Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/cbead79d-ff0d-37f3-afad-826ece0735f0.roa
File:                     cbead79d-ff0d-37f3-afad-826ece0735f0.roa (raw, json)
Hash identifier:          spUxnXQj9MFfiztCE+52lz4ru/aVsYYgB2aYnOQ4+14=
Subject key identifier:   B3:11:47:2F:AC:CE:B1:9F:9A:24:5A:B3:1C:71:B0:0F:FC:F0:86:6E
Certificate issuer:       /CN=b6f28d10-5739-4e40-a446-935c60d79169
Certificate serial:       010D0C9F4328584CB981F83B741AF74CCBB3CA80
Authority key identifier: E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/cbead79d-ff0d-37f3-afad-826ece0735f0.roa
Signing time:             Mon 02 Feb 2026 02:00:32 +0000
ROA not before:           Mon 02 Feb 2026 02:00:32 +0000
ROA not after:            Sun 03 May 2026 01:00:32 +0000
asID:                     1403
IP address blocks:        66.158.156.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b9:81:f8:3b:74:1a:f7:4c:cb:b3:ca:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6f28d10-5739-4e40-a446-935c60d79169
        Validity
            Not Before: Feb  2 02:00:32 2026 GMT
            Not After : May  3 01:00:32 2026 GMT
        Subject: CN=be0c27d7-eaf7-4fd2-90ed-71444035dad7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:9b:b5:d1:77:86:ce:f3:67:58:24:ea:49:b5:
                    ff:69:5e:6d:04:58:cc:33:ec:ad:67:bb:b8:ca:73:
                    f1:be:c0:cf:08:c0:3a:21:64:be:e4:e0:86:1d:40:
                    94:41:f3:4b:8e:cb:82:a7:be:d5:76:89:d0:78:77:
                    61:a7:c9:08:8d:44:4e:fc:7e:79:83:fa:bc:a9:01:
                    90:57:9b:94:1e:45:40:8d:a7:c5:e4:3c:84:e7:0e:
                    57:67:db:d5:e5:f6:57:fd:3f:74:35:72:fe:4e:e1:
                    24:42:ec:38:f8:89:68:c6:7b:4c:ae:b3:2d:00:f5:
                    f3:dc:da:9f:9e:57:c2:93:7a:91:97:b7:29:87:74:
                    3f:1e:ee:5e:cf:1b:d1:bc:cc:f1:85:08:a2:e1:73:
                    92:d0:00:6b:e4:e4:b2:1e:de:b1:ba:8d:0a:74:b2:
                    bb:50:e4:c8:28:f6:c9:8f:81:79:ba:c3:0f:9c:12:
                    fe:70:03:8d:aa:12:df:d0:44:a0:c8:d9:fa:96:cc:
                    78:cb:10:bc:fc:82:9f:6c:0c:f5:10:1d:af:5d:d3:
                    63:b3:21:59:54:64:04:0b:ee:c1:0d:56:c2:26:de:
                    47:de:95:ec:99:ce:d5:b4:45:23:5c:14:3c:93:de:
                    ce:a3:e8:94:96:63:94:a7:a6:13:4e:73:8b:33:f6:
                    86:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:11:47:2F:AC:CE:B1:9F:9A:24:5A:B3:1C:71:B0:0F:FC:F0:86:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/cbead79d-ff0d-37f3-afad-826ece0735f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl

            X509v3 Authority Key Identifier:
                keyid:E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.158.156.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:70:e4:01:1d:24:7a:9c:73:2b:da:68:67:a1:d1:0b:53:40:
         e1:4c:14:b5:c2:1a:e9:af:d9:10:7c:e6:0b:d9:fc:8a:21:5b:
         83:aa:c8:59:ca:8a:6e:d7:a1:0b:5e:14:d5:8d:45:6a:e7:98:
         c3:9d:c5:ba:d1:d3:0c:20:7a:ae:d8:83:7c:61:fc:30:ca:70:
         33:35:e2:c1:4d:67:90:66:32:63:58:70:7d:5e:16:f4:aa:ef:
         30:21:b5:3e:e0:93:1a:f9:9c:b4:58:55:dd:2d:af:9c:ff:10:
         0f:7c:40:ac:ec:18:d5:36:82:a7:1b:01:50:9b:ed:c5:b7:7e:
         cd:5f:68:85:cf:30:f6:fd:cc:39:35:38:0c:69:8b:58:05:e9:
         b4:f9:8f:fb:9f:a9:06:55:e0:df:b6:0f:2f:72:18:3d:f0:6a:
         a5:fa:69:02:bb:a7:f2:31:cc:37:0a:1c:be:b7:25:ac:1d:60:
         45:df:ed:fd:ae:36:f2:00:5f:df:48:7f:5c:1c:63:4a:bd:1d:
         20:41:e4:6b:ee:07:b1:e9:6f:44:19:04:1a:42:cb:95:ed:b1:
         3f:a8:2e:d5:43:46:f9:3a:32:c2:48:eb:07:95:fe:84:06:f7:
         d7:53:01:82:f5:20:80:ae:05:57:fd:c0:ba:14:db:a4:57:17:
         4e:e3:ea:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 27 10:01:39 2026 by rpki-client