Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7be1bbae-4c45-408f-b5e1-6618f1ec1863/b5e9a161-fefb-3c52-b8cb-f21d229f40bb.roa
File:                     b5e9a161-fefb-3c52-b8cb-f21d229f40bb.roa (raw, json)
Hash identifier:          8fTfWtvFRFuBo/cz243YYPKYkLVD24yHmL4fbphU1DY=
Subject key identifier:   5B:DC:46:8F:03:14:C8:5D:FD:D9:7B:63:0C:50:58:BF:64:8E:12:53
Certificate issuer:       /CN=7be1bbae-4c45-408f-b5e1-6618f1ec1863
Certificate serial:       010D0C9F4328584CF6ECCB03D8BCA784B0B5D980
Authority key identifier: 39:7B:1E:8F:50:89:18:F0:AE:AF:1B:6F:DB:07:13:9A:A8:CF:0C:BD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7be1bbae-4c45-408f-b5e1-6618f1ec1863.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7be1bbae-4c45-408f-b5e1-6618f1ec1863/b5e9a161-fefb-3c52-b8cb-f21d229f40bb.roa
Signing time:             Tue 24 Feb 2026 02:00:31 +0000
ROA not before:           Tue 24 Feb 2026 02:00:31 +0000
ROA not after:            Mon 25 May 2026 01:00:31 +0000
asID:                     17299
IP address blocks:        199.16.236.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7be1bbae-4c45-408f-b5e1-6618f1ec1863/7be1bbae-4c45-408f-b5e1-6618f1ec1863.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7be1bbae-4c45-408f-b5e1-6618f1ec1863/7be1bbae-4c45-408f-b5e1-6618f1ec1863.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7be1bbae-4c45-408f-b5e1-6618f1ec1863.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f6:ec:cb:03:d8:bc:a7:84:b0:b5:d9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7be1bbae-4c45-408f-b5e1-6618f1ec1863
        Validity
            Not Before: Feb 24 02:00:31 2026 GMT
            Not After : May 25 01:00:31 2026 GMT
        Subject: CN=e86ea344-a30a-44d2-8fdc-ac9dfdef9c8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:a7:c0:b6:6d:52:85:34:bb:ad:d7:41:45:63:
                    bb:e0:f1:18:ee:f3:f9:48:f1:e4:0e:6e:35:f3:22:
                    7c:4d:ce:e4:a4:46:c6:ce:90:bb:6f:05:37:47:32:
                    ff:4a:3e:bb:05:9e:c3:82:fb:a8:f2:d0:d1:15:9a:
                    ab:23:d7:c7:dc:99:3e:96:40:e6:6d:34:70:8b:33:
                    14:a1:ea:af:db:e0:41:65:e8:b3:d3:d0:43:d2:ae:
                    11:7d:46:ce:a3:87:c3:5a:5a:69:9a:03:31:12:02:
                    14:7b:92:fc:21:99:c7:71:19:6f:e0:1d:17:fb:01:
                    39:ea:e3:16:1b:e0:53:d9:9b:84:9a:2d:d6:fd:b3:
                    d9:52:f7:c7:8e:1d:5c:36:d2:a4:df:0f:fc:42:db:
                    5b:e4:b1:f5:6c:75:59:a1:16:84:96:1f:2a:39:60:
                    a1:51:1c:1e:c3:8e:d5:36:eb:1d:a7:18:ee:ef:ac:
                    b8:ad:94:dd:5b:ba:14:97:07:9e:12:9f:1a:e0:58:
                    69:69:94:c5:03:94:4e:ff:26:03:c7:e2:28:22:81:
                    82:a3:ee:38:e8:e5:10:23:91:67:53:ef:89:5d:07:
                    8c:98:30:26:ec:76:39:60:e8:08:cd:bf:16:7b:62:
                    8a:b3:d0:d6:99:60:9a:35:9a:50:32:05:5d:c2:09:
                    c3:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:DC:46:8F:03:14:C8:5D:FD:D9:7B:63:0C:50:58:BF:64:8E:12:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7be1bbae-4c45-408f-b5e1-6618f1ec1863/b5e9a161-fefb-3c52-b8cb-f21d229f40bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7be1bbae-4c45-408f-b5e1-6618f1ec1863/7be1bbae-4c45-408f-b5e1-6618f1ec1863.crl

            X509v3 Authority Key Identifier:
                keyid:39:7B:1E:8F:50:89:18:F0:AE:AF:1B:6F:DB:07:13:9A:A8:CF:0C:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7be1bbae-4c45-408f-b5e1-6618f1ec1863.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.16.236.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:9f:29:3e:cb:eb:31:2b:83:eb:a3:d6:d5:06:d9:7f:eb:6f:
         fd:4d:e7:f8:0b:1d:ef:bf:82:61:7c:12:80:b3:63:96:1b:3b:
         dc:e6:45:41:30:d8:95:71:f3:70:e5:f5:e0:c1:43:99:bd:db:
         51:90:e6:36:66:91:1b:b1:25:a7:7a:16:e6:f0:15:15:ab:58:
         23:7b:b3:29:0e:fa:25:7c:c4:b7:80:71:85:e0:9b:79:64:87:
         75:b9:14:c0:06:44:36:b9:1b:93:48:72:2e:c0:d3:66:a2:6a:
         0b:6e:91:42:8b:7f:2f:11:bf:de:2a:fd:fa:10:a6:d4:d2:fd:
         aa:e6:24:bb:9e:0c:06:2c:e6:4e:74:e1:a3:64:b6:2e:99:fe:
         90:b7:f9:05:29:0e:68:5e:af:23:8c:70:a1:50:8b:23:2f:e6:
         90:42:ce:31:f6:bb:ef:b6:93:81:79:96:ee:ea:ac:e6:b6:ca:
         9d:32:61:b6:8b:75:45:92:dc:90:71:42:7b:ca:af:dc:e0:92:
         c8:49:ef:14:59:3f:17:a9:80:8d:ef:1d:08:10:2a:74:b0:6b:
         cc:57:8f:e3:bb:1e:33:aa:f8:f7:9e:fb:57:53:11:c1:c2:12:
         ff:9d:fa:c1:ac:d7:70:18:7d:ad:01:26:92:4e:aa:c4:01:b4:
         86:83:6d:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 23:34:42 2026 by rpki-client