Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9/3d3f8886-9c9a-3c26-8c09-99569f5bf532.roa
File:                     3d3f8886-9c9a-3c26-8c09-99569f5bf532.roa (raw, json)
Hash identifier:          EICkx4yv0iVrAZwPY17RRVTLzYCYfhcSGnvrfMxis4A=
Subject key identifier:   C7:57:B0:F4:3D:87:3D:5B:A0:CA:A9:4C:76:98:ED:4F:9C:C3:DD:D5
Certificate issuer:       /CN=de4a1dfa-8867-4aef-a2e6-131e93add9f9
Certificate serial:       010D0C9F4328584CE3621312CA36E6FE474AB080
Authority key identifier: BE:D8:56:32:EB:8C:A4:4A:C0:EA:03:98:A0:D1:F1:2F:29:91:03:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9/3d3f8886-9c9a-3c26-8c09-99569f5bf532.roa
Signing time:             Tue 17 Feb 2026 02:00:31 +0000
ROA not before:           Tue 17 Feb 2026 02:00:31 +0000
ROA not after:            Mon 18 May 2026 01:00:31 +0000
asID:                     153371
IP address blocks:        149.112.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9/de4a1dfa-8867-4aef-a2e6-131e93add9f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9/de4a1dfa-8867-4aef-a2e6-131e93add9f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 24 Feb 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e3:62:13:12:ca:36:e6:fe:47:4a:b0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de4a1dfa-8867-4aef-a2e6-131e93add9f9
        Validity
            Not Before: Feb 17 02:00:31 2026 GMT
            Not After : May 18 01:00:31 2026 GMT
        Subject: CN=9f000a2c-adb3-484e-9489-e90439da8a34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:3b:7f:e5:bb:e8:1a:d7:dd:24:15:1b:f0:98:
                    b2:03:c2:db:5d:84:7e:51:fd:2b:f9:31:82:3d:a6:
                    02:10:89:5a:52:80:e2:34:01:91:cc:23:b5:dc:4c:
                    5c:28:a5:ff:09:20:7a:2e:8a:d7:62:d7:f1:9f:43:
                    41:25:46:14:2f:c3:ff:a0:ee:d2:6f:4f:4d:f7:98:
                    49:26:06:f3:df:69:bf:e3:68:2d:9e:c7:87:53:bf:
                    c9:9f:1d:2a:0f:10:89:d2:4b:6f:10:4a:88:ae:d1:
                    85:8f:b2:1c:b0:d7:e7:4b:b9:c3:f5:09:26:34:a8:
                    af:30:dc:40:ec:df:10:8b:b5:2e:f0:b0:af:8e:d0:
                    45:8e:42:3c:80:f9:a6:05:e5:a5:0f:70:ea:36:5b:
                    69:5f:76:07:ff:43:97:f9:41:08:78:67:fc:2e:2c:
                    50:b4:49:44:ef:89:0c:a3:42:31:7f:58:2a:5d:c4:
                    79:52:03:72:e9:99:ce:f3:73:ba:62:cd:10:de:b8:
                    6f:57:2f:21:40:f2:d0:55:f5:25:a7:1e:d4:df:0a:
                    46:24:54:53:47:45:c6:7b:6a:5d:2a:e5:4a:1a:c6:
                    6c:d5:f0:58:5c:67:ad:fb:23:eb:ef:8b:56:b0:bb:
                    c1:3f:5b:47:7a:86:b2:b2:76:e1:2b:b9:93:15:eb:
                    45:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:57:B0:F4:3D:87:3D:5B:A0:CA:A9:4C:76:98:ED:4F:9C:C3:DD:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9/3d3f8886-9c9a-3c26-8c09-99569f5bf532.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9/de4a1dfa-8867-4aef-a2e6-131e93add9f9.crl

            X509v3 Authority Key Identifier:
                keyid:BE:D8:56:32:EB:8C:A4:4A:C0:EA:03:98:A0:D1:F1:2F:29:91:03:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:7e:fd:f5:24:d2:29:7a:7b:03:fb:28:64:ae:a2:d9:38:8e:
         0d:66:82:81:90:7e:a5:21:7c:17:fa:6e:a5:96:a9:bc:57:95:
         02:60:8f:a6:1e:0d:d4:8a:55:f2:68:d6:9c:d1:3d:2f:c6:81:
         2c:f3:e0:ca:ae:a0:41:35:30:3d:59:c3:58:7c:5a:54:e1:6a:
         27:1b:51:c3:33:57:69:80:ce:5e:21:51:22:4b:9d:f0:f9:11:
         3c:c1:eb:36:cd:38:4d:b4:dc:e8:6b:19:6a:2c:38:8c:86:c7:
         83:76:c2:e6:1b:09:e3:6e:bb:7f:28:e4:66:b5:54:70:07:11:
         09:5a:28:b1:7f:59:b7:b8:85:60:64:45:90:bf:3a:da:a5:b7:
         d2:cc:e1:fe:f1:1b:1d:c6:77:a4:3b:db:72:89:a5:59:d6:c4:
         4e:79:91:cc:9e:ef:48:c2:cc:4e:52:89:83:a1:73:41:cb:9a:
         98:33:69:68:58:b0:0c:79:9a:6e:54:05:88:90:2e:c8:8f:61:
         46:83:f8:d4:ed:18:20:f0:24:f9:6b:20:58:33:08:13:50:cc:
         51:02:f2:ab:93:92:19:44:7f:79:3f:ea:da:8d:16:b6:4a:48:
         3f:58:e3:40:d5:32:b5:24:64:c6:92:9d:4f:26:b1:56:36:34:
         7a:b3:63:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 00:52:49 2026 by rpki-client