Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e94e7fc3-2169-4676-93fb-fe1a55b9a2b0/bdb429c3-5b63-3cd4-a41d-c5f05b1e59aa.roa
File:                     bdb429c3-5b63-3cd4-a41d-c5f05b1e59aa.roa (raw, json)
Hash identifier:          H8TALlzRt+N2Qxd20s0uxq9pR3dZufeVcMv+sNIp0GY=
Subject key identifier:   E2:A8:48:E8:FD:2E:7E:20:84:F2:EF:96:15:1A:16:0D:16:D0:D5:3C
Certificate issuer:       /CN=e94e7fc3-2169-4676-93fb-fe1a55b9a2b0
Certificate serial:       010D0C9F4328584CE3620B63789E2649E5361800
Authority key identifier: 79:2C:DA:17:2D:29:20:E5:A0:9A:8B:12:C8:AD:5F:57:15:5C:9B:FF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e94e7fc3-2169-4676-93fb-fe1a55b9a2b0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e94e7fc3-2169-4676-93fb-fe1a55b9a2b0/bdb429c3-5b63-3cd4-a41d-c5f05b1e59aa.roa
Signing time:             Tue 17 Feb 2026 02:00:31 +0000
ROA not before:           Tue 17 Feb 2026 02:00:31 +0000
ROA not after:            Mon 18 May 2026 01:00:31 +0000
asID:                     16509
IP address blocks:        204.15.36.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e94e7fc3-2169-4676-93fb-fe1a55b9a2b0/e94e7fc3-2169-4676-93fb-fe1a55b9a2b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e94e7fc3-2169-4676-93fb-fe1a55b9a2b0/e94e7fc3-2169-4676-93fb-fe1a55b9a2b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e94e7fc3-2169-4676-93fb-fe1a55b9a2b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 24 Feb 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e3:62:0b:63:78:9e:26:49:e5:36:18:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e94e7fc3-2169-4676-93fb-fe1a55b9a2b0
        Validity
            Not Before: Feb 17 02:00:31 2026 GMT
            Not After : May 18 01:00:31 2026 GMT
        Subject: CN=a7b3be9e-54f5-46d3-b104-c17e995c7f6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:96:00:7e:ef:41:6f:7f:a3:df:2f:de:52:b2:
                    d8:23:d7:e2:fb:32:89:7b:16:2b:bf:b4:b5:b2:1f:
                    19:78:f7:d2:b7:e0:4a:86:69:c5:88:d1:09:5e:d3:
                    80:89:15:9c:8e:e8:9e:7b:0e:dc:8e:3d:b0:25:a8:
                    be:c9:ee:a8:89:3e:d7:06:c0:84:8f:8e:f5:59:69:
                    58:f0:9f:d5:fb:fa:1b:88:ba:88:8b:fb:a7:30:1a:
                    7e:3b:0c:55:11:b7:25:32:eb:09:51:f6:74:c8:77:
                    85:99:3a:a2:ca:20:7d:53:4a:e5:38:81:44:92:93:
                    0a:57:92:24:9b:70:79:e7:18:58:d7:ee:9b:c3:47:
                    85:74:b5:5e:31:f9:75:da:45:6f:42:2d:95:a2:6d:
                    6a:f3:0e:66:64:c8:88:ed:e2:2c:40:a9:79:30:12:
                    5e:01:6c:9b:4b:f6:63:67:4e:67:08:d2:16:cc:53:
                    8b:be:63:26:7f:87:45:a9:06:33:e6:39:53:f3:cd:
                    bd:24:54:9a:c3:2a:95:b0:bd:e9:54:de:5b:0b:91:
                    d4:e9:ee:e6:fa:24:65:b1:3f:d0:c9:b2:17:ef:ed:
                    db:1d:32:af:ac:59:e8:ca:3d:de:0c:b6:1d:be:db:
                    ca:de:67:82:ac:d6:9b:85:ea:c3:6c:fa:11:2d:a8:
                    4c:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:A8:48:E8:FD:2E:7E:20:84:F2:EF:96:15:1A:16:0D:16:D0:D5:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e94e7fc3-2169-4676-93fb-fe1a55b9a2b0/bdb429c3-5b63-3cd4-a41d-c5f05b1e59aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e94e7fc3-2169-4676-93fb-fe1a55b9a2b0/e94e7fc3-2169-4676-93fb-fe1a55b9a2b0.crl

            X509v3 Authority Key Identifier:
                keyid:79:2C:DA:17:2D:29:20:E5:A0:9A:8B:12:C8:AD:5F:57:15:5C:9B:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e94e7fc3-2169-4676-93fb-fe1a55b9a2b0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.15.36.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:29:22:01:7f:34:5a:1c:e8:8b:0b:99:8c:8f:e8:d9:0d:86:
         69:79:43:f6:70:79:73:79:62:9b:7a:44:76:68:17:90:58:19:
         19:57:70:dc:c5:11:09:0e:20:c0:7a:8d:cb:b8:76:4b:f6:5f:
         47:4a:cf:3e:1c:c8:34:cd:cf:ab:d0:62:da:a2:84:07:57:cd:
         d0:ac:ee:18:ea:a6:84:0a:2c:bb:a4:f5:fa:b4:9f:ba:b8:7c:
         62:6e:9e:e4:bc:51:73:34:22:e2:cb:70:38:23:71:75:de:cf:
         5c:95:48:fb:cb:f2:8f:ef:5b:ba:1e:89:19:cd:7e:65:d8:da:
         5a:c9:fa:d4:06:42:d8:9d:76:c6:cd:29:a1:a6:2a:5d:84:98:
         f7:4a:06:c5:54:03:bd:e8:0b:a0:58:8b:44:3e:0f:b7:f1:82:
         cf:f2:1d:b9:66:68:5e:ff:9c:d2:c5:4b:8f:b4:7f:af:e6:20:
         9e:0e:d0:e3:b8:b7:17:ed:dc:0e:41:0b:9a:89:e7:bb:e5:f7:
         f1:02:cd:7d:52:b2:f1:fb:75:32:59:f0:ca:ae:28:0e:8e:6f:
         03:26:07:dc:26:fd:1b:85:14:ad:00:a8:27:13:a9:51:84:88:
         cd:1f:7d:ed:53:c6:e2:9e:ac:b8:e1:a9:be:7a:b5:15:15:67:
         08:6c:a0:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 00:58:22 2026 by rpki-client