Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba/f88c85f3-7db0-3dc7-a075-7fddec604c43.roa
File:                     f88c85f3-7db0-3dc7-a075-7fddec604c43.roa (raw, json)
Hash identifier:          RIsHd6VkA9cXchKuTnkaZiQumkh4jxB5k4RWpyuDR2Y=
Subject key identifier:   1D:06:83:61:91:85:AF:D4:DD:DC:39:20:DE:4B:A6:25:52:3A:0F:D0
Certificate issuer:       /CN=05ec8359-4ede-4036-8702-23e5dd37a9ba
Certificate serial:       010D0C9F4328584CC611F40791608FE83216C0C8
Authority key identifier: 36:0A:E8:03:24:2B:BA:C6:75:78:32:2C:14:A5:B9:5D:11:5A:00:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba/f88c85f3-7db0-3dc7-a075-7fddec604c43.roa
Signing time:             Fri 06 Feb 2026 14:00:40 +0000
ROA not before:           Fri 06 Feb 2026 14:00:40 +0000
ROA not after:            Thu 07 May 2026 13:00:40 +0000
asID:                     30406
IP address blocks:        192.69.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba/05ec8359-4ede-4036-8702-23e5dd37a9ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba/05ec8359-4ede-4036-8702-23e5dd37a9ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 24 Feb 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c6:11:f4:07:91:60:8f:e8:32:16:c0:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05ec8359-4ede-4036-8702-23e5dd37a9ba
        Validity
            Not Before: Feb  6 14:00:40 2026 GMT
            Not After : May  7 13:00:40 2026 GMT
        Subject: CN=1189f549-a2c5-4d41-a143-5ee8cc2cb73a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:23:15:1c:40:10:07:fa:a6:a8:cf:bf:be:7d:
                    b9:67:8d:90:6b:5b:47:aa:b5:83:fc:75:49:a4:37:
                    63:9c:0e:2c:24:25:12:dc:17:26:fb:f6:8d:8c:4d:
                    ee:a1:20:b8:b7:ac:2d:03:31:7f:fa:9e:3a:d2:1c:
                    a1:a7:64:c6:7a:a5:dc:ee:d1:33:ef:a5:f9:5f:35:
                    a1:9f:a1:b8:72:a0:9e:00:a2:3d:98:5e:03:9f:20:
                    9a:0a:c3:3e:4a:a7:cc:80:85:d1:10:8c:04:bd:b1:
                    94:cb:ef:4f:4b:b8:63:dd:40:c2:90:e5:a2:9c:e6:
                    5c:43:79:14:d0:52:a7:68:aa:01:0e:75:0a:cd:97:
                    89:36:97:85:7e:86:e3:bb:bd:66:72:b4:9f:cf:8f:
                    48:9c:92:5d:5d:e9:51:85:41:43:66:d5:54:b5:39:
                    e6:0f:54:e7:1e:8c:3a:04:6f:7c:75:25:1a:47:68:
                    b6:7d:a3:65:e2:0c:77:d5:31:99:30:5b:f8:51:13:
                    c7:ec:1c:7a:5a:8c:0c:c2:dd:e0:57:6c:32:80:b6:
                    a9:fd:01:45:a4:1e:74:22:6a:0f:67:a5:25:66:72:
                    3b:ef:92:48:70:ba:91:6b:72:93:aa:64:56:96:43:
                    a2:de:09:aa:5a:18:10:14:64:82:68:21:48:d0:2e:
                    c1:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:06:83:61:91:85:AF:D4:DD:DC:39:20:DE:4B:A6:25:52:3A:0F:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba/f88c85f3-7db0-3dc7-a075-7fddec604c43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba/05ec8359-4ede-4036-8702-23e5dd37a9ba.crl

            X509v3 Authority Key Identifier:
                keyid:36:0A:E8:03:24:2B:BA:C6:75:78:32:2C:14:A5:B9:5D:11:5A:00:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.69.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:34:2c:99:54:88:14:25:ba:a0:b7:d8:66:63:b9:fd:90:2c:
         18:08:21:6b:c0:4b:44:25:b8:3f:dc:b4:f6:80:b1:4a:b9:4f:
         30:4a:e2:32:e4:93:ab:fd:47:11:86:b8:c8:1a:94:68:aa:bf:
         71:a4:d4:4d:fe:c1:c5:75:2a:12:c1:f1:a5:50:c5:17:70:3d:
         97:ea:82:ef:c7:c3:9a:eb:30:cc:f8:fa:a6:08:0e:ad:97:ce:
         64:0a:70:6b:33:14:f6:71:5c:c0:9d:2f:ea:98:82:47:60:a9:
         1e:de:6c:9c:0f:ae:15:e4:6a:54:91:b8:79:74:88:b3:b0:7c:
         ea:c6:1c:5a:91:85:8f:71:d0:c1:1a:5f:09:8b:a1:0b:03:be:
         54:e2:9d:7c:2e:b4:81:d4:c9:f6:d4:56:fe:39:33:da:ac:6f:
         b9:0d:b4:5a:33:86:44:ad:6e:54:19:45:e0:87:fa:b6:2a:90:
         0a:6e:89:41:74:cd:59:31:75:98:61:fe:00:7b:0e:b3:ec:4c:
         5e:54:4b:84:70:92:a5:bc:f4:33:d4:f4:71:93:05:77:b6:c3:
         50:1c:50:03:33:f2:99:53:24:a6:68:46:50:9b:fa:14:b9:a4:
         58:f7:84:d6:5a:38:f3:26:7d:86:f8:f7:20:33:5a:a2:1f:07:
         27:91:f1:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 22 19:22:22 2026 by rpki-client