Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9/3bd4fb77-61e2-38a7-a4eb-b21c6389e790.roa
File:                     3bd4fb77-61e2-38a7-a4eb-b21c6389e790.roa (raw, json)
Hash identifier:          +MRT/gSv4wfEn7NDCurlS/i5RMId86TH3yTCmyhvqXg=
Subject key identifier:   B8:D6:C5:18:DD:58:12:B6:CE:34:33:B8:71:3F:94:C7:C7:F8:9D:C5
Certificate issuer:       /CN=7875058f-5363-4bbc-9de7-bfd669c88bd9
Certificate serial:       010D0C9F4328584CE4C786A63C5AAACC66BF7300
Authority key identifier: 60:F8:59:9A:79:56:37:4D:45:E0:02:ED:58:C0:8D:19:18:5B:AC:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9/3bd4fb77-61e2-38a7-a4eb-b21c6389e790.roa
Signing time:             Tue 17 Feb 2026 14:00:41 +0000
ROA not before:           Tue 17 Feb 2026 14:00:41 +0000
ROA not after:            Mon 18 May 2026 13:00:41 +0000
asID:                     1239
IP address blocks:        137.155.0.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9/7875058f-5363-4bbc-9de7-bfd669c88bd9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9/7875058f-5363-4bbc-9de7-bfd669c88bd9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Feb 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e4:c7:86:a6:3c:5a:aa:cc:66:bf:73:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7875058f-5363-4bbc-9de7-bfd669c88bd9
        Validity
            Not Before: Feb 17 14:00:41 2026 GMT
            Not After : May 18 13:00:41 2026 GMT
        Subject: CN=3dd8c630-7a9b-4ed4-b0b8-5cd20a894a2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:24:6a:c7:06:d5:1d:c6:0d:8a:fe:f1:8d:05:
                    b1:10:25:4a:55:a2:7a:7d:1e:7a:80:31:44:95:5a:
                    5f:22:8b:5c:96:ff:5d:41:54:13:75:9a:92:1a:3e:
                    53:63:6e:c1:87:02:e2:98:e4:6f:27:52:61:8b:f0:
                    2d:b5:d6:84:31:47:0e:70:0e:b2:dc:31:7d:ee:75:
                    5d:5f:03:44:ad:51:a0:01:f7:49:96:91:c2:6b:50:
                    40:eb:b9:24:b7:b9:fe:fd:3b:4f:46:03:65:90:e4:
                    df:bf:ee:61:06:f8:e6:69:43:b3:e8:5a:a8:f3:a6:
                    57:6b:89:58:5f:cf:ca:cb:19:79:0e:53:2a:e4:d4:
                    3c:93:77:fe:83:c5:72:1a:95:14:fe:35:d5:5c:88:
                    d4:f6:52:21:af:6c:11:0a:dc:a4:4e:d3:6f:bf:59:
                    af:a4:79:69:53:4c:be:41:57:22:74:65:fc:da:94:
                    1c:72:ca:ce:f0:0d:db:2d:94:0d:f3:b9:aa:21:ce:
                    b8:23:9d:08:f2:03:50:92:d7:ea:1b:51:9b:79:ed:
                    bb:94:6d:ff:7b:b4:12:f5:a7:c0:67:a5:d4:33:20:
                    93:74:d3:3b:63:76:8b:c9:b7:ef:e3:86:1e:05:82:
                    51:4b:90:16:dd:ad:67:92:bc:59:27:de:2d:18:16:
                    5e:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:D6:C5:18:DD:58:12:B6:CE:34:33:B8:71:3F:94:C7:C7:F8:9D:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9/3bd4fb77-61e2-38a7-a4eb-b21c6389e790.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9/7875058f-5363-4bbc-9de7-bfd669c88bd9.crl

            X509v3 Authority Key Identifier:
                keyid:60:F8:59:9A:79:56:37:4D:45:E0:02:ED:58:C0:8D:19:18:5B:AC:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.155.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:8c:c2:00:8b:1e:4e:8f:18:27:28:3e:68:22:b4:80:d4:3c:
         4e:9c:f6:62:ac:4a:31:7b:bc:7a:3e:bc:79:ba:d9:6a:71:12:
         24:9a:da:95:03:47:24:36:0d:58:ab:9c:c3:fd:49:c8:0e:5e:
         b2:2e:d0:d3:a4:49:95:3c:1b:fe:ed:41:3c:b2:b5:27:a6:c9:
         70:4c:22:10:ef:0e:b5:68:38:80:61:e1:44:fe:34:b9:7d:a5:
         24:04:26:46:d1:43:51:20:f5:0b:49:18:f2:94:15:4d:89:fc:
         45:e8:81:d4:ad:12:1c:8e:e8:9e:54:7d:cf:3a:92:1a:4a:71:
         e7:27:44:d4:93:b1:42:a6:77:f5:b5:c4:de:ea:fd:25:72:98:
         87:46:f7:4f:26:1b:38:f1:31:da:fe:c3:ff:b7:35:e3:0d:22:
         01:c9:ee:ce:bc:55:04:47:f1:c7:43:d7:82:18:05:98:02:49:
         da:53:f3:94:16:49:ce:26:ac:5d:4e:90:5b:82:3d:a0:1c:69:
         2d:ee:10:76:4c:c1:3c:4c:45:6d:26:33:95:7b:00:94:17:ad:
         75:b0:f7:77:c7:23:7a:3c:1a:1f:8e:6f:54:c3:44:27:af:f3:
         a0:33:65:ac:b8:de:54:de:48:ce:99:38:5a:fb:71:58:30:42:
         f9:78:21:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 08:51:14 2026 by rpki-client