Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5/938e1c18-6122-371d-864e-54b0cc8fcbc4.roa
File:                     938e1c18-6122-371d-864e-54b0cc8fcbc4.roa (raw, json)
Hash identifier:          GsJeyJp0PU/ngZeNqNOUGkm5LY8R5vd7CSk6U3LjXLA=
Subject key identifier:   BF:8B:00:F6:0D:F2:3B:BC:FD:CD:BC:6C:69:2F:3F:02:08:D5:5C:A5
Certificate issuer:       /CN=3e511aed-c666-436d-b4a4-947790e6c9e5
Certificate serial:       010D0C9F4328584CED2792F26167343411F8B600
Authority key identifier: 2B:09:92:FE:D9:83:29:F1:0A:85:00:0B:19:34:F0:DD:87:A9:17:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5/938e1c18-6122-371d-864e-54b0cc8fcbc4.roa
Signing time:             Fri 20 Feb 2026 14:00:41 +0000
ROA not before:           Fri 20 Feb 2026 14:00:41 +0000
ROA not after:            Thu 21 May 2026 13:00:41 +0000
asID:                     14618
IP address blocks:        216.120.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5/3e511aed-c666-436d-b4a4-947790e6c9e5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5/3e511aed-c666-436d-b4a4-947790e6c9e5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Feb 2026 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ed:27:92:f2:61:67:34:34:11:f8:b6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e511aed-c666-436d-b4a4-947790e6c9e5
        Validity
            Not Before: Feb 20 14:00:41 2026 GMT
            Not After : May 21 13:00:41 2026 GMT
        Subject: CN=0c20a737-f2de-45bd-9e06-8a10b11b8b51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:59:0e:45:bc:fe:bb:09:97:7a:8d:60:82:7b:
                    5b:40:6e:94:cd:41:9d:87:9f:17:92:ed:3c:c4:97:
                    c4:28:e6:33:8f:d2:8b:28:78:0b:00:cc:37:dd:cb:
                    ed:f5:31:e1:22:7c:8e:a5:eb:a9:7e:0b:dc:53:eb:
                    db:07:f9:d3:07:d8:bb:d3:aa:db:75:00:bf:a1:55:
                    6e:75:fe:9a:aa:11:d7:79:d4:9f:85:bd:70:df:f8:
                    b8:52:85:bf:9a:60:89:27:44:df:64:89:63:25:d4:
                    61:68:41:bd:24:a5:db:35:0a:2d:e6:cd:9b:7a:ba:
                    46:51:b3:eb:89:f3:f5:5d:65:86:ec:61:de:6a:32:
                    5b:c8:fa:5e:be:e8:e4:d8:61:d1:82:ff:60:7f:fc:
                    5a:cf:bb:16:42:b3:12:dc:fe:30:fe:15:4c:0f:d3:
                    8b:d0:41:9a:7b:67:2c:da:a7:fe:0a:b3:8e:73:d7:
                    46:cd:eb:95:2a:9b:21:3d:f5:cf:29:21:12:8d:a3:
                    9c:a6:d6:8b:33:48:d1:91:35:e3:f2:26:f6:5b:c1:
                    a7:a4:95:1b:3b:cf:52:32:8a:83:5d:bc:4e:d8:83:
                    03:e0:03:d5:46:55:c7:a4:e5:fb:20:d3:db:57:c5:
                    55:7e:92:5e:54:2a:23:ef:e0:3b:a1:d2:d5:35:2b:
                    77:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:8B:00:F6:0D:F2:3B:BC:FD:CD:BC:6C:69:2F:3F:02:08:D5:5C:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5/938e1c18-6122-371d-864e-54b0cc8fcbc4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5/3e511aed-c666-436d-b4a4-947790e6c9e5.crl

            X509v3 Authority Key Identifier:
                keyid:2B:09:92:FE:D9:83:29:F1:0A:85:00:0B:19:34:F0:DD:87:A9:17:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.120.165.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:59:f9:72:50:c8:ec:90:e8:a0:78:58:88:c4:ba:36:85:fe:
         42:17:32:64:73:74:bb:70:4b:b1:89:7b:0d:8c:7e:30:c2:26:
         61:fe:ab:01:fb:e4:cb:0a:04:b3:59:52:7c:64:8e:97:24:3f:
         ec:11:2b:d9:49:38:2f:f4:59:88:69:e1:48:6e:1e:cc:c9:0f:
         6c:f4:4f:6d:57:19:50:a7:a8:86:de:96:1b:1a:14:05:4b:d1:
         62:b9:ea:d2:b4:0c:7c:36:9d:82:1e:29:96:96:26:93:2b:19:
         95:38:88:9f:69:b5:83:19:55:a4:43:01:5c:db:fb:0d:de:41:
         9b:7a:63:5d:23:38:02:45:32:c7:a1:e0:a4:18:0b:e1:b8:a2:
         d1:af:40:cf:dd:5e:7d:92:47:bc:f3:91:b7:7c:c9:99:a6:8b:
         6c:15:e0:f5:7e:e0:e1:1d:82:78:77:9f:f0:ae:b4:d5:d8:04:
         fd:1c:b9:2d:37:52:9d:fc:af:14:18:b1:86:07:8f:6c:ce:d4:
         f0:5d:b2:fc:af:d5:8a:78:4c:db:f4:2c:2d:3a:7c:e0:98:16:
         83:98:c2:ee:89:49:b5:cb:37:9d:6f:66:61:9d:a6:26:92:83:
         67:01:65:ea:4f:ad:90:11:20:55:08:d1:a4:d5:d5:ca:42:e1:
         9b:aa:7b:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 04:54:27 2026 by rpki-client