Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/d4f1c159-61a7-3bd9-94d7-05d580a696a6.roa
File:                     d4f1c159-61a7-3bd9-94d7-05d580a696a6.roa (raw, json)
Hash identifier:          ZF22+nJwWF4EFZMU82JxEBG5axit1XytHVF7qxmakkg=
Subject key identifier:   FB:F8:43:AE:00:7D:AA:EA:C6:F5:15:A2:A9:D4:EF:68:E6:D7:64:0E
Certificate issuer:       /CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
Certificate serial:       010D0C9F4328584CC611F84BEC1BA53385A94700
Authority key identifier: F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/d4f1c159-61a7-3bd9-94d7-05d580a696a6.roa
Signing time:             Fri 06 Feb 2026 14:00:40 +0000
ROA not before:           Fri 06 Feb 2026 14:00:40 +0000
ROA not after:            Thu 07 May 2026 13:00:40 +0000
asID:                     135391
IP address blocks:        144.208.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 24 Feb 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c6:11:f8:4b:ec:1b:a5:33:85:a9:47:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
        Validity
            Not Before: Feb  6 14:00:40 2026 GMT
            Not After : May  7 13:00:40 2026 GMT
        Subject: CN=a7c80879-8d30-412b-b186-25026dab189e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:42:03:88:fd:d5:fb:57:89:90:66:56:03:0b:
                    c5:be:18:2b:7d:a6:6c:f2:18:19:51:ee:4b:9d:ae:
                    18:aa:69:8b:b1:56:91:20:cc:b9:48:da:a3:66:dc:
                    ab:50:49:08:7f:a7:30:a8:ed:5c:1b:08:e1:70:58:
                    e5:f9:91:be:ef:d0:73:68:6f:4e:54:58:42:fb:c8:
                    85:c5:f0:a6:d2:00:5e:74:6d:cb:2e:d4:7f:66:65:
                    f7:5c:93:55:a9:a8:42:b3:94:97:7a:94:8c:7d:a1:
                    c3:39:06:1a:b9:dc:e1:00:71:95:65:e0:38:53:93:
                    a3:07:02:6d:bf:53:a5:55:5b:f9:58:48:a4:7c:1e:
                    fe:8c:e4:19:2c:29:54:5a:fc:09:47:76:5a:55:14:
                    f3:e6:68:45:15:ca:6e:00:c9:0b:88:5c:71:f7:1f:
                    13:31:50:56:91:3a:97:90:37:72:d7:7b:5f:ee:9f:
                    e5:13:72:d6:88:82:1e:4a:22:f4:eb:00:8d:f7:3e:
                    93:a6:f0:a6:1f:db:65:1d:e7:a5:ca:d6:03:8f:1c:
                    fd:9c:28:a9:7a:8f:3a:8a:13:ef:9a:0e:4f:f5:4d:
                    ff:57:eb:60:a1:96:8c:e0:3a:c6:1f:2a:24:7c:b1:
                    d9:8e:58:d3:e4:c3:c4:8a:81:b1:6e:53:2d:3d:69:
                    d7:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:F8:43:AE:00:7D:AA:EA:C6:F5:15:A2:A9:D4:EF:68:E6:D7:64:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/d4f1c159-61a7-3bd9-94d7-05d580a696a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl

            X509v3 Authority Key Identifier:
                keyid:F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.208.95.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:07:c6:22:f6:cd:6b:76:1e:75:1b:48:bb:30:23:94:b4:ed:
         01:78:e6:7d:6e:1f:9c:f1:97:ed:b5:c9:74:4f:d2:b4:cf:51:
         5c:98:ff:cd:2f:82:6c:d2:c8:6c:8b:58:91:4f:fb:72:2c:c9:
         07:69:d0:18:87:1e:7a:a5:0a:d4:bd:bb:81:7a:a6:7e:60:e9:
         92:ee:17:f6:27:84:b0:f7:eb:cb:05:4e:0d:48:95:3f:4f:30:
         b7:13:0e:f9:5f:20:e1:af:b4:6c:cd:18:7f:49:0d:25:53:0f:
         02:ce:28:1a:70:13:01:82:59:68:e2:ce:1d:cd:2e:cc:83:c0:
         61:9b:9e:9c:4d:1f:52:7c:57:67:8b:e5:83:a6:cd:e7:c1:88:
         64:1d:ad:6d:d8:90:9c:d6:60:b0:ef:e4:53:9f:82:02:23:4b:
         e3:63:dd:63:9d:dc:43:27:0a:07:6d:36:b5:94:10:ab:49:ef:
         cf:c2:d4:7d:7b:2f:17:38:38:c6:b1:d0:38:2d:41:18:b7:f9:
         93:86:b4:6b:47:06:8e:ca:fd:76:bf:d5:12:50:59:8e:b3:2d:
         cb:6b:c0:6a:8c:d8:2c:8c:b3:16:4e:8a:09:28:64:22:0e:0f:
         db:35:4e:00:9c:e5:18:78:10:5e:bb:18:59:49:f2:a6:37:1b:
         21:3b:af:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 02:44:08 2026 by rpki-client