Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/33acdaeb-a95e-3df1-be44-e1190abf4019.roa
File:                     33acdaeb-a95e-3df1-be44-e1190abf4019.roa (raw, json)
Hash identifier:          Oh7hMBN1Yov/Mq5wtpNj4tPBQX5LV5e1KB/EZbsQIhQ=
Subject key identifier:   95:A9:83:30:CA:79:4B:0F:6B:07:5D:A0:06:19:EA:06:D6:A6:C5:46
Certificate issuer:       /CN=e4bb5ad3-d823-4023-aace-329885f50c4b
Certificate serial:       010D0C9F4328584CEA5CE2B4AE195C95089DEB80
Authority key identifier: DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/33acdaeb-a95e-3df1-be44-e1190abf4019.roa
Signing time:             Thu 19 Feb 2026 14:00:40 +0000
ROA not before:           Thu 19 Feb 2026 14:00:40 +0000
ROA not after:            Wed 20 May 2026 13:00:40 +0000
asID:                     16509
IP address blocks:        164.152.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Feb 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ea:5c:e2:b4:ae:19:5c:95:08:9d:eb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4bb5ad3-d823-4023-aace-329885f50c4b
        Validity
            Not Before: Feb 19 14:00:40 2026 GMT
            Not After : May 20 13:00:40 2026 GMT
        Subject: CN=dd60604c-ead9-4b85-9865-289db54cf65f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:8e:88:9e:7a:dc:71:73:40:c7:e4:05:7c:23:
                    11:e6:0b:e0:ce:c7:59:2e:dc:0d:3f:65:bf:c5:f0:
                    da:87:d4:27:b6:69:d9:7e:7c:6c:85:44:81:0f:e3:
                    3e:a8:92:40:01:1e:3d:69:03:c1:98:53:f3:37:4a:
                    16:4b:e6:7a:58:42:0d:8c:cd:2a:17:9b:cf:b7:67:
                    e4:b6:77:3a:cf:29:85:ba:6c:44:09:b5:eb:cc:3a:
                    a7:ec:22:f2:4a:d9:45:58:09:69:33:db:09:cd:7d:
                    3e:7d:58:f3:14:bc:b5:09:e7:b0:c9:95:2c:b0:0a:
                    ad:f0:ed:a1:3f:1d:cd:1b:e7:18:0f:65:d0:40:81:
                    ed:95:02:20:c3:20:9a:6b:c6:1d:f3:98:59:6c:ac:
                    5f:68:17:6c:92:93:9e:fa:48:64:d1:41:10:6f:6c:
                    e4:6f:f2:4d:56:47:d0:a7:86:8a:31:33:5b:98:97:
                    57:27:66:b1:50:1c:6a:ab:a2:7d:1f:fd:56:04:fb:
                    7c:00:ad:e7:28:d8:f0:83:6c:d8:1d:2b:0d:b6:59:
                    55:0e:0c:ef:10:3e:a8:5d:a1:4d:12:c4:c2:d1:28:
                    2c:d3:57:e8:0f:98:b4:6a:b9:8b:e2:ac:fe:3e:c3:
                    e9:7c:51:e7:7b:04:c7:a4:15:24:4e:9a:6c:09:0d:
                    d6:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:A9:83:30:CA:79:4B:0F:6B:07:5D:A0:06:19:EA:06:D6:A6:C5:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/33acdaeb-a95e-3df1-be44-e1190abf4019.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl

            X509v3 Authority Key Identifier:
                keyid:DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.152.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:20:1b:73:c1:67:4b:3d:a7:5b:52:8b:36:cc:4a:61:24:a1:
         7f:c8:a6:cd:0d:a4:b2:39:43:1d:19:fa:fe:61:4c:c3:78:0f:
         7c:61:11:61:2d:ec:01:1e:26:7c:d4:85:66:88:bf:cb:8b:d9:
         20:03:51:82:ff:26:24:c4:34:d3:90:4b:cb:bb:62:71:4c:b4:
         bf:20:1f:dd:99:e2:67:ca:93:7d:ba:55:37:a1:be:be:00:57:
         00:e5:6a:76:93:5b:71:f3:62:dd:ff:5c:6c:fa:fa:06:54:d4:
         77:26:67:e0:16:4c:3b:19:43:98:28:c0:78:61:ce:d8:5f:5f:
         ae:e8:48:4f:70:78:7e:01:1f:61:33:ac:f4:3b:3d:3e:e7:6d:
         2a:4a:0d:32:24:65:51:fd:21:a8:d6:f2:ab:6d:08:f9:d8:b3:
         f1:6b:a2:46:33:9c:b6:c4:72:10:96:00:58:dd:02:36:da:79:
         4d:0d:e7:81:d2:d2:0b:b8:f0:95:ee:c6:33:a0:d8:76:58:e2:
         1b:0d:58:76:57:5b:66:fb:38:a1:73:90:87:c5:32:40:3f:f3:
         a1:86:58:7f:45:0e:31:b9:15:98:04:63:cc:71:b5:66:a4:58:
         ba:72:00:a7:13:ea:7b:4c:a6:b6:f6:bc:a1:5c:b9:14:77:11:
         b2:41:3c:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 07:28:26 2026 by rpki-client