Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/1c54d778-09d4-3d95-8d2b-67232ca23413.roa
File:                     1c54d778-09d4-3d95-8d2b-67232ca23413.roa (raw, json)
Hash identifier:          BsAufDmdIzUWyKWUenxgNlxeSyFuvaUPXiTYBteU4Vo=
Subject key identifier:   FC:49:50:1F:9C:EB:8D:D6:2F:6C:E7:76:9D:A2:36:B9:F4:B3:C5:1C
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584CCFD746B6BFC6A30394F43D40
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/1c54d778-09d4-3d95-8d2b-67232ca23413.roa
Signing time:             Tue 10 Feb 2026 02:00:31 +0000
ROA not before:           Tue 10 Feb 2026 02:00:31 +0000
ROA not after:            Mon 11 May 2026 01:00:31 +0000
asID:                     8881
IP address blocks:        168.93.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Feb 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:cf:d7:46:b6:bf:c6:a3:03:94:f4:3d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Feb 10 02:00:31 2026 GMT
            Not After : May 11 01:00:31 2026 GMT
        Subject: CN=0eeb0e7b-8a00-49e4-8290-d8f502500902
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:89:55:62:d3:70:06:79:56:54:48:9a:d6:d3:
                    ff:0c:72:0f:02:77:21:13:45:7c:14:c4:3f:1b:e6:
                    b6:29:e3:73:61:ab:3a:61:e9:ff:ee:20:b8:a6:6e:
                    42:1d:fa:3b:d7:f5:00:2d:4f:5e:c7:d0:dc:88:f3:
                    cb:17:1c:93:22:bf:0f:2e:1b:ad:46:6f:a4:8f:97:
                    e1:56:55:a3:88:d1:9d:f7:49:ba:f8:db:7c:5f:de:
                    e5:94:b5:43:2f:2d:ea:1c:bd:6c:65:81:7e:55:1f:
                    3b:80:e9:61:e0:33:2c:41:e3:20:23:19:bd:fe:e3:
                    14:10:13:0d:c1:45:ed:96:d8:dc:86:f9:90:64:1f:
                    e1:2c:3b:d2:89:a7:11:23:53:ab:84:6d:9e:81:b6:
                    77:dd:74:0c:e2:29:1e:7b:64:e5:b1:de:18:e4:96:
                    e7:cb:10:38:e5:ed:cd:06:0a:fb:a3:1e:7e:5a:58:
                    a4:22:54:c0:41:8b:d5:71:69:fc:57:07:d6:d9:27:
                    77:c5:2d:43:b1:7e:44:61:8e:b5:7a:b1:54:35:23:
                    80:41:96:b1:7a:06:f6:65:09:8e:0b:bd:d8:a1:93:
                    e9:82:b3:f5:86:bb:19:d3:cd:65:d6:57:9a:23:e8:
                    06:58:52:68:a7:84:28:3c:56:e7:6c:b7:26:d5:44:
                    19:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:49:50:1F:9C:EB:8D:D6:2F:6C:E7:76:9D:A2:36:B9:F4:B3:C5:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/1c54d778-09d4-3d95-8d2b-67232ca23413.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.93.228.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:78:44:d3:c9:f2:2f:7e:d0:3c:fa:27:73:66:8c:15:d1:ea:
         b6:c0:a2:d5:bb:8e:c8:ca:c7:b2:63:51:46:6b:0d:48:5a:58:
         26:65:92:95:0b:6a:b6:70:2d:e8:a8:eb:c3:bc:45:43:c4:85:
         cc:69:c6:22:90:ae:b4:40:e1:47:76:f4:d8:c6:dc:df:35:1f:
         b7:b5:ea:b7:49:d5:ff:89:45:79:12:8d:0c:61:8f:f9:a7:a5:
         5a:52:5b:60:ab:06:8e:32:40:95:38:37:e4:8c:ed:48:eb:42:
         c8:87:d1:9f:51:b7:05:0e:7f:30:66:c5:1d:91:94:2b:15:f8:
         c6:03:e3:a5:9f:ca:9b:b9:74:a5:c8:f4:b9:07:9a:c4:88:93:
         20:b7:68:63:85:1b:cb:4a:bb:71:ea:dd:f8:1f:8a:70:38:c9:
         54:9c:03:34:b5:ca:8e:c8:06:80:11:c9:a2:f4:54:6b:31:70:
         b4:c7:b2:e0:f3:f3:29:f1:3c:67:11:4e:f2:4d:e0:6d:97:a3:
         f1:ff:6e:cf:59:d5:30:ec:b3:d3:37:57:72:f1:1d:90:79:cd:
         ae:71:f7:67:e7:57:59:90:8f:9a:b2:96:98:8c:d1:04:2d:bd:
         66:4c:39:4b:f4:20:4f:e6:e2:28:4e:d5:ce:3e:e9:ae:5c:f4:
         2d:ef:47:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 09:30:39 2026 by rpki-client