Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/15a88d69-1e32-3b03-94a4-b44fc038cd3d.roa
File:                     15a88d69-1e32-3b03-94a4-b44fc038cd3d.roa (raw, json)
Hash identifier:          0/oAcBtjOSAqxAGCOoRCJ96Q+ZDe4zy29ooz6tUAPfI=
Subject key identifier:   46:14:BE:A8:14:13:C0:E8:C4:26:AD:68:A0:91:39:B8:06:66:E0:74
Certificate issuer:       /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Certificate serial:       010D0C9F4328584CAE573992EF99CC72908ACD20
Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/15a88d69-1e32-3b03-94a4-b44fc038cd3d.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     13768
IP address blocks:        64.34.184.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:57:39:92:ef:99:cc:72:90:8a:cd:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=9f6886b6-0179-473d-9e58-5e8fd04ed927
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:36:bd:48:b9:89:c7:40:d0:e2:65:2e:1a:9f:
                    ff:d4:ea:60:3c:9f:c1:25:fe:23:0e:22:5d:10:c3:
                    19:1a:c7:c1:ac:21:25:1d:9f:90:26:02:e8:0c:ab:
                    62:34:0e:a1:8a:d4:c5:fd:54:0e:63:e3:08:e5:58:
                    f1:80:16:c5:8e:d5:c5:33:1d:dc:5d:7e:eb:4f:0b:
                    81:26:82:5b:cc:e9:89:d4:7a:83:ae:25:b4:8e:21:
                    14:64:31:29:52:97:8e:a7:8c:20:7d:58:0e:8d:43:
                    d0:06:13:6a:e5:34:73:da:67:8c:55:9d:9d:9e:05:
                    c7:18:6b:0e:da:eb:37:bb:ed:b0:0e:25:be:df:33:
                    20:48:5d:bc:15:b5:fc:93:05:c0:a0:1c:b1:3b:46:
                    ce:42:13:7f:9e:a2:d5:97:a3:c0:55:49:d9:2f:ea:
                    8a:9a:7e:8d:00:08:b3:5a:2c:80:54:a8:92:d8:2f:
                    32:ea:f8:34:d8:e8:98:6b:a2:60:31:0a:a6:1a:28:
                    cd:5b:cd:82:b1:80:1a:30:b9:34:51:cb:7f:cb:fd:
                    4e:fa:83:e9:5d:bf:7f:cf:a9:5a:e3:1e:5d:58:1e:
                    df:7a:e7:a1:50:b3:04:bb:18:87:af:50:7b:8b:02:
                    a9:a8:4d:d7:07:ae:2e:00:1f:d4:cf:8e:c5:ac:b9:
                    74:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:14:BE:A8:14:13:C0:E8:C4:26:AD:68:A0:91:39:B8:06:66:E0:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/15a88d69-1e32-3b03-94a4-b44fc038cd3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl

            X509v3 Authority Key Identifier:
                keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.34.184.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:42:c1:a2:c2:c1:73:48:9f:fe:0f:29:ba:f7:61:27:3f:7a:
         8d:1f:19:06:f9:4b:cd:9f:fc:8d:be:9b:0a:31:11:3b:6b:36:
         04:fe:24:d2:4d:24:7e:74:b1:e4:cb:fb:64:26:c0:c5:75:a8:
         f5:09:52:f3:69:4e:7e:8d:23:50:7b:06:fb:36:c2:e3:b1:1c:
         93:96:50:fa:6d:ce:6c:81:e5:10:2b:56:f5:ef:d9:c4:bb:eb:
         51:59:78:5f:88:fe:44:46:15:77:82:d5:1f:48:e1:57:5c:28:
         70:f2:63:8f:d1:ef:86:b6:4f:fb:a6:ff:a9:9e:55:32:92:ad:
         8a:38:15:e0:b0:2b:55:92:79:ca:e1:b4:68:dd:65:83:94:bf:
         b0:33:7b:04:32:65:8a:3f:1f:23:44:cc:71:01:cb:9e:fb:11:
         c8:d1:0f:b0:57:a9:3c:7a:15:11:7d:15:3d:4d:12:8f:5b:68:
         32:aa:70:59:c1:46:ca:49:d2:21:5a:b9:ef:30:f7:6f:7b:69:
         01:c6:68:a5:79:d3:59:de:03:e4:7d:ba:8a:a3:8e:78:7c:37:
         02:4f:77:50:50:be:ef:b5:61:6b:ba:24:f3:57:04:40:29:85:
         44:58:b7:60:30:c9:fe:e5:c7:07:e4:cd:e8:a7:cc:c2:f1:ec:
         f3:f8:57:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 27 15:55:49 2026 by rpki-client