Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a/064e518d-0665-3aae-b904-6aaad16333f4.roa
File:                     064e518d-0665-3aae-b904-6aaad16333f4.roa (raw, json)
Hash identifier:          PtOaWd7YMdKVdtbBIyVc7UuBVLLmKKLg9BlgJPKe0FU=
Subject key identifier:   9E:51:84:DD:2F:BA:1A:25:69:B9:61:ED:D9:F6:68:A1:2B:1F:4F:97
Certificate issuer:       /CN=5ddbca9a-960e-43a1-a865-f0c100d0fc7a
Certificate serial:       010D0C9F4328584CE62CB964B71E5F3FBCDD8720
Authority key identifier: 0A:3B:70:84:88:05:6E:BB:E4:7F:9E:4C:EE:37:E2:8F:53:7C:BE:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a/064e518d-0665-3aae-b904-6aaad16333f4.roa
Signing time:             Wed 18 Feb 2026 02:00:31 +0000
ROA not before:           Wed 18 Feb 2026 02:00:31 +0000
ROA not after:            Tue 19 May 2026 01:00:31 +0000
asID:                     30313
IP address blocks:        152.216.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a/5ddbca9a-960e-43a1-a865-f0c100d0fc7a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a/5ddbca9a-960e-43a1-a865-f0c100d0fc7a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 24 Feb 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e6:2c:b9:64:b7:1e:5f:3f:bc:dd:87:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ddbca9a-960e-43a1-a865-f0c100d0fc7a
        Validity
            Not Before: Feb 18 02:00:31 2026 GMT
            Not After : May 19 01:00:31 2026 GMT
        Subject: CN=969cc2f3-f633-4581-aebb-70354e9b28b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:1f:81:5c:79:f4:cc:71:dc:4a:61:8b:b7:b3:
                    61:c2:73:9c:ec:69:4f:40:11:96:e6:3d:d3:fa:c2:
                    87:21:c9:cb:30:e7:ef:4a:6e:98:a9:0c:74:4f:68:
                    0d:99:3d:03:69:95:60:bd:f8:4b:c1:b3:00:00:de:
                    42:4e:e9:8a:b2:1b:75:8f:0e:67:e7:15:c0:b8:20:
                    53:74:94:3c:a3:c1:86:70:94:4a:74:f5:f5:aa:a1:
                    1d:ba:2a:fd:1d:2c:ec:60:a8:7c:76:c1:76:41:4a:
                    e3:d7:85:a7:89:ae:89:42:72:d2:33:cd:1a:09:4e:
                    80:e4:31:07:c5:94:6f:cb:b2:03:37:88:7a:bb:9a:
                    c5:69:cd:58:2f:a8:14:02:1a:94:00:e5:91:1f:80:
                    c2:72:9e:14:1c:0b:48:7e:2f:01:b7:7f:19:d3:0b:
                    5a:9c:f7:aa:03:e2:5c:21:a0:13:24:45:a9:1d:6b:
                    fd:5c:82:96:8a:8c:70:5e:36:2b:94:51:be:4f:78:
                    3c:ce:e0:4a:c4:2e:63:15:38:5e:b3:b8:44:43:b3:
                    e5:11:e3:76:96:68:e2:e0:65:06:51:6a:e1:e1:d2:
                    9d:a8:0b:24:1e:74:16:e8:3c:44:13:b9:c7:36:fc:
                    8e:09:8d:15:51:fa:0c:83:1e:28:04:5e:79:db:de:
                    96:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:51:84:DD:2F:BA:1A:25:69:B9:61:ED:D9:F6:68:A1:2B:1F:4F:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a/064e518d-0665-3aae-b904-6aaad16333f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a/5ddbca9a-960e-43a1-a865-f0c100d0fc7a.crl

            X509v3 Authority Key Identifier:
                keyid:0A:3B:70:84:88:05:6E:BB:E4:7F:9E:4C:EE:37:E2:8F:53:7C:BE:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.216.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:c1:60:18:fe:7a:77:dc:53:1c:a9:16:eb:d5:48:48:11:c7:
         c8:d1:3b:80:d8:07:31:ed:64:7c:ad:ca:ff:48:8d:3f:6b:e0:
         9d:23:94:00:b6:26:93:b8:aa:86:df:64:f8:86:8d:44:1e:63:
         6c:77:97:d4:86:e4:59:8f:cc:0e:f4:80:6e:70:30:77:40:ea:
         59:45:d5:7b:86:a8:db:03:c4:ed:e8:4f:92:94:30:46:ec:26:
         84:ed:98:71:67:c3:93:76:a5:8b:3b:05:b7:78:ce:41:2c:1f:
         c5:a2:56:9f:23:45:0d:28:c1:f9:62:fd:d2:bc:f9:3b:1f:62:
         2b:43:2b:89:46:ba:54:48:e1:2b:2f:39:82:32:11:5c:54:d5:
         28:c7:d2:ac:6f:ec:61:21:4f:8d:25:83:76:f9:8d:0d:07:ef:
         7a:30:1e:dd:c8:fb:31:b4:ac:f7:46:18:aa:d8:5e:ab:d0:16:
         5b:d4:33:c1:29:3e:32:ee:55:55:fe:c7:10:18:0f:45:15:4f:
         50:8d:c6:f1:fe:a5:dd:e6:8c:04:5b:5c:f6:0e:23:94:c2:87:
         81:62:cf:df:25:cf:a9:86:7f:e3:5c:da:1d:01:4e:6a:6f:0f:
         e9:3c:f8:b9:e4:df:a6:c5:61:d5:c0:80:82:89:4a:6a:2e:69:
         92:4c:29:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 22 22:04:27 2026 by rpki-client