d:40:6a:a7:
         58:b7:1d:cb:ac:b8:ce:c2:df:08:97:0a:a3:ef:0f:44:2f:8d:
         1c:47:59:82:6e:eb:21:56:ee:5b:2d:1d:0a:c8:92:08:49:9b:
         19:c3:63:49:07:15:f1:6a:cc:c7:6d:65:13:50:e0:de:4c:ce:
         a3:db:50:78:4b:1a:8e:3c:00:da:db:bc:cb:76:20:91:e9:a9:
         ac:5b:20:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 18 04:08:09 2026 by rpki-client