Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5/2d512d2b-840f-30cb-88f8-f79128126588.roa
File:                     2d512d2b-840f-30cb-88f8-f79128126588.roa (raw, json)
Hash identifier:          UpMYzHvY88HxKLReyMEE85V6U55p+miCJI03iUGfhX4=
Subject key identifier:   4C:A2:9A:90:2D:28:E3:86:1F:C4:D9:A9:A0:8C:CF:7B:B7:6F:B2:96
Certificate issuer:       /CN=d3bf28f7-eba5-4254-a572-761a872427b5
Certificate serial:       010D0C9F4328584CB81C84F09F0D99D3906D9F80
Authority key identifier: 05:83:BF:45:04:55:C8:8C:9C:6C:F8:A0:5B:76:31:FE:F7:6A:8C:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5/2d512d2b-840f-30cb-88f8-f79128126588.roa
Signing time:             Sun 01 Feb 2026 14:00:40 +0000
ROA not before:           Sun 01 Feb 2026 14:00:40 +0000
ROA not after:            Sat 02 May 2026 13:00:40 +0000
asID:                     16509
IP address blocks:        192.103.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5/d3bf28f7-eba5-4254-a572-761a872427b5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5/d3bf28f7-eba5-4254-a572-761a872427b5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Feb 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b8:1c:84:f0:9f:0d:99:d3:90:6d:9f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3bf28f7-eba5-4254-a572-761a872427b5
        Validity
            Not Before: Feb  1 14:00:40 2026 GMT
            Not After : May  2 13:00:40 2026 GMT
        Subject: CN=17148e1d-0938-4d08-b6f9-a65c2a6c5093
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:2c:10:dc:c9:6a:d3:e9:65:0a:44:1a:78:38:
                    56:8a:1b:d8:4f:7e:61:0b:02:66:0a:e5:ad:40:11:
                    1e:a7:93:e1:e6:a3:1d:6f:e2:8f:6f:a7:14:ab:45:
                    f0:97:b3:c8:d8:5d:1e:8e:23:e2:f3:c8:64:f8:1f:
                    71:61:21:b6:a0:da:dc:01:34:f1:ac:64:1c:b4:b2:
                    e2:c9:14:94:5f:81:29:e4:10:91:35:a5:da:5f:80:
                    19:5c:e3:e9:2d:ed:18:49:e4:bb:60:fc:2c:81:19:
                    36:c5:90:92:c4:51:42:81:2e:e1:34:cd:f7:52:68:
                    26:da:bb:ab:cd:76:91:20:47:d8:83:a4:f3:be:f8:
                    36:a8:37:42:77:19:ab:5f:35:5d:9a:be:36:52:41:
                    d2:86:f8:73:5c:fe:10:6c:80:54:44:fb:ca:e6:fc:
                    4f:5e:36:b3:ea:2b:32:34:b2:5c:d8:48:1f:a4:18:
                    87:7a:c1:b5:7d:ed:c7:5b:0d:df:94:58:dd:bc:2d:
                    03:c2:10:7e:67:b2:e2:a8:00:5f:81:57:39:fd:28:
                    77:7b:7a:98:b0:6d:fe:0f:a1:dc:a8:12:57:3b:e5:
                    95:51:08:d4:e1:92:e9:f3:49:96:dd:6e:3f:70:7b:
                    f7:a5:c3:e6:09:44:c6:dd:aa:1a:75:37:0e:0c:44:
                    bd:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:A2:9A:90:2D:28:E3:86:1F:C4:D9:A9:A0:8C:CF:7B:B7:6F:B2:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5/2d512d2b-840f-30cb-88f8-f79128126588.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5/d3bf28f7-eba5-4254-a572-761a872427b5.crl

            X509v3 Authority Key Identifier:
                keyid:05:83:BF:45:04:55:C8:8C:9C:6C:F8:A0:5B:76:31:FE:F7:6A:8C:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.103.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:1f:dd:e6:78:f7:c9:33:b3:cf:6d:64:06:3c:00:85:bf:dd:
         c7:89:ae:f2:b2:c9:e8:72:6a:64:c0:bd:c6:a7:4a:ff:0f:87:
         22:11:1f:53:4d:98:7b:96:3e:41:56:82:67:9b:a3:9c:b6:6f:
         75:ac:c2:eb:ec:4c:1d:53:84:c7:d5:d2:37:f5:28:4d:16:9c:
         25:ea:ec:e5:70:91:d8:cf:f5:d2:39:26:71:07:9f:f6:ae:81:
         12:d8:66:8f:51:9d:ab:48:a9:34:a3:07:1c:d1:01:12:e1:fa:
         db:87:f3:77:cc:cf:c5:31:e2:20:ae:3e:c3:e9:71:e9:06:e9:
         21:c5:45:f7:d9:e0:ae:2b:07:69:ca:51:1f:a1:9b:4c:7c:06:
         b5:3a:b7:84:b4:b6:ae:a9:d8:35:38:d3:31:26:01:ac:76:c8:
         cc:80:70:8d:4a:22:ea:14:d1:1a:4b:7d:50:77:e5:24:44:9f:
         ad:77:1d:29:c7:f0:35:be:e4:44:d8:a9:3b:b1:36:f5:1e:15:
         04:b7:06:d7:f2:5e:1b:1e:b2:4f:34:2b:f2:8a:39:0e:c5:83:
         cd:1d:82:50:66:42:4a:7f:c6:74:fe:8f:ad:d8:6f:80:a5:15:
         58:a6:dd:31:38:4e:3e:e2:62:fd:b1:76:37:3d:68:a4:3c:68:
         be:ca:d2:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 07:28:31 2026 by rpki-client