Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c2e823ae-4aec-34a0-8195-de7514832f7a.roa
File:                     c2e823ae-4aec-34a0-8195-de7514832f7a.roa (raw, json)
Hash identifier:          CgjfDh4a32SSmUHHv/oh1BaTzMTrxjPxgTt7+LWQspo=
Subject key identifier:   26:48:13:CD:93:65:F1:3A:D5:36:C8:7D:26:EA:E8:79:33:42:26:9A
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584CEA5CFBBF91A824F6D1989500
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c2e823ae-4aec-34a0-8195-de7514832f7a.roa
Signing time:             Thu 19 Feb 2026 14:00:40 +0000
ROA not before:           Thu 19 Feb 2026 14:00:40 +0000
ROA not after:            Wed 20 May 2026 13:00:40 +0000
asID:                     7029
IP address blocks:        162.39.188.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Feb 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ea:5c:fb:bf:91:a8:24:f6:d1:98:95:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Feb 19 14:00:40 2026 GMT
            Not After : May 20 13:00:40 2026 GMT
        Subject: CN=31c4fd2f-c0f8-4af4-b663-850be4d66130
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1e:74:6b:4c:ef:81:7d:1f:44:56:15:7a:f1:
                    b5:e7:d7:3a:60:53:73:74:f4:bd:bc:33:52:c1:66:
                    74:78:01:55:f8:b0:74:0e:f7:b9:06:7f:53:43:fc:
                    22:4f:75:fa:02:2c:99:3c:f1:e4:6c:c4:e5:63:84:
                    22:99:e0:4e:b6:24:e4:35:27:39:72:56:1d:12:e6:
                    7f:bc:34:50:4d:0e:ec:95:cc:d8:f9:b5:5d:72:cc:
                    a0:9b:ff:d2:b9:72:13:e8:2d:05:89:3f:96:b9:27:
                    92:20:c9:94:ed:b0:5e:f4:1e:77:a5:da:c9:6d:d0:
                    7d:5d:64:38:a5:9d:8b:ab:d3:53:0a:be:07:b8:9c:
                    81:f3:4b:5c:1b:39:ac:eb:f2:57:6b:aa:fe:22:30:
                    34:77:3c:4c:6a:c6:2f:1d:e0:ae:20:5f:fe:11:5c:
                    c2:b6:5b:bc:c6:d0:c9:83:38:9f:f6:c1:9a:c4:50:
                    4a:8f:ef:a3:a2:1c:02:14:dd:89:b7:1d:d4:8c:19:
                    18:60:61:0a:ea:32:10:d7:60:ce:15:77:b8:3b:1d:
                    ae:d3:24:16:c8:5f:f0:db:67:c5:5d:1d:27:c0:7f:
                    90:06:9a:46:fc:27:5a:db:fa:f3:da:fc:c6:fe:9c:
                    9e:c3:97:2f:2d:b6:34:7b:a3:51:ce:83:d7:c0:31:
                    67:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:48:13:CD:93:65:F1:3A:D5:36:C8:7D:26:EA:E8:79:33:42:26:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c2e823ae-4aec-34a0-8195-de7514832f7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.39.188.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:da:bd:ed:89:21:e9:c8:1b:e3:70:56:ae:bb:6d:80:7c:b1:
         a7:78:4b:cd:de:d8:70:a6:d6:8b:f4:76:6b:52:b5:4e:87:af:
         13:6f:5f:dc:0f:ff:2a:2b:a8:54:00:ac:1e:1c:e3:5b:39:0d:
         0b:f1:97:b2:61:d7:9d:44:5f:7f:cf:4f:6c:06:2b:02:da:f2:
         cb:59:4d:ce:9e:cb:09:08:dd:f6:04:43:74:87:99:af:d9:b7:
         75:c5:c3:5a:ba:84:e0:e1:4d:d5:e7:e1:bb:de:41:1e:ca:b6:
         2c:33:79:7c:d6:80:c0:f4:93:fc:25:8c:8f:2b:a5:a8:bf:93:
         a6:35:a5:39:ec:f8:bf:37:cd:ad:9a:93:ae:03:68:1a:ed:00:
         81:4d:d3:81:d9:d8:9b:c8:c8:ec:47:41:38:d5:ae:ce:24:db:
         d5:55:75:57:44:2f:ce:4f:52:b7:c3:3c:72:4c:56:54:61:99:
         78:9b:89:71:d2:25:cc:90:ea:98:64:0a:c5:d5:1d:a8:6e:36:
         c3:12:27:36:40:c0:8a:98:1e:3c:1d:54:74:f9:d0:37:2d:f2:
         76:66:20:de:42:14:79:b3:8c:09:1f:38:f5:43:15:f3:a7:1e:
         f5:b7:85:ee:5c:3c:38:fb:23:47:dc:72:ac:33:6f:cb:2a:6c:
         44:03:8b:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 06:32:45 2026 by rpki-client