Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/542e847c-3715-3b27-9f74-ade77a0fb20b.roa
File:                     542e847c-3715-3b27-9f74-ade77a0fb20b.roa (raw, json)
Hash identifier:          kMx5p13odDeJORplPXCAUMA2fYOi0NXkUjk5IN+JwnE=
Subject key identifier:   B3:71:2D:06:DD:6B:B1:06:18:53:C5:F5:9C:20:88:C3:55:C5:CE:8E
Certificate issuer:       /CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52
Certificate serial:       010D0C9F4328584CEBC23147FC47E1DDCEBD8940
Authority key identifier: 06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/542e847c-3715-3b27-9f74-ade77a0fb20b.roa
Signing time:             Fri 20 Feb 2026 02:00:32 +0000
ROA not before:           Fri 20 Feb 2026 02:00:32 +0000
ROA not after:            Thu 21 May 2026 01:00:32 +0000
asID:                     21530
IP address blocks:        170.186.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Feb 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:eb:c2:31:47:fc:47:e1:dd:ce:bd:89:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52
        Validity
            Not Before: Feb 20 02:00:32 2026 GMT
            Not After : May 21 01:00:32 2026 GMT
        Subject: CN=cb90f2e8-da4d-4594-9ee7-bda50fd37d47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:2e:d2:ab:19:a6:9d:e0:03:28:e0:b8:11:a6:
                    17:3c:4e:ba:50:72:88:be:06:65:9d:c9:f7:d5:87:
                    dc:6a:af:66:c6:71:24:25:b9:07:20:be:4f:22:87:
                    18:86:c0:1e:14:54:05:0a:b9:7c:82:eb:91:00:36:
                    7c:15:96:f5:f8:ea:ee:a6:bd:a8:ef:3a:39:d9:73:
                    a3:c1:c5:6b:a6:f8:71:a9:75:88:0e:27:87:3a:54:
                    dd:a8:dc:c7:8f:56:86:01:00:4e:99:8e:9c:6e:1f:
                    87:55:20:35:cf:68:c5:68:f6:d1:27:4e:03:87:e4:
                    c6:78:06:2f:5e:bb:4e:b2:94:19:9d:db:ab:39:71:
                    5f:b6:52:ce:a2:c6:0d:9b:9c:ab:a2:40:70:f7:e3:
                    fc:e1:1a:f7:22:a7:51:fa:86:2c:12:91:21:84:d5:
                    70:94:04:99:67:22:6b:42:2d:58:21:02:45:37:52:
                    cb:06:39:d3:c4:3d:01:58:3e:ef:58:7f:b1:07:ab:
                    37:03:7d:4f:88:0e:87:e7:72:c7:c1:cd:73:57:11:
                    c0:d2:37:9e:6c:04:1b:d1:46:43:56:95:a6:b5:b0:
                    f4:0a:87:e1:32:3b:be:e4:5c:fc:33:5b:34:b6:75:
                    2a:b7:d2:b1:ee:dc:e4:b4:f8:26:3a:f4:52:59:d9:
                    e5:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:71:2D:06:DD:6B:B1:06:18:53:C5:F5:9C:20:88:C3:55:C5:CE:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/542e847c-3715-3b27-9f74-ade77a0fb20b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl

            X509v3 Authority Key Identifier:
                keyid:06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.186.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:ba:a3:db:bc:97:e8:b9:4c:ed:ec:a3:2e:af:fb:a0:c9:55:
         6b:36:da:d6:e1:a2:25:10:47:52:33:d1:c0:7b:71:47:a8:4e:
         f1:a1:ea:68:63:a9:2b:51:49:f1:72:01:dc:4b:2e:58:c1:af:
         22:9b:96:0a:be:86:cc:88:20:59:f8:26:ed:99:19:cf:d3:f4:
         40:e6:fa:92:57:b9:2b:8c:cd:8b:c7:57:1f:81:aa:b5:1f:fd:
         93:2b:fe:4e:1e:47:a5:6c:26:39:bc:b5:d3:b4:78:8a:73:ba:
         05:08:aa:aa:d1:3e:33:28:58:3d:90:55:5f:e3:7d:54:85:ab:
         23:ed:90:a0:9b:66:6a:52:d5:d1:b5:24:07:6d:29:c5:6a:76:
         1b:34:b6:84:45:3f:63:62:0f:f2:60:0a:69:03:8b:56:34:ce:
         80:a0:f4:6d:c3:2c:eb:c5:1c:0a:30:cb:a3:1c:55:29:5b:8f:
         2c:e5:94:8a:f2:d4:23:a5:e6:94:aa:f8:23:f1:fc:cf:ed:b2:
         9e:c6:2b:7e:6c:e4:4e:8e:e3:ef:34:59:ee:bc:dc:ea:83:df:
         df:c7:aa:56:ae:35:b6:b8:21:45:7c:3d:2d:5c:31:0f:4a:26:
         94:46:7c:ca:5b:82:f0:74:ff:09:fd:8d:72:bb:83:37:b6:0a:
         a3:f2:b9:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 18:26:54 2026 by rpki-client