Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/dfbf07a4-612e-3957-8e7e-9edc3121a163.roa
File:                     dfbf07a4-612e-3957-8e7e-9edc3121a163.roa (raw, json)
Hash identifier:          5sH9gPpOnb3JJw/ZQePEj7v9qzyUvNwOH3tFOkDiW7o=
Subject key identifier:   53:AA:DA:E1:31:65:C9:04:DA:01:AE:FA:0C:62:FC:50:9E:32:96:8D
Certificate issuer:       /CN=f79591eb-f8ff-48f5-9ac6-e1afa23e53fb
Certificate serial:       010D0C9F4328584CED27BD888A370C845EAEA470
Authority key identifier: 0B:7A:E7:49:9E:38:74:DF:9B:2C:F5:55:F3:5B:32:97:6C:38:23:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/dfbf07a4-612e-3957-8e7e-9edc3121a163.roa
Signing time:             Fri 20 Feb 2026 14:00:41 +0000
ROA not before:           Fri 20 Feb 2026 14:00:41 +0000
ROA not after:            Thu 21 May 2026 13:00:41 +0000
asID:                     31898
IP address blocks:        143.223.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 24 Feb 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ed:27:bd:88:8a:37:0c:84:5e:ae:a4:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f79591eb-f8ff-48f5-9ac6-e1afa23e53fb
        Validity
            Not Before: Feb 20 14:00:41 2026 GMT
            Not After : May 21 13:00:41 2026 GMT
        Subject: CN=4d34a3a3-1a26-4698-b925-ce18281c38a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:0b:cb:ac:ee:81:f9:00:77:22:37:e4:fc:71:
                    eb:4f:7f:1d:5d:a4:cf:cf:27:a3:fe:10:b5:bc:2c:
                    d0:28:e7:bb:d3:f2:c1:95:35:6d:7e:da:3a:ce:8d:
                    19:a9:e5:47:24:4f:67:8e:fe:63:50:e7:55:ee:a5:
                    c5:61:3f:3a:6a:87:89:68:e4:ee:62:1d:b0:a3:18:
                    2f:47:ed:26:16:b5:00:e2:5d:8d:4d:8b:1a:c5:2e:
                    3e:e5:06:a9:a2:f2:79:73:ee:37:e0:ef:68:1d:06:
                    bb:31:fe:14:6c:71:7b:bb:a2:c9:9e:5b:a7:16:a3:
                    a6:29:a8:3b:e0:b6:45:91:02:83:f5:29:77:d5:5d:
                    7c:7d:6d:33:cd:a9:07:bf:39:ce:03:e7:e1:16:03:
                    c7:2e:38:a4:55:90:16:7d:4d:90:72:29:b9:91:73:
                    fb:10:48:6b:a1:78:ab:9c:ff:f4:46:65:7e:9f:1b:
                    1d:4d:cb:4d:be:be:03:15:f4:8a:01:01:c9:d0:78:
                    57:70:33:d8:90:aa:ab:5e:e8:57:25:9e:22:ee:b5:
                    64:1b:e0:4c:0a:d8:32:5f:79:4d:59:fb:a7:2d:7d:
                    f8:c3:01:7b:21:96:c7:8b:a7:0c:bf:87:ac:29:aa:
                    11:db:0a:1b:23:b7:35:e9:34:bb:6b:13:16:64:5b:
                    99:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:AA:DA:E1:31:65:C9:04:DA:01:AE:FA:0C:62:FC:50:9E:32:96:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/dfbf07a4-612e-3957-8e7e-9edc3121a163.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.crl

            X509v3 Authority Key Identifier:
                keyid:0B:7A:E7:49:9E:38:74:DF:9B:2C:F5:55:F3:5B:32:97:6C:38:23:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.223.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:6f:d0:b7:85:87:7a:59:e9:e0:ad:fc:82:b6:4d:7e:ea:5b:
         fe:bf:1f:b1:ff:6d:93:24:e4:64:32:d1:d2:0c:59:44:b4:67:
         0e:cc:c8:8a:88:05:ba:4d:c8:fa:8e:94:3c:ea:48:92:bc:88:
         84:c9:fa:2b:f0:a7:fc:f1:1e:7a:1f:8c:fc:5d:e6:66:c4:8c:
         34:8a:b9:47:42:b2:b0:6b:93:6b:fc:cb:01:b1:d8:3e:c9:ce:
         f1:b6:57:ca:5c:2d:b7:88:72:ef:99:53:e9:05:3f:b6:71:4e:
         f6:90:26:1d:cc:28:77:6d:04:79:2a:07:f3:18:26:60:55:a1:
         89:c7:dc:88:cb:c9:0d:46:75:de:b1:9a:e4:ed:ec:01:14:77:
         0d:56:28:16:12:ac:b9:68:7d:56:26:33:85:4d:f6:7b:8c:09:
         7a:12:d0:9c:fe:27:aa:31:88:2b:3b:18:e4:4a:b0:22:72:de:
         5d:1d:46:b5:8f:b2:a2:ca:d0:0c:81:b8:eb:7d:60:ee:82:13:
         c7:6a:f6:a7:8a:ce:3a:2c:f2:aa:b9:79:0a:86:46:5d:2d:2d:
         27:78:02:dd:d0:a0:7e:2b:34:a3:3b:88:2e:90:8f:5c:d1:b3:
         90:d0:f3:e8:c1:e1:48:34:bb:14:72:6b:46:6f:0f:6b:de:45:
         e8:66:f9:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 22 19:20:16 2026 by rpki-client