Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/434e23e8-27f1-3dc8-9a8a-f527e7384e0e.roa
File:                     434e23e8-27f1-3dc8-9a8a-f527e7384e0e.roa (raw, json)
Hash identifier:          +g57/8eOwMhPPIp6Qx79fUoVXyHTYX8IYwvFnL54rC4=
Subject key identifier:   12:3B:6D:C5:32:1F:22:F5:3B:3A:F6:29:05:12:92:5F:77:0A:B8:06
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584CF5B298D2D4C85FB2EED02F80
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/434e23e8-27f1-3dc8-9a8a-f527e7384e0e.roa
Signing time:             Mon 23 Feb 2026 15:27:32 +0000
ROA not before:           Mon 23 Feb 2026 15:27:32 +0000
ROA not after:            Sun 24 May 2026 14:27:32 +0000
asID:                     5650
IP address blocks:        107.158.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Feb 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f5:b2:98:d2:d4:c8:5f:b2:ee:d0:2f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Feb 23 15:27:32 2026 GMT
            Not After : May 24 14:27:32 2026 GMT
        Subject: CN=5a4479ec-2045-4d9c-8ad5-3144003ba99c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:9d:aa:a8:2e:a3:dc:26:eb:b0:ae:4c:31:23:
                    63:c3:8d:e7:bc:a1:1a:1d:a6:1a:0a:ee:e1:3a:37:
                    4d:f0:c3:e0:d6:fd:e2:ba:e7:c8:a6:9a:3d:0b:76:
                    74:f5:bd:d3:0d:bb:81:29:c8:63:52:dc:d1:b4:d2:
                    20:1c:95:49:00:ca:fa:13:03:ce:49:6a:45:e5:91:
                    78:c8:53:a7:28:f2:99:6b:56:d1:f4:47:af:76:c8:
                    5f:9b:e2:68:8d:58:7f:ab:5a:79:19:5b:18:6a:f0:
                    c9:9a:09:9d:b8:7f:1e:5c:06:e3:3b:19:94:ba:b4:
                    18:37:fe:f7:4b:5c:79:e5:4b:78:af:0c:71:2d:f3:
                    b2:b3:8b:3e:56:82:6d:62:43:de:f4:d6:f0:f5:9d:
                    ac:ba:c0:f5:2a:c5:5c:66:59:2c:d2:30:32:7e:9f:
                    3d:0a:19:42:1d:e9:3c:0f:72:04:32:c3:d8:e9:0a:
                    42:8b:f3:b1:e2:fa:46:a3:86:b4:42:77:7c:30:43:
                    6f:a4:39:ef:49:15:df:1d:24:0a:5a:81:ea:61:ac:
                    9a:f8:86:2c:16:bc:e0:41:49:27:75:b6:02:d1:83:
                    26:e3:16:f2:d7:67:15:0d:b0:dd:d1:29:ee:29:44:
                    23:ca:b7:e4:33:bc:e6:49:7a:f2:fa:25:32:14:83:
                    6f:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:3B:6D:C5:32:1F:22:F5:3B:3A:F6:29:05:12:92:5F:77:0A:B8:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/434e23e8-27f1-3dc8-9a8a-f527e7384e0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.158.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:5f:26:fb:a3:ac:76:41:88:30:9c:8b:ff:ab:23:86:b9:c3:
         89:ce:b3:f5:90:99:56:32:d1:2c:be:ea:df:64:05:ff:89:c8:
         3b:71:3e:0e:d0:f9:76:f6:4c:98:21:fe:f4:00:8a:71:8c:bb:
         03:13:d6:53:0d:39:17:1f:50:20:6c:85:a0:88:02:cd:44:38:
         b4:53:9e:17:6f:08:3d:23:75:4c:80:5b:30:31:31:ea:e7:d5:
         94:56:ec:22:7c:ec:7b:b1:28:2d:a8:d6:23:e3:5c:d8:26:5e:
         f7:7a:5b:c2:69:1a:84:70:ad:0f:55:51:a6:64:83:12:5e:de:
         ca:59:57:eb:3a:e2:88:1a:5f:bc:93:c9:1a:67:3d:68:55:2f:
         d4:a2:6c:e5:99:0d:f7:c3:3f:1c:74:e7:8b:ab:13:7a:dd:76:
         68:53:e7:26:b0:30:58:4c:d3:4a:20:3a:52:81:8c:93:9a:fe:
         0c:45:8a:68:7d:9d:bf:6f:43:a4:ed:b4:36:3d:c3:2c:70:40:
         82:7f:18:5a:23:33:f5:92:1b:4e:c8:b1:46:36:cd:f1:70:3d:
         77:ae:60:3b:36:77:a8:b8:a1:68:d7:db:e4:c1:31:45:09:8d:
         9e:00:ae:db:3c:28:d3:b8:80:f9:27:bc:9c:c2:6a:27:61:3c:
         7e:06:16:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 18:39:48 2026 by rpki-client