Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/e1948923-d381-39a7-ab5c-51935c3a0ac9.roa
File:                     e1948923-d381-39a7-ab5c-51935c3a0ac9.roa (raw, json)
Hash identifier:          yWgbs6wuhCRbJQXr4Q6Gllks0EMJ+Vfv4v+gROJadio=
Subject key identifier:   B8:22:0C:FD:2D:26:99:D2:4A:7D:6C:E3:19:7E:17:8B:92:CB:F3:57
Certificate issuer:       /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74
Certificate serial:       010D0C9F4328584CD99CAF6BC0F912538999B6C0
Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/e1948923-d381-39a7-ab5c-51935c3a0ac9.roa
Signing time:             Fri 13 Feb 2026 14:00:41 +0000
ROA not before:           Fri 13 Feb 2026 14:00:41 +0000
ROA not after:            Thu 14 May 2026 13:00:41 +0000
asID:                     31898
IP address blocks:        131.229.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Feb 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d9:9c:af:6b:c0:f9:12:53:89:99:b6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74
        Validity
            Not Before: Feb 13 14:00:41 2026 GMT
            Not After : May 14 13:00:41 2026 GMT
        Subject: CN=fac9e949-b5bd-4782-88db-040362fb0d66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:11:56:37:db:df:86:5b:86:1f:37:a5:e2:5c:
                    e4:72:6d:d6:46:96:32:da:b6:95:33:af:9c:79:f0:
                    8c:1c:eb:ca:02:90:e7:26:5c:7c:a1:f6:5f:c8:a9:
                    52:aa:1a:09:0e:89:e9:69:a0:cd:e1:a8:b3:98:55:
                    47:79:74:2f:e6:91:a0:db:06:54:22:d9:e8:f6:ac:
                    6d:84:a9:3e:09:58:e5:62:8c:47:d0:5d:65:6e:a8:
                    09:ac:13:fe:96:2a:9a:a9:ce:c7:c5:1c:ba:69:63:
                    22:02:ac:1d:76:ae:82:ac:08:c1:7e:e7:20:19:d9:
                    63:5a:61:53:d7:ca:bd:93:ae:5b:c1:be:57:b0:54:
                    64:e6:e0:f0:b7:90:e7:36:d4:fc:19:64:08:a0:eb:
                    c0:6c:f1:9e:ea:a5:df:17:9c:6e:83:d9:6f:e8:2a:
                    83:ea:25:f3:68:6a:eb:54:84:8c:a6:b4:4e:6d:bc:
                    f6:79:4c:9a:84:21:3f:c0:23:d0:b9:98:da:7d:c3:
                    15:a6:17:0f:8c:3f:02:61:a4:e8:14:90:15:3d:15:
                    59:e8:48:b4:97:31:9a:00:8b:60:4a:32:de:ea:8c:
                    b0:35:48:57:25:58:ce:34:d0:f1:c0:4b:b8:fc:2a:
                    e7:56:67:6e:02:83:5b:8e:e9:eb:d7:b9:76:35:e1:
                    8a:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:22:0C:FD:2D:26:99:D2:4A:7D:6C:E3:19:7E:17:8B:92:CB:F3:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/e1948923-d381-39a7-ab5c-51935c3a0ac9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl

            X509v3 Authority Key Identifier:
                keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.229.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:c3:da:78:22:5e:e6:85:39:64:53:32:86:24:c3:f0:e3:2b:
         28:33:54:73:77:98:88:bf:fd:2f:7f:a4:5e:28:a4:bc:a2:d3:
         ef:ea:2f:b2:dd:50:ad:af:c5:de:70:66:a4:b6:59:71:9b:67:
         ff:85:59:78:61:72:d5:dd:01:63:6c:48:7b:2d:f6:e5:ff:f6:
         0e:09:39:30:6f:ab:6d:9d:e8:aa:37:96:48:0b:c8:b4:fa:0f:
         1a:ba:d3:2c:c8:00:32:03:e2:1b:6e:02:a1:1a:9c:fb:90:df:
         f8:b9:b6:b0:b2:c7:8c:9e:f9:93:ae:d9:06:97:6d:fb:21:06:
         65:71:06:81:ad:d7:52:83:17:ab:9a:f5:b0:a6:e8:3d:d0:f4:
         53:4c:30:f0:96:c0:8d:ce:c8:be:01:77:36:e0:ec:6c:25:a9:
         25:6a:90:de:43:37:e8:3f:9b:2d:cc:19:00:38:e4:1d:0d:0e:
         01:69:44:5f:ff:d0:05:32:d4:ca:1c:29:0c:5c:73:53:61:f5:
         fd:04:97:5e:74:bb:14:b4:e4:80:de:33:32:93:3a:26:ea:83:
         1d:c8:bc:33:26:0b:23:de:31:a3:29:06:60:54:1c:a3:83:1c:
         3d:b2:4b:b5:86:25:c5:b6:a4:61:41:02:2d:e1:84:ef:6a:34:
         4e:48:38:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 03:32:00 2026 by rpki-client