Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/92d1570d-08ed-4cb4-83ab-788f1dcfd4bf/dcb931f6-6705-3424-98fd-7ad0940b8c08.roa
File:                     dcb931f6-6705-3424-98fd-7ad0940b8c08.roa (raw, json)
Hash identifier:          9AxBga29NRpAKnuCZ9zvCqC5nLXFN0p7ItKvOmm9pNM=
Subject key identifier:   9F:15:08:DF:22:BA:F1:D4:51:C6:7C:05:07:5E:A6:EF:33:74:49:C8
Certificate issuer:       /CN=92d1570d-08ed-4cb4-83ab-788f1dcfd4bf
Certificate serial:       010D0C9F4328584CCD0C85731A0C1AAF6952A780
Authority key identifier: DA:45:34:D4:19:67:3C:53:57:48:6C:27:27:52:AE:ED:5B:28:54:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/92d1570d-08ed-4cb4-83ab-788f1dcfd4bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/92d1570d-08ed-4cb4-83ab-788f1dcfd4bf/dcb931f6-6705-3424-98fd-7ad0940b8c08.roa
Signing time:             Mon 09 Feb 2026 02:00:31 +0000
ROA not before:           Mon 09 Feb 2026 02:00:31 +0000
ROA not after:            Sun 10 May 2026 01:00:31 +0000
asID:                     400767
IP address blocks:        142.248.244.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/92d1570d-08ed-4cb4-83ab-788f1dcfd4bf/92d1570d-08ed-4cb4-83ab-788f1dcfd4bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/92d1570d-08ed-4cb4-83ab-788f1dcfd4bf/92d1570d-08ed-4cb4-83ab-788f1dcfd4bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/92d1570d-08ed-4cb4-83ab-788f1dcfd4bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 24 Feb 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:cd:0c:85:73:1a:0c:1a:af:69:52:a7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92d1570d-08ed-4cb4-83ab-788f1dcfd4bf
        Validity
            Not Before: Feb  9 02:00:31 2026 GMT
            Not After : May 10 01:00:31 2026 GMT
        Subject: CN=433ef52d-ee12-4e48-a86c-50078d16c56b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:97:87:2b:72:fe:a8:81:33:25:ac:47:c7:21:
                    30:d4:d5:7b:6d:63:f8:90:96:89:76:30:6d:24:83:
                    f4:23:e3:59:a2:60:26:43:a3:b4:f3:c8:5c:4d:dd:
                    3a:e1:47:ba:2c:00:42:31:11:23:ec:23:d8:da:58:
                    f0:9f:21:25:7e:1d:2e:75:04:2d:d4:fd:16:5c:ac:
                    00:ab:d7:1a:1d:4e:e8:7b:7a:28:78:7f:5c:b8:14:
                    64:83:2c:a6:9c:98:0c:10:25:17:05:4a:71:8f:5c:
                    01:56:a1:eb:67:81:52:9a:41:7f:58:c6:62:a4:06:
                    2d:96:47:52:ab:ef:86:57:f6:41:1f:17:e8:1f:ce:
                    4c:6b:ec:f4:50:6d:de:a9:aa:d6:48:47:10:89:df:
                    1b:44:92:2d:24:9a:c3:01:47:d6:ed:ae:fb:18:35:
                    b0:e4:66:4a:4a:b0:36:b2:a2:c9:66:95:a8:3b:08:
                    da:d1:11:64:8b:d2:ec:7b:1e:b7:bb:67:fe:d1:7e:
                    64:c5:2a:02:7f:3d:8e:68:cc:62:7f:3b:05:41:ab:
                    00:da:d4:96:13:43:38:41:89:3b:0f:a1:83:b9:99:
                    66:5e:a6:8e:2e:34:fc:54:38:11:7d:54:a7:e3:6a:
                    32:d8:d8:62:6c:78:da:28:cd:1d:2e:4e:a6:9e:3c:
                    21:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:15:08:DF:22:BA:F1:D4:51:C6:7C:05:07:5E:A6:EF:33:74:49:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/92d1570d-08ed-4cb4-83ab-788f1dcfd4bf/dcb931f6-6705-3424-98fd-7ad0940b8c08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/92d1570d-08ed-4cb4-83ab-788f1dcfd4bf/92d1570d-08ed-4cb4-83ab-788f1dcfd4bf.crl

            X509v3 Authority Key Identifier:
                keyid:DA:45:34:D4:19:67:3C:53:57:48:6C:27:27:52:AE:ED:5B:28:54:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/92d1570d-08ed-4cb4-83ab-788f1dcfd4bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.248.244.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:ec:7c:74:a2:95:d4:8e:86:45:db:bc:01:c1:26:1f:f4:00:
         09:6a:7e:a5:d1:d3:2e:4d:8d:44:34:98:e2:05:18:26:8c:0b:
         6c:ea:31:39:8f:8f:27:9a:08:e4:76:8d:22:9a:cd:df:a7:3e:
         2a:17:5b:11:a5:82:dd:95:ce:3e:48:a0:41:bb:3c:06:fe:75:
         43:b7:be:10:7e:6e:d5:cd:5a:6d:9d:1b:b5:79:1d:f0:f2:d3:
         4c:df:cb:6a:02:7b:13:56:57:f6:c9:95:30:71:ae:f0:7a:d6:
         53:bc:38:29:8c:e6:d8:88:0a:56:d9:c7:51:ef:ce:ae:0f:26:
         f3:1c:cc:69:cb:68:54:af:69:9f:09:3f:ae:90:cd:18:62:86:
         c5:2f:10:b7:99:fe:b1:09:9d:09:1b:87:2f:e9:80:63:ab:3d:
         3c:2f:3e:2f:53:6b:57:95:5d:06:1a:34:d1:30:72:1e:7b:5f:
         ea:d5:98:4f:c6:e7:7b:7c:f1:2a:1a:35:4b:b6:a5:a1:1e:6b:
         89:79:83:86:0f:4c:32:8d:fd:bf:cc:a6:70:3a:e6:fe:0b:a9:
         d4:03:f5:b0:be:cd:b4:91:3d:d9:57:7d:96:5c:ee:3b:fa:00:
         5e:b4:02:12:34:56:29:86:24:6b:6a:c5:dd:d6:10:44:33:9e:
         dc:30:b9:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 22 19:21:29 2026 by rpki-client