Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/71cba0de-faaa-37b6-b08a-c73d06646a41.roa
File:                     71cba0de-faaa-37b6-b08a-c73d06646a41.roa (raw, json)
Hash identifier:          Ax4SGiF9uoIaQbR2Dsw9LkUAsL5b1QNNVih6AtTFRLY=
Subject key identifier:   32:BA:83:D1:C3:E1:C1:65:8D:F1:8C:D3:DF:FE:22:F1:32:13:EF:8F
Certificate issuer:       /CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Certificate serial:       010D0C9F4328584CC611EBB496D679C907A61F40
Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/71cba0de-faaa-37b6-b08a-c73d06646a41.roa
Signing time:             Fri 06 Feb 2026 14:00:40 +0000
ROA not before:           Fri 06 Feb 2026 14:00:40 +0000
ROA not after:            Thu 07 May 2026 13:00:40 +0000
asID:                     9009
IP address blocks:        198.145.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Feb 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c6:11:eb:b4:96:d6:79:c9:07:a6:1f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b
        Validity
            Not Before: Feb  6 14:00:40 2026 GMT
            Not After : May  7 13:00:40 2026 GMT
        Subject: CN=d14cea3b-942d-4e94-8033-a1a24279f5de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:31:a4:1b:4c:fa:0a:01:0a:04:f6:f0:95:d1:
                    fa:7a:40:00:37:0c:fc:5f:f6:ac:f1:a7:b3:91:2a:
                    34:d3:11:cf:ef:8f:56:1e:74:17:7e:3e:6d:9e:51:
                    2e:39:76:75:2d:6a:b5:20:be:6b:34:1a:3b:c1:c1:
                    5b:6c:a4:a7:a2:0d:08:a1:41:2f:de:bc:eb:fe:47:
                    ec:71:af:b4:8f:d8:1c:ac:a3:95:9a:80:e6:35:94:
                    9e:ee:27:2f:65:87:d4:ff:c0:50:62:20:c5:b5:a9:
                    a4:76:58:2b:5f:44:0e:87:3f:b7:3e:c9:06:4f:f6:
                    1a:3c:07:45:c8:ac:f1:61:f9:33:0e:6b:08:ad:d5:
                    04:a2:4f:73:4d:79:31:d5:a2:a7:ba:b4:50:9b:25:
                    c7:2e:b3:12:4d:d4:51:6a:45:e7:33:db:e8:76:59:
                    f9:22:e3:7d:a4:e9:ae:e3:e8:70:e0:96:eb:87:7f:
                    d7:b0:c5:1c:a6:6d:98:2f:35:99:2c:23:e1:f3:70:
                    39:09:9b:78:6b:8d:02:15:88:72:ad:ff:3a:20:83:
                    1b:15:59:5e:d0:3e:bd:b3:ab:29:ce:ae:7e:57:c5:
                    b4:1e:99:4a:c6:12:8f:d1:4e:8b:64:5c:de:96:29:
                    73:80:be:a3:b2:8f:62:db:e6:9a:d2:da:61:28:cd:
                    b3:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:BA:83:D1:C3:E1:C1:65:8D:F1:8C:D3:DF:FE:22:F1:32:13:EF:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/71cba0de-faaa-37b6-b08a-c73d06646a41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl

            X509v3 Authority Key Identifier:
                keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.145.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:5f:91:f0:53:7e:45:e3:25:fc:c6:33:07:71:f9:63:07:af:
         bf:a9:e8:53:5e:4f:33:2b:6a:8b:98:93:75:e8:a7:52:28:76:
         ca:5e:a8:69:73:4e:3c:a6:cd:bc:0d:32:b0:4b:06:53:d2:75:
         f2:38:c9:ee:91:84:08:30:8b:9d:c0:f0:bd:90:c4:e6:7b:b0:
         81:61:fe:f2:5f:50:68:f7:65:f4:bc:86:11:43:7d:09:41:21:
         3f:b9:f9:b6:4f:b8:e3:c5:60:00:25:73:54:a7:a6:b1:8f:92:
         35:37:10:c7:97:15:1d:45:19:be:6f:c9:ef:49:9d:f8:ff:d7:
         58:90:6d:59:cf:db:5b:9b:de:85:35:48:52:95:dc:36:74:bb:
         00:f4:3d:bb:f6:90:83:d0:7b:83:ae:d6:26:ea:86:ad:e2:a0:
         be:07:08:64:49:16:c7:ba:f3:01:dc:bd:ed:ec:02:c3:99:7f:
         ab:63:74:f9:55:bb:05:10:11:4e:ce:c3:fa:1f:74:46:3f:7b:
         fb:f1:b2:ca:5d:74:62:c5:61:9b:66:6b:12:bd:1f:d1:b9:f3:
         e6:ab:70:36:1e:66:4e:3a:2b:b0:56:98:b9:8c:ef:bc:e5:6d:
         c9:8b:18:4e:ce:40:83:c3:98:44:93:7e:44:2a:8a:17:2a:9b:
         a1:a9:8d:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 17 16:40:23 2026 by rpki-client