Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1f976fd-7fa0-4323-97fa-35bb869a9231/2ef408ad-35f8-33e4-b29d-64037f1ae171.roa
File:                     2ef408ad-35f8-33e4-b29d-64037f1ae171.roa (raw, json)
Hash identifier:          IbU73KH2MQhNtYA1OFYt268V9tXzeSlc4O9A7LCdkp4=
Subject key identifier:   64:34:1B:20:D0:52:08:66:D4:F3:F8:2A:71:AD:4B:F1:09:63:E2:5C
Certificate issuer:       /CN=b1f976fd-7fa0-4323-97fa-35bb869a9231
Certificate serial:       010D0C9F4328584CDDCCF41572B936D3C435EF60
Authority key identifier: AE:9A:24:71:98:85:E6:0B:5D:3F:EE:2F:FD:CA:A1:6A:94:E0:27:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1f976fd-7fa0-4323-97fa-35bb869a9231.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1f976fd-7fa0-4323-97fa-35bb869a9231/2ef408ad-35f8-33e4-b29d-64037f1ae171.roa
Signing time:             Sun 15 Feb 2026 02:00:32 +0000
ROA not before:           Sun 15 Feb 2026 02:00:32 +0000
ROA not after:            Sat 16 May 2026 01:00:32 +0000
asID:                     2055
IP address blocks:        173.253.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1f976fd-7fa0-4323-97fa-35bb869a9231/b1f976fd-7fa0-4323-97fa-35bb869a9231.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1f976fd-7fa0-4323-97fa-35bb869a9231/b1f976fd-7fa0-4323-97fa-35bb869a9231.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1f976fd-7fa0-4323-97fa-35bb869a9231.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 01 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:dd:cc:f4:15:72:b9:36:d3:c4:35:ef:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1f976fd-7fa0-4323-97fa-35bb869a9231
        Validity
            Not Before: Feb 15 02:00:32 2026 GMT
            Not After : May 16 01:00:32 2026 GMT
        Subject: CN=2ed12520-873d-4237-aac2-32679b5e2c91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f9:7a:11:21:2b:6a:af:eb:00:dc:22:aa:bd:
                    0b:7c:6e:7c:91:54:b1:9a:f2:8f:c9:aa:e5:f3:63:
                    20:3f:f9:e5:71:f9:fe:d8:08:70:89:8c:a0:ac:05:
                    bd:6d:2c:d3:a1:3c:f1:11:c0:7f:14:17:50:f3:6b:
                    39:0c:b9:3c:ac:62:d4:59:5a:99:66:a0:f3:dd:73:
                    70:6d:58:ec:fa:38:5b:fb:8a:72:97:a5:62:80:49:
                    34:d4:9f:ec:19:fc:c6:62:de:33:ef:05:8e:8f:24:
                    04:57:88:ce:67:05:67:40:5b:c1:5b:8c:51:76:ca:
                    4c:a3:45:b8:83:c9:45:bb:63:74:28:f0:d3:86:26:
                    08:44:e1:ae:c5:30:1f:9c:42:61:ec:17:c7:6b:34:
                    e6:c0:d3:9b:ca:fb:56:fb:05:a2:59:08:0d:a8:cb:
                    ee:9c:fb:c4:44:78:50:6d:5c:80:a1:fa:ab:03:a9:
                    d5:14:05:a6:ea:a6:3d:f0:dd:e9:30:4c:9d:e6:b7:
                    ad:09:53:b4:8c:f6:e8:0d:5b:08:3b:9f:ec:f5:ba:
                    39:c0:fc:2b:72:36:16:87:8c:07:75:a1:84:15:80:
                    9f:e2:a3:a7:6a:67:17:54:96:31:1c:b7:d8:34:af:
                    2a:41:9f:64:70:ac:66:d0:cf:36:ba:3b:a1:13:de:
                    26:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:34:1B:20:D0:52:08:66:D4:F3:F8:2A:71:AD:4B:F1:09:63:E2:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1f976fd-7fa0-4323-97fa-35bb869a9231/2ef408ad-35f8-33e4-b29d-64037f1ae171.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1f976fd-7fa0-4323-97fa-35bb869a9231/b1f976fd-7fa0-4323-97fa-35bb869a9231.crl

            X509v3 Authority Key Identifier:
                keyid:AE:9A:24:71:98:85:E6:0B:5D:3F:EE:2F:FD:CA:A1:6A:94:E0:27:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1f976fd-7fa0-4323-97fa-35bb869a9231.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.253.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:a8:45:b2:85:99:2a:4f:f5:d7:cd:e9:c8:e3:fd:68:41:5c:
         e7:3b:49:63:b8:77:ed:25:47:b6:a0:21:d2:dd:a1:86:ed:41:
         10:8f:a4:94:47:1c:a4:bf:9a:6c:4c:3c:cf:e7:42:ce:26:61:
         1f:ba:11:fc:4c:6b:c7:5b:52:09:a0:7f:80:33:4d:33:eb:cf:
         00:b3:e4:da:19:1b:1b:03:51:c8:12:eb:6d:c6:90:f1:fd:93:
         17:2d:5c:e4:e3:8c:c4:14:30:80:c7:19:9c:30:62:6b:01:4d:
         52:36:ce:b7:c2:8e:f3:7a:a9:02:b1:aa:f1:f6:08:32:91:d6:
         c9:2e:2a:87:e2:59:4e:28:38:55:6c:e3:be:96:62:51:7d:ac:
         09:d6:32:22:07:4e:6d:3c:5b:0a:69:86:c2:2c:d1:15:5a:3b:
         78:97:76:fc:88:27:d8:e3:af:ec:15:88:c6:24:f0:ba:13:a9:
         ea:9f:12:9d:d4:9e:d4:d2:fe:3f:b3:9d:35:43:1f:63:33:58:
         fd:8c:74:0c:b0:7c:d4:99:8f:49:4b:eb:0e:f9:75:05:63:30:
         ef:15:9a:0f:3f:69:fc:04:b6:bb:a2:50:ed:ea:07:a8:05:c5:
         e7:b3:49:f0:31:48:8b:cd:3c:c8:e9:6b:b9:6d:f1:32:ba:f7:
         dd:60:57:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 28 08:19:11 2026 by rpki-client