Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ac9a4ddd-a4d3-42f8-a810-268e79a03184/bb6bcf47-6554-3d34-b9c5-9aab2d0a8500.roa
File:                     bb6bcf47-6554-3d34-b9c5-9aab2d0a8500.roa (raw, json)
Hash identifier:          I+fpI+VpsBgBlt9wR7CwIRMrIJelOSBQBLjTvrLpZUA=
Subject key identifier:   C5:5D:E4:B9:96:93:1D:50:11:A7:BF:86:5D:DF:B0:85:B4:92:7A:D3
Certificate issuer:       /CN=ac9a4ddd-a4d3-42f8-a810-268e79a03184
Certificate serial:       010D0C9F4328584CDDCCF04FF533E42EF91D4420
Authority key identifier: E5:08:02:F7:F3:99:DD:37:5A:81:CB:66:EA:25:F4:E0:59:FB:7A:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ac9a4ddd-a4d3-42f8-a810-268e79a03184.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ac9a4ddd-a4d3-42f8-a810-268e79a03184/bb6bcf47-6554-3d34-b9c5-9aab2d0a8500.roa
Signing time:             Sun 15 Feb 2026 02:00:32 +0000
ROA not before:           Sun 15 Feb 2026 02:00:32 +0000
ROA not after:            Sat 16 May 2026 01:00:32 +0000
asID:                     54957
IP address blocks:        198.162.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ac9a4ddd-a4d3-42f8-a810-268e79a03184/ac9a4ddd-a4d3-42f8-a810-268e79a03184.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ac9a4ddd-a4d3-42f8-a810-268e79a03184/ac9a4ddd-a4d3-42f8-a810-268e79a03184.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ac9a4ddd-a4d3-42f8-a810-268e79a03184.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 24 Feb 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:dd:cc:f0:4f:f5:33:e4:2e:f9:1d:44:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac9a4ddd-a4d3-42f8-a810-268e79a03184
        Validity
            Not Before: Feb 15 02:00:32 2026 GMT
            Not After : May 16 01:00:32 2026 GMT
        Subject: CN=fb26c48e-6545-46e1-9769-ab134f08aca4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:88:5e:5b:51:94:e8:e8:15:74:05:4d:c2:3a:
                    a8:55:ea:2e:46:87:52:b8:29:c1:87:9d:4b:9c:29:
                    d2:a8:98:e5:2a:43:22:31:5d:1e:36:b2:1c:18:8b:
                    92:a5:3f:23:39:41:35:b9:71:49:5c:6d:91:7a:08:
                    06:7f:67:9b:f1:62:68:db:92:02:29:be:77:60:29:
                    27:37:87:d4:c7:59:6d:ae:6a:5d:de:15:7a:be:dd:
                    97:9b:4b:51:2f:ba:11:d1:db:7b:44:c4:da:e6:86:
                    0d:93:5e:a2:cb:a0:ed:1f:4e:7c:c4:c3:e5:cc:43:
                    d2:df:2a:ec:c6:62:3b:8b:69:b3:ae:7e:dc:fc:e4:
                    d3:10:af:c4:07:7b:f0:5c:ea:54:1c:b7:62:40:90:
                    ea:7a:1f:ca:c3:a7:06:45:9d:ee:a4:b2:c2:98:fb:
                    ac:c4:c3:6d:81:42:6e:c8:86:16:6e:4f:d4:06:38:
                    98:3f:95:72:30:86:c0:32:10:b8:b1:2b:7a:a9:6f:
                    52:04:f7:7c:12:5d:5e:81:ac:76:65:13:d7:c7:30:
                    73:80:20:45:50:55:de:46:d1:60:d3:94:18:c0:e9:
                    4a:51:63:0d:d8:c6:c8:a2:10:ae:04:41:b7:83:e4:
                    07:e8:92:96:ae:3d:aa:b5:9f:cb:f0:d2:a0:09:6f:
                    7e:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:5D:E4:B9:96:93:1D:50:11:A7:BF:86:5D:DF:B0:85:B4:92:7A:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ac9a4ddd-a4d3-42f8-a810-268e79a03184/bb6bcf47-6554-3d34-b9c5-9aab2d0a8500.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ac9a4ddd-a4d3-42f8-a810-268e79a03184/ac9a4ddd-a4d3-42f8-a810-268e79a03184.crl

            X509v3 Authority Key Identifier:
                keyid:E5:08:02:F7:F3:99:DD:37:5A:81:CB:66:EA:25:F4:E0:59:FB:7A:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ac9a4ddd-a4d3-42f8-a810-268e79a03184.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.162.225.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:77:b9:d7:af:17:be:2d:f2:24:d3:97:0b:1d:bd:de:3f:f7:
         35:6a:3a:2f:4a:3f:5c:cd:a1:5d:59:39:85:d0:de:2c:47:59:
         35:19:ea:0a:23:ad:b1:7f:83:66:c6:33:c2:e6:f3:4e:04:43:
         c5:8f:8a:93:b9:b3:a6:e1:de:99:5d:20:c7:82:d0:4b:12:c5:
         06:3f:0c:58:4a:7c:55:ac:83:90:4f:58:3c:35:b7:48:48:2f:
         46:c6:aa:2c:b5:0e:69:72:f8:78:f5:d9:ba:29:a7:cc:bd:a7:
         66:c9:ee:44:9b:83:6c:79:4a:f3:24:1d:d0:1e:1d:fa:9b:23:
         6a:72:db:7f:f5:67:d2:40:2f:b1:af:a1:ac:60:c4:b7:2b:19:
         98:99:39:ed:a1:59:8b:f5:a3:30:32:d2:41:3d:16:da:0e:7f:
         91:fc:ff:83:e5:a8:49:2f:b6:99:27:aa:a5:e1:d6:85:ad:fd:
         90:44:f0:05:c3:a1:10:a4:b2:95:67:ae:27:59:b5:3f:18:cb:
         9f:ad:79:a7:32:9d:c4:a5:c9:d2:17:8b:1d:a8:e2:fb:8f:74:
         fe:47:f2:6c:b4:e2:ee:57:99:91:74:96:22:61:24:44:a0:50:
         ce:c2:9f:25:18:46:14:1f:c8:15:18:48:1b:67:be:2e:17:75:
         5d:1e:11:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 22 19:19:01 2026 by rpki-client