Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6b4ca847-900e-44ba-84e4-460bf2f5df18/b46e6792-09cc-3fe1-96a8-f8242176c655.roa
File:                     b46e6792-09cc-3fe1-96a8-f8242176c655.roa (raw, json)
Hash identifier:          iNtxmrX/SFg4jSIMOrJw3LM7UNsshrjy9qdsMoOlykc=
Subject key identifier:   99:4E:08:64:FA:E6:5E:F0:8B:E7:9A:DA:94:2A:37:53:70:87:97:5E
Certificate issuer:       /CN=6b4ca847-900e-44ba-84e4-460bf2f5df18
Certificate serial:       010D0C9F4328584CE36212A430ACE3172D09A580
Authority key identifier: C5:58:A6:7F:C0:61:C2:EA:CD:31:69:1D:3A:8D:5B:3F:26:74:E1:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6b4ca847-900e-44ba-84e4-460bf2f5df18.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6b4ca847-900e-44ba-84e4-460bf2f5df18/b46e6792-09cc-3fe1-96a8-f8242176c655.roa
Signing time:             Tue 17 Feb 2026 02:00:31 +0000
ROA not before:           Tue 17 Feb 2026 02:00:31 +0000
ROA not after:            Mon 18 May 2026 01:00:31 +0000
asID:                     11766
IP address blocks:        76.8.128.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6b4ca847-900e-44ba-84e4-460bf2f5df18/6b4ca847-900e-44ba-84e4-460bf2f5df18.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6b4ca847-900e-44ba-84e4-460bf2f5df18/6b4ca847-900e-44ba-84e4-460bf2f5df18.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6b4ca847-900e-44ba-84e4-460bf2f5df18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Feb 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e3:62:12:a4:30:ac:e3:17:2d:09:a5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b4ca847-900e-44ba-84e4-460bf2f5df18
        Validity
            Not Before: Feb 17 02:00:31 2026 GMT
            Not After : May 18 01:00:31 2026 GMT
        Subject: CN=3d23a273-ee8f-4469-ba34-2963ce41bf85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:bb:70:d6:b5:5e:b5:50:13:4a:35:57:ff:f9:
                    30:c0:34:83:48:a3:02:32:a6:2c:85:c8:e9:2b:7e:
                    16:01:7a:fc:b0:69:2d:9f:15:89:6c:45:1f:1c:5d:
                    21:4f:a6:c6:96:4c:9d:4c:47:35:c9:2c:6c:ce:4b:
                    ef:58:b2:31:ce:69:89:80:32:60:66:e5:fc:c7:bf:
                    3d:06:98:1d:d1:8a:27:aa:22:8d:38:d2:f2:09:f4:
                    68:68:7d:29:83:5b:1a:2c:ce:20:23:d6:fb:7b:01:
                    2a:52:f7:b1:07:cf:60:1b:da:af:ad:b2:cc:23:aa:
                    63:39:44:82:b7:a4:ae:29:2a:6e:41:33:b5:3b:92:
                    7e:43:77:38:7c:4d:cc:3a:a6:3c:a5:9b:f6:d6:10:
                    90:e5:db:11:6e:ce:49:c3:eb:b4:85:c9:31:42:c7:
                    83:6a:f4:4f:d6:42:ba:dc:6b:0f:45:e7:a6:99:c7:
                    19:6f:ca:2c:d0:cf:0e:23:ed:08:a8:a0:90:3a:08:
                    d4:a0:0d:2d:c1:60:d6:05:16:7d:36:6b:d7:bd:c5:
                    c3:6a:12:d2:cb:c8:bd:fd:dd:23:72:3e:ac:b2:f0:
                    e7:74:7d:cb:97:01:c0:c4:03:dc:01:79:14:3f:3b:
                    4d:05:38:09:1d:bb:5e:df:26:6f:b0:fa:0b:e2:3c:
                    01:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:4E:08:64:FA:E6:5E:F0:8B:E7:9A:DA:94:2A:37:53:70:87:97:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6b4ca847-900e-44ba-84e4-460bf2f5df18/b46e6792-09cc-3fe1-96a8-f8242176c655.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6b4ca847-900e-44ba-84e4-460bf2f5df18/6b4ca847-900e-44ba-84e4-460bf2f5df18.crl

            X509v3 Authority Key Identifier:
                keyid:C5:58:A6:7F:C0:61:C2:EA:CD:31:69:1D:3A:8D:5B:3F:26:74:E1:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6b4ca847-900e-44ba-84e4-460bf2f5df18.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.8.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:a9:00:94:27:6f:75:0f:04:d1:98:49:91:27:ba:69:f1:2e:
         9f:23:c9:99:2c:f8:77:a5:ab:66:24:12:61:15:56:26:9f:5b:
         bf:8e:aa:64:86:34:04:b5:23:23:14:1e:d1:52:82:29:60:59:
         bf:6d:18:23:b0:31:51:76:ff:20:62:b5:2c:09:85:4d:bf:e7:
         ea:7a:82:d1:cf:fd:1e:4d:f9:8d:ce:40:4c:9f:54:4d:40:63:
         b1:e5:a3:0b:2f:83:26:5c:9f:31:0c:30:4b:c3:1c:9c:d4:92:
         61:c0:57:fe:5c:21:2a:a4:d6:95:9b:4c:b6:1e:20:88:c1:a4:
         9e:56:9c:92:58:73:1b:18:64:e8:14:54:c7:39:2a:61:4c:e3:
         b4:35:8b:88:da:fb:ec:19:98:ef:99:63:81:ca:e4:af:5f:cc:
         e6:83:78:16:c1:79:11:e2:37:9a:76:e3:cd:67:4a:d7:8a:22:
         5d:05:0c:2e:6b:48:56:86:bf:34:1f:58:dd:cb:d2:17:3d:39:
         a9:8f:d9:68:75:69:73:b2:a8:78:de:e5:a9:cd:89:67:0c:40:
         da:2b:a8:2a:c8:da:6c:50:0d:cd:17:f8:74:1c:7b:4d:02:58:
         5a:b5:b2:9b:0d:cc:b7:61:ab:af:01:66:6c:f9:55:f6:02:ff:
         2e:2f:b2:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 22 19:24:04 2026 by rpki-client