Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/9b35cf71-b172-30c0-a342-1dc167af4aee.roa
File:                     9b35cf71-b172-30c0-a342-1dc167af4aee.roa (raw, json)
Hash identifier:          3ocaw2w027pwmQ1CMo9KFDNEaQXhOrPEBNKgSG65F4o=
Subject key identifier:   11:50:FE:01:C8:6A:50:B4:9A:3C:5B:47:9B:2E:F3:DD:83:0C:BB:77
Certificate issuer:       /CN=7b143713-7923-4e4d-9476-b8e5ce1ca9c9
Certificate serial:       010D0C9F4328584CD0DAE2FF9AD5F03A03D7E680
Authority key identifier: 61:D5:32:E9:6D:BB:CA:2E:A4:34:67:90:E5:3E:1C:8C:AF:B2:D9:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/9b35cf71-b172-30c0-a342-1dc167af4aee.roa
Signing time:             Tue 10 Feb 2026 10:43:48 +0000
ROA not before:           Tue 10 Feb 2026 10:43:48 +0000
ROA not after:            Mon 11 May 2026 09:43:48 +0000
asID:                     19905
IP address blocks:        170.10.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Feb 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d0:da:e2:ff:9a:d5:f0:3a:03:d7:e6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b143713-7923-4e4d-9476-b8e5ce1ca9c9
        Validity
            Not Before: Feb 10 10:43:48 2026 GMT
            Not After : May 11 09:43:48 2026 GMT
        Subject: CN=67c44b32-b5d4-4449-8d29-3f38fbc53702
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:6f:b3:c1:dc:0e:92:9c:92:12:ea:75:e2:56:
                    ce:7c:de:3e:84:be:ff:3a:8f:00:9e:1e:ff:cc:0b:
                    e0:b1:cd:d3:90:c1:ce:d1:9b:92:b1:a3:23:f4:35:
                    b4:12:eb:8b:4d:46:1f:d1:20:29:4d:d8:72:f7:6d:
                    d8:81:56:a1:fb:d0:07:c0:6d:ce:62:50:d0:4c:f2:
                    95:17:5b:c2:f8:10:62:5f:5e:bf:cf:ae:28:cd:87:
                    eb:3e:6a:de:74:91:dc:89:61:de:5e:6d:b9:f7:d2:
                    57:04:07:70:3c:48:2f:75:42:e5:5b:6d:72:c4:43:
                    a5:71:84:c6:a6:b7:61:aa:31:ad:72:9d:da:0b:3b:
                    60:81:8a:c2:c1:c0:08:f7:fd:59:3d:01:21:e2:e5:
                    e8:1d:54:35:2a:72:a3:4e:d7:a3:13:bc:58:17:f7:
                    a3:ab:1d:5c:8b:28:16:86:6a:0b:41:c4:e0:9f:9a:
                    15:a7:20:95:d8:40:26:8d:47:2f:1c:cf:47:6a:ee:
                    33:0e:c9:2e:d2:ef:74:bd:5e:59:b6:2a:91:2d:ae:
                    e0:19:41:47:0c:ef:a7:e1:6b:16:40:7b:01:00:30:
                    82:52:5a:89:9c:8e:81:57:13:64:8e:8b:aa:45:d0:
                    82:ed:1b:4e:d3:31:97:87:0b:b3:df:63:9f:05:6d:
                    30:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:50:FE:01:C8:6A:50:B4:9A:3C:5B:47:9B:2E:F3:DD:83:0C:BB:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/9b35cf71-b172-30c0-a342-1dc167af4aee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.crl

            X509v3 Authority Key Identifier:
                keyid:61:D5:32:E9:6D:BB:CA:2E:A4:34:67:90:E5:3E:1C:8C:AF:B2:D9:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.10.160.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:74:8a:44:d0:c7:f8:f3:9b:73:05:30:bc:7c:69:49:83:7b:
         1f:79:c6:31:57:98:1b:e4:6e:a9:a2:61:54:ca:18:f4:a0:f1:
         d6:f3:dc:f9:f2:ce:99:2c:69:fe:c3:e5:5d:32:5b:84:ea:30:
         26:81:c3:bd:de:5e:90:40:ac:c6:d0:f3:fc:d0:61:16:60:28:
         ea:99:88:a4:4e:a6:db:f0:72:f4:f3:31:c7:4b:4e:33:a2:21:
         c3:63:7d:8c:b7:2c:23:5a:33:be:b1:ff:84:0f:69:25:a4:7f:
         e1:bb:c3:cf:05:90:86:79:17:54:5f:34:47:ed:cf:e4:b4:59:
         87:be:6d:c4:5b:96:ae:bd:a6:04:f5:77:2d:82:9b:3c:b0:46:
         97:fa:83:87:f2:e6:f3:14:63:e3:32:b4:1b:83:bb:c0:29:6d:
         b3:f9:fe:bf:ab:5a:08:16:ef:1c:0f:1f:b5:09:5d:f4:13:1f:
         39:6b:83:e7:5e:4a:62:ba:7a:08:49:54:2f:43:d0:2c:e2:99:
         34:62:35:96:1c:f1:79:64:c0:18:65:f7:73:66:db:73:9e:a7:
         93:28:2c:a4:ff:2b:e3:ad:08:1c:cd:b2:99:aa:bf:68:95:af:
         c1:77:c3:1d:e3:c5:fc:23:f6:ce:4d:26:8d:7b:e5:c0:7d:ff:
         74:6f:e3:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 23:47:37 2026 by rpki-client