Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/87dfd4ab-4205-3b5c-a284-b2fe2106d17a.roa
File:                     87dfd4ab-4205-3b5c-a284-b2fe2106d17a.roa (raw, json)
Hash identifier:          olzmUusfJNBgkV5zUxF745zrO558Rt3E8q9ETJVf5wg=
Subject key identifier:   73:70:04:78:74:A7:A8:48:A1:42:67:24:E6:41:49:A9:29:9C:94:C0
Certificate issuer:       /CN=472e527a-848a-4f3d-b7a0-4f001e757ee7
Certificate serial:       010D0C9F4328584CC07C987294DFCC90F27ADF60
Authority key identifier: 2C:3A:2F:6B:C8:5B:37:1A:29:05:9B:D1:83:82:B5:85:4D:45:C5:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/87dfd4ab-4205-3b5c-a284-b2fe2106d17a.roa
Signing time:             Wed 04 Feb 2026 14:00:39 +0000
ROA not before:           Wed 04 Feb 2026 14:00:39 +0000
ROA not after:            Tue 05 May 2026 13:00:39 +0000
asID:                     174
IP address blocks:        104.167.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/472e527a-848a-4f3d-b7a0-4f001e757ee7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/472e527a-848a-4f3d-b7a0-4f001e757ee7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Feb 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c0:7c:98:72:94:df:cc:90:f2:7a:df:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=472e527a-848a-4f3d-b7a0-4f001e757ee7
        Validity
            Not Before: Feb  4 14:00:39 2026 GMT
            Not After : May  5 13:00:39 2026 GMT
        Subject: CN=758a0743-d76e-4e0e-823b-492aad07d992
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:bd:99:85:2b:69:bd:50:4e:6c:25:88:c8:3f:
                    b0:82:6e:47:02:be:59:ff:49:0f:f1:3e:c8:c2:a0:
                    62:1b:67:d2:01:7a:7e:82:63:10:24:a8:5d:a5:0f:
                    da:e6:fb:59:f5:4a:1f:79:11:44:71:2f:ef:aa:b2:
                    b3:c6:74:a0:ae:53:32:7a:92:1b:c5:90:6c:36:40:
                    9b:cf:10:1b:1e:96:f0:82:6c:59:96:94:cf:08:bd:
                    f0:ca:20:ba:d8:47:c8:17:09:85:48:06:c9:ee:d2:
                    2c:9f:12:c4:81:1c:bb:0c:63:80:e2:bd:e9:93:db:
                    50:4f:27:18:39:80:8b:59:fc:dc:ac:f6:c1:31:a0:
                    56:c3:f6:37:19:79:1e:eb:25:59:fb:84:fe:31:a9:
                    e1:79:60:8d:1e:70:10:4c:45:ed:cf:f7:0c:68:3f:
                    c8:72:e0:d0:98:21:a2:09:7b:8f:85:ae:04:9a:5d:
                    41:10:eb:d4:8e:2d:07:5c:14:e6:68:4d:b9:f2:36:
                    3e:6e:27:a2:ac:82:c8:2a:4b:61:24:ab:33:68:6b:
                    43:af:92:9b:b9:73:80:cc:67:f0:f2:ed:52:d3:95:
                    22:25:57:46:8d:34:ad:91:a9:1a:59:7e:e7:e7:87:
                    72:b2:84:3f:19:5f:0f:4c:29:59:5e:3a:88:0a:2f:
                    69:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:70:04:78:74:A7:A8:48:A1:42:67:24:E6:41:49:A9:29:9C:94:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/87dfd4ab-4205-3b5c-a284-b2fe2106d17a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/472e527a-848a-4f3d-b7a0-4f001e757ee7.crl

            X509v3 Authority Key Identifier:
                keyid:2C:3A:2F:6B:C8:5B:37:1A:29:05:9B:D1:83:82:B5:85:4D:45:C5:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.167.229.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:aa:2a:d0:4c:f3:2d:ef:ee:21:70:09:a4:56:06:9a:a4:b2:
         b0:b4:a3:41:32:10:ec:32:6a:1a:97:39:4b:a4:35:f7:90:ab:
         fa:1f:91:c7:56:d6:02:92:79:fd:14:bc:c8:de:e8:c4:7f:3f:
         49:ee:62:eb:a5:e1:de:7f:a9:67:44:84:30:8c:a7:82:16:7b:
         c4:cb:92:6f:d9:6f:08:c7:93:32:07:87:e8:46:de:2d:b8:1d:
         0b:c3:42:96:bf:51:e3:34:5c:c2:11:0d:03:4c:40:c9:84:9a:
         f0:2e:ff:d0:ab:26:6a:84:09:30:ed:97:2b:20:ba:8d:8f:95:
         66:55:04:f2:aa:c5:f6:d1:f2:fd:57:dd:fd:35:e2:42:a4:88:
         54:f8:db:7d:2c:2f:48:d0:5c:8c:6a:9f:57:3c:5e:b4:4c:9d:
         c4:1d:b1:21:ba:e5:76:53:2a:cc:70:f9:1a:ae:02:cf:e3:f5:
         ff:c2:91:50:77:7d:de:20:af:e2:a9:77:38:5f:c8:7b:c0:96:
         6c:82:74:7c:1c:a5:19:4b:92:09:4b:56:fd:2e:15:a3:e0:9a:
         43:d5:cc:4f:fa:a0:f2:6e:a7:62:51:df:84:88:1b:65:2c:5a:
         1a:ae:f3:c2:7b:59:bb:32:5e:19:a0:ce:e6:ce:0e:2f:87:8b:
         89:81:90:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 09:30:47 2026 by rpki-client