Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5dc32e87-d25f-444f-adc0-e3c94e9679db/9655e5b0-cf9b-3e0c-b899-2239bbbe8d6b.roa
File:                     9655e5b0-cf9b-3e0c-b899-2239bbbe8d6b.roa (raw, json)
Hash identifier:          1VP7MEmGITtVf9A9W2Fj/AwhiHlmLX7Bs+lonrRyEto=
Subject key identifier:   47:8B:B9:87:88:9E:07:DC:A8:CA:99:10:D5:1B:4E:20:F3:33:86:CE
Certificate issuer:       /CN=5dc32e87-d25f-444f-adc0-e3c94e9679db
Certificate serial:       010D0C9F4328584CCFD739330C8C0C8FE4846740
Authority key identifier: 9A:9A:36:11:68:63:DC:25:76:34:69:7C:7C:0B:BA:19:88:E5:4C:4A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5dc32e87-d25f-444f-adc0-e3c94e9679db.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5dc32e87-d25f-444f-adc0-e3c94e9679db/9655e5b0-cf9b-3e0c-b899-2239bbbe8d6b.roa
Signing time:             Tue 10 Feb 2026 02:00:31 +0000
ROA not before:           Tue 10 Feb 2026 02:00:31 +0000
ROA not after:            Mon 11 May 2026 01:00:31 +0000
asID:                     395222
IP address blocks:        208.77.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5dc32e87-d25f-444f-adc0-e3c94e9679db/5dc32e87-d25f-444f-adc0-e3c94e9679db.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5dc32e87-d25f-444f-adc0-e3c94e9679db/5dc32e87-d25f-444f-adc0-e3c94e9679db.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5dc32e87-d25f-444f-adc0-e3c94e9679db.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:cf:d7:39:33:0c:8c:0c:8f:e4:84:67:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dc32e87-d25f-444f-adc0-e3c94e9679db
        Validity
            Not Before: Feb 10 02:00:31 2026 GMT
            Not After : May 11 01:00:31 2026 GMT
        Subject: CN=e867101e-b8d5-4278-9be0-0d0abf296f17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:2f:bb:30:35:4d:e1:94:fa:8f:2a:99:70:8a:
                    67:c0:57:b1:c0:72:65:77:20:3b:f7:fd:6a:6e:36:
                    84:c1:0f:c6:73:98:03:a0:7b:99:3f:49:29:e3:bd:
                    19:5c:82:3c:fe:da:dc:7e:4f:40:b6:3f:81:fd:1b:
                    c6:ec:c0:4f:3e:73:6d:29:05:4f:1d:d5:53:fa:1e:
                    9e:21:f7:cb:60:41:2a:48:ac:59:b1:58:06:ea:9a:
                    fa:7b:ba:31:04:26:85:28:d1:b4:c6:db:8d:bb:ca:
                    0a:b7:ca:72:ea:e2:bd:d4:c7:a0:62:71:e6:52:f0:
                    93:c3:2a:0c:b0:c5:da:e8:58:3f:8a:78:28:6e:55:
                    9c:ff:81:cc:d3:73:07:22:33:6c:f6:a6:f8:f0:24:
                    36:41:f8:62:d8:ea:87:0e:35:61:a6:26:b8:96:02:
                    89:66:02:d4:45:fe:06:ad:d3:7f:88:44:0b:2d:0d:
                    ab:11:ee:db:dd:2e:5c:ac:cb:bf:85:95:68:ac:a0:
                    33:04:3d:a3:9b:75:9d:ef:b8:45:85:a9:85:fa:fc:
                    04:85:b2:76:28:63:85:24:d2:50:93:7d:3c:18:aa:
                    31:96:26:a8:30:4d:d5:64:1d:ce:d2:2e:21:a9:e9:
                    d3:43:db:18:28:21:12:90:be:75:1b:9f:07:7c:80:
                    21:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:8B:B9:87:88:9E:07:DC:A8:CA:99:10:D5:1B:4E:20:F3:33:86:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5dc32e87-d25f-444f-adc0-e3c94e9679db/9655e5b0-cf9b-3e0c-b899-2239bbbe8d6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5dc32e87-d25f-444f-adc0-e3c94e9679db/5dc32e87-d25f-444f-adc0-e3c94e9679db.crl

            X509v3 Authority Key Identifier:
                keyid:9A:9A:36:11:68:63:DC:25:76:34:69:7C:7C:0B:BA:19:88:E5:4C:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5dc32e87-d25f-444f-adc0-e3c94e9679db.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.77.167.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:34:85:b7:fd:1c:c3:ba:82:bc:92:a8:15:f1:9a:47:88:d8:
         bb:a7:bf:98:d5:ad:57:69:2e:4e:d3:e7:d9:ff:fa:5f:35:6b:
         45:72:59:6e:5d:38:51:33:60:b8:78:fd:d6:0e:ee:50:f3:b0:
         8f:12:fe:82:16:aa:83:d0:a2:c1:b6:41:92:d8:65:bc:9f:86:
         e9:41:1d:ba:ba:00:13:0a:75:a0:b8:18:db:ea:f7:33:62:e2:
         a2:d1:61:f5:de:65:de:c3:64:1f:a4:fe:4b:9d:31:74:f5:09:
         51:c6:7b:81:26:35:ec:84:44:2b:f8:0f:71:59:a5:e5:77:72:
         99:f8:df:f9:71:34:37:9b:bc:9c:63:06:1e:82:a5:dd:b8:bf:
         c0:7c:9e:94:ff:b9:58:5d:d3:97:13:32:66:40:bd:79:3c:38:
         41:04:e7:8d:b4:77:e3:0e:a5:37:5e:c4:84:be:dd:58:f7:6e:
         38:b8:ea:21:47:97:a5:b0:fb:ca:42:85:30:79:96:90:3e:e0:
         07:10:dc:c3:9b:d9:d0:e4:d0:f8:46:ed:02:2a:0a:c5:11:8f:
         c1:92:14:91:4d:39:ea:e6:b7:f5:c3:61:bb:33:cb:82:ae:cf:
         38:e8:c6:10:97:cb:95:17:f0:c8:a8:e2:9d:88:d8:1a:ed:7b:
         da:e2:76:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 22:50:58 2026 by rpki-client