Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/a0a8059e-3e1e-39f6-858e-3051ceafbfdc.roa
File:                     a0a8059e-3e1e-39f6-858e-3051ceafbfdc.roa (raw, json)
Hash identifier:          8cLNdh/C/TYXJ6vg7glw2Rn7Xfgy5QbLzXOTJRwSEA0=
Subject key identifier:   FB:80:A8:EC:45:16:B3:69:9C:9F:63:67:1E:47:B3:78:FE:7F:B4:CF
Certificate issuer:       /CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Certificate serial:       010D0C9F4328584CEAC3D2D6B944AF63C82FB940
Authority key identifier: 66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/a0a8059e-3e1e-39f6-858e-3051ceafbfdc.roa
Signing time:             Thu 19 Feb 2026 17:28:21 +0000
ROA not before:           Thu 19 Feb 2026 17:28:21 +0000
ROA not after:            Wed 20 May 2026 16:28:21 +0000
asID:                     4922
IP address blocks:        98.159.128.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ea:c3:d2:d6:b9:44:af:63:c8:2f:b9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
        Validity
            Not Before: Feb 19 17:28:21 2026 GMT
            Not After : May 20 16:28:21 2026 GMT
        Subject: CN=3647588b-51b7-4f75-ab3e-ccd0a1024fda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:8e:e3:a4:5a:cb:a0:a5:73:38:4d:44:8f:fa:
                    ca:98:b7:9e:f6:dc:f8:2c:d4:f7:cb:e1:bd:ff:e4:
                    e3:84:99:36:e6:3b:86:95:ee:0e:a5:f5:e7:3e:b2:
                    5f:6e:48:63:e3:c3:31:d1:b7:b5:86:cf:49:63:35:
                    53:e5:e8:2a:f2:d4:c0:c1:2f:dc:1d:f1:05:b1:02:
                    ce:d5:82:7e:d5:d2:7c:55:cb:f0:b0:92:f3:65:99:
                    fa:dc:8b:b6:12:8b:cb:7c:a0:4f:e7:d6:11:5b:12:
                    41:b2:7f:8e:9c:9f:b6:35:2d:84:e0:e9:62:6b:ef:
                    be:aa:40:c4:d7:e1:e6:29:e4:cd:c2:c0:1b:77:d9:
                    fa:24:0d:f0:a4:67:94:85:91:85:84:f4:72:b3:82:
                    6b:e5:ea:b8:af:4f:35:16:6b:e5:3b:20:b2:74:92:
                    19:8c:dd:22:be:55:ca:ed:61:c2:1b:c8:42:38:b4:
                    c8:ad:1f:9e:e9:b9:b4:68:28:18:10:06:08:07:45:
                    a1:09:bf:fb:ce:43:f0:4c:f5:8e:7d:67:37:fb:80:
                    b7:ba:dc:e9:7d:52:2a:a0:82:da:a4:d7:f4:e3:f4:
                    23:7b:e7:b8:c5:5d:a4:27:51:e5:79:f8:02:a1:68:
                    3d:a8:32:f9:68:7b:5c:2d:66:6f:64:27:49:40:bd:
                    75:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:80:A8:EC:45:16:B3:69:9C:9F:63:67:1E:47:B3:78:FE:7F:B4:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/a0a8059e-3e1e-39f6-858e-3051ceafbfdc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl

            X509v3 Authority Key Identifier:
                keyid:66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.159.128.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:dc:a7:67:c7:b8:42:58:99:a2:2a:5f:2f:c8:58:1f:93:4d:
         d0:ae:f1:73:ec:a4:28:84:37:14:48:8c:f7:82:dc:0f:c4:cd:
         58:48:2e:7b:d7:4a:d7:69:9a:8a:28:50:7c:c9:c3:3c:80:f5:
         41:86:56:4d:d5:88:b6:6f:eb:dd:fb:4b:ce:f9:c8:5b:21:d2:
         2e:08:c1:6f:66:9d:e1:2a:e8:dc:11:7f:db:bb:7b:fa:fb:3d:
         ae:d1:96:66:86:27:4d:42:17:6c:1f:5e:d4:8b:e9:63:e3:9b:
         22:e0:03:46:94:41:00:ed:e1:d2:7a:62:be:4d:13:2e:7d:0a:
         e1:8e:50:de:5d:e9:73:9a:fb:4d:26:26:1c:fa:ed:db:c0:e5:
         26:1a:41:35:40:7c:97:3e:1a:f6:89:8c:a8:36:10:a8:35:68:
         81:ff:15:5c:90:6f:dc:ef:35:60:0c:f1:50:ae:97:12:3b:fe:
         2d:ac:59:3d:13:0b:0d:a7:c1:92:54:c2:a3:f7:3f:72:b7:f9:
         eb:12:80:30:0e:d1:e1:3d:44:45:0c:86:f3:4a:4b:7b:c2:21:
         ba:57:42:51:7e:a6:dd:c0:49:0b:72:1b:9a:08:df:cc:95:6f:
         9b:1a:d8:60:96:df:02:ba:6f:09:15:07:7f:2e:ae:6d:29:3e:
         d3:f1:e4:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 27 02:19:56 2026 by rpki-client