Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3aad4bd0-993b-33f8-a3a3-f21105f2f628.roa
File:                     3aad4bd0-993b-33f8-a3a3-f21105f2f628.roa (raw, json)
Hash identifier:          d3plej70Rdq1tsoRJqo9s4CKoL3PvoONnmJgHbdT5EU=
Subject key identifier:   5A:8C:6D:BF:86:E1:78:3E:A8:BE:60:C6:B2:69:8D:9B:30:8F:BF:1A
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584CD3E1C678F3977D94AE979100
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3aad4bd0-993b-33f8-a3a3-f21105f2f628.roa
Signing time:             Wed 11 Feb 2026 12:45:06 +0000
ROA not before:           Wed 11 Feb 2026 12:45:06 +0000
ROA not after:            Tue 12 May 2026 11:45:06 +0000
asID:                     20473
IP address blocks:        64.204.144.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Feb 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d3:e1:c6:78:f3:97:7d:94:ae:97:91:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Feb 11 12:45:06 2026 GMT
            Not After : May 12 11:45:06 2026 GMT
        Subject: CN=219fb1ec-b901-4694-bd80-9791ff740311
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:04:e1:86:a1:99:d1:37:cd:2f:41:a0:13:db:
                    ea:89:65:7a:6a:5e:b9:1d:bd:a2:d5:36:81:4a:0f:
                    3f:2d:29:69:d4:af:c9:9f:65:a5:db:a6:a1:42:e0:
                    05:bc:ae:c9:93:5e:af:d5:ac:50:94:cc:de:7a:05:
                    fc:30:6d:b0:0f:ae:93:45:52:71:94:66:cf:bb:33:
                    11:66:05:8e:10:51:c0:64:3f:c0:34:b6:59:f6:c9:
                    2e:c6:fd:0e:7b:3d:f3:73:f6:65:ce:bf:2b:ca:a8:
                    8b:85:44:0d:f7:c1:e9:eb:2f:d8:ea:10:fd:a5:89:
                    99:99:0b:04:99:8e:ae:ad:9a:12:92:17:9f:cf:bb:
                    e4:bf:10:f6:35:90:33:b0:2d:4f:79:a1:5f:ed:16:
                    11:ab:9d:e1:10:81:1f:d6:87:4f:5a:94:f2:85:35:
                    6d:65:30:a5:76:49:45:42:f9:fc:6f:3e:dc:48:74:
                    33:7d:a3:ef:00:3c:78:12:a5:12:17:b4:f9:a0:dc:
                    e1:36:ff:fa:d3:9b:76:d9:b2:a0:af:f1:f3:f8:ff:
                    f4:99:17:ed:75:d4:a3:ac:f0:33:79:55:85:3d:71:
                    bb:6a:bd:50:04:fb:1a:4d:1f:eb:35:bd:f3:2e:8f:
                    dc:7b:de:1a:8c:a5:10:12:fc:b0:c1:f7:b7:a5:b0:
                    57:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:8C:6D:BF:86:E1:78:3E:A8:BE:60:C6:B2:69:8D:9B:30:8F:BF:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3aad4bd0-993b-33f8-a3a3-f21105f2f628.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.204.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:65:bc:16:91:61:b2:29:d2:cb:f7:f4:9a:50:73:43:73:34:
         85:83:04:c3:4e:f0:e5:2f:5b:db:a1:a0:6b:12:2a:c3:66:a4:
         d5:09:4b:18:7e:8c:4d:ef:92:bf:e7:47:ac:95:95:64:6d:17:
         93:f6:b1:e1:e3:cd:b7:ea:0b:a8:a0:06:30:0c:ac:99:50:97:
         1f:c1:ad:57:a6:9a:26:ca:61:2e:65:82:d5:90:02:5d:49:60:
         f0:1e:b4:57:3d:dc:f8:a8:ad:27:94:6a:9a:1a:81:f2:06:64:
         eb:68:ce:08:d1:2d:05:b3:3e:82:44:f6:79:ce:a9:a0:9b:69:
         60:f1:bd:53:a4:da:11:bd:c3:01:ce:e7:69:75:42:53:51:b1:
         ae:e9:cd:e8:4b:8b:12:34:6e:88:38:37:86:be:40:70:05:3f:
         04:ca:1a:b9:b4:f7:95:0e:0c:dd:33:b7:0b:f4:bb:da:d2:7d:
         74:39:da:f9:54:3b:b9:0e:6e:1b:cf:0c:0a:35:95:8d:1c:2a:
         3a:55:8d:c4:50:28:b3:df:ca:4a:e4:76:21:08:d3:d9:b7:2b:
         dc:7c:22:1a:9d:2a:e7:91:b0:73:75:1f:63:1c:ed:3e:62:12:
         96:6a:82:ea:fb:bb:0c:28:7c:55:18:4d:63:38:9b:7b:d3:ec:
         04:8f:1c:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 22:28:44 2026 by rpki-client