Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/ccc68bb0-b42d-399d-bb54-8198ba75355d.roa
File:                     ccc68bb0-b42d-399d-bb54-8198ba75355d.roa (raw, json)
Hash identifier:          GTCiBlCI3d4uf//ejeGeeVttjooU6SZeGo/BMwwRxRM=
Subject key identifier:   22:73:B7:3B:36:DE:1B:4F:3A:B1:85:62:7A:70:69:42:BA:68:22:61
Certificate issuer:       /CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Certificate serial:       010D0C9F4328584CEAC50AB4201448E6F03E3F80
Authority key identifier: 66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/ccc68bb0-b42d-399d-bb54-8198ba75355d.roa
Signing time:             Thu 19 Feb 2026 17:30:48 +0000
ROA not before:           Thu 19 Feb 2026 17:30:48 +0000
ROA not after:            Wed 20 May 2026 16:30:48 +0000
asID:                     4922
IP address blocks:        216.30.146.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ea:c5:0a:b4:20:14:48:e6:f0:3e:3f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
        Validity
            Not Before: Feb 19 17:30:48 2026 GMT
            Not After : May 20 16:30:48 2026 GMT
        Subject: CN=7a5685b2-58a4-4221-b3f1-e7e077e7448f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:cc:89:df:f5:8c:14:6c:9f:f8:7e:b2:35:08:
                    e6:94:e6:a6:c9:1c:9f:37:cf:d2:6e:5d:91:0d:b2:
                    26:37:01:11:c6:f8:8b:bc:0e:31:0a:3d:88:8e:33:
                    5a:45:f3:ff:03:47:56:f0:76:13:95:02:17:61:6a:
                    f8:f8:19:b6:7d:df:47:fc:d4:cc:5b:dc:9b:6b:a6:
                    cc:69:ab:80:90:40:31:8e:5e:a5:d9:2a:7a:e9:68:
                    bf:81:f6:00:f8:89:5a:d9:81:f5:50:b4:53:cf:0d:
                    e4:36:c8:1d:7d:d3:b8:89:29:40:bd:12:a4:22:84:
                    c9:91:8b:fe:6d:25:4d:e2:2b:04:19:c9:74:c8:dd:
                    98:14:c6:b5:ef:20:4d:9a:15:14:84:d6:6c:e9:d3:
                    74:b2:1f:41:fe:83:cd:83:4d:3b:57:f3:a9:db:6e:
                    0c:01:32:13:aa:1b:ac:a1:5b:1d:fa:2e:ed:0a:d5:
                    01:a4:01:8d:a9:96:6f:9a:64:2b:1f:73:b3:86:9f:
                    c4:98:9c:a6:56:29:60:1d:72:84:cf:a1:be:4d:65:
                    b9:90:f5:46:98:54:a2:25:e1:99:e4:dc:00:c4:02:
                    cb:f5:6c:95:41:8c:61:15:ec:2a:94:4a:20:22:5d:
                    c9:1e:37:91:c3:f8:b1:1f:19:03:72:92:01:09:56:
                    65:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:73:B7:3B:36:DE:1B:4F:3A:B1:85:62:7A:70:69:42:BA:68:22:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/ccc68bb0-b42d-399d-bb54-8198ba75355d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl

            X509v3 Authority Key Identifier:
                keyid:66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.30.146.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:bb:6b:9f:5a:4d:da:e1:19:80:71:27:a9:54:a6:8d:1f:5c:
         b4:ef:ea:4c:89:0a:62:a6:a0:4b:bb:c8:44:fc:b9:0a:3a:fc:
         cb:a8:5a:26:b8:f6:ea:9a:fa:fe:cc:2e:65:c1:cf:30:1e:84:
         67:44:ca:ca:08:15:a0:19:2c:8a:c2:e2:dc:24:06:e9:49:53:
         6a:e1:bf:9c:86:1d:97:6f:81:ee:90:ea:76:55:ba:1e:dd:05:
         7b:b9:54:a9:0a:e5:a2:49:b0:d5:0a:5c:06:39:8a:21:11:0a:
         c2:1d:ac:f8:5e:db:63:7c:fc:92:6d:78:36:42:e3:c6:78:ca:
         47:29:59:10:f0:e2:8a:37:87:15:f4:d1:4c:84:25:a7:89:2a:
         1a:44:b7:e8:c6:1e:1c:4e:4c:7e:32:8c:cf:74:bf:ab:72:16:
         b1:69:a4:7c:62:b6:fb:65:17:01:7d:5d:66:2f:bc:88:1d:a6:
         1f:4c:db:fd:e2:92:86:40:5f:43:55:c5:d3:e4:a1:bc:da:65:
         f7:16:5a:fd:0a:8d:3c:e2:7d:8e:e4:c0:0e:e6:c7:5d:d7:5e:
         0f:64:5e:0c:68:0c:63:a3:29:ca:fa:05:93:22:97:68:23:63:
         bd:f8:3b:54:a6:e0:74:8e:ad:a2:9f:03:ea:88:e5:ec:e0:80:
         5c:56:0b:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 27 02:20:27 2026 by rpki-client