Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f/0aba8ec7-8f66-3b0e-b1a4-268fe0ec6e2e.roa
File:                     0aba8ec7-8f66-3b0e-b1a4-268fe0ec6e2e.roa (raw, json)
Hash identifier:          HQZApQtqMSGCAd1YboqEfkrG1joDvp1VfChGh8uIEWk=
Subject key identifier:   E2:05:23:80:57:CD:20:2A:78:32:BA:F3:57:0D:04:05:6E:A9:74:FC
Certificate issuer:       /CN=1bd97e7a-c31d-417a-bc07-1ecdb96be09f
Certificate serial:       010D0C9F4328584CE3620237198DF86AC1693000
Authority key identifier: E0:BC:46:6D:8F:5F:DC:23:84:62:42:1C:22:C8:6C:C1:EE:EB:CB:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f/0aba8ec7-8f66-3b0e-b1a4-268fe0ec6e2e.roa
Signing time:             Tue 17 Feb 2026 02:00:31 +0000
ROA not before:           Tue 17 Feb 2026 02:00:31 +0000
ROA not after:            Mon 18 May 2026 01:00:31 +0000
asID:                     2914
IP address blocks:        199.115.82.0/23 maxlen: 24
                          199.189.150.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f/1bd97e7a-c31d-417a-bc07-1ecdb96be09f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f/1bd97e7a-c31d-417a-bc07-1ecdb96be09f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 24 Feb 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e3:62:02:37:19:8d:f8:6a:c1:69:30:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bd97e7a-c31d-417a-bc07-1ecdb96be09f
        Validity
            Not Before: Feb 17 02:00:31 2026 GMT
            Not After : May 18 01:00:31 2026 GMT
        Subject: CN=fb985661-c1ba-4c81-a617-853ad0658988
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:6a:e8:a9:6b:7e:01:ea:91:0c:12:bc:9e:dd:
                    21:b5:aa:8e:fa:6e:92:aa:d4:3a:3a:86:e5:a8:09:
                    d8:23:8a:f3:1e:0f:d5:06:af:31:57:bc:59:db:04:
                    1f:0d:e4:98:dd:b7:f3:93:01:b1:6e:ae:47:ac:6b:
                    dc:78:bd:07:cd:a5:d0:b1:f2:03:a4:00:f7:b7:57:
                    2e:6e:6f:06:55:fe:bb:f9:78:69:99:06:3e:80:96:
                    ec:f1:dc:45:08:c2:fb:38:af:dc:9c:6c:a8:ff:18:
                    2c:74:c7:f6:da:ac:fc:4a:13:1a:d6:94:68:f6:32:
                    f1:28:e2:3c:1d:c4:31:56:23:75:f3:08:79:50:1c:
                    68:a4:23:32:9a:8a:c9:e0:43:5d:96:67:18:32:40:
                    8e:4c:37:8b:04:1b:ad:c6:2f:03:6d:6e:93:50:86:
                    2a:37:65:6a:39:15:dd:4d:86:bd:33:53:bb:31:d2:
                    8d:a3:45:c2:bc:60:a4:c8:37:00:48:5e:f4:99:f5:
                    d1:c2:21:3d:27:25:d9:34:60:8f:98:c3:ef:12:95:
                    ea:5b:c8:f6:ff:2e:fe:0b:28:40:60:ca:fd:f7:49:
                    7a:af:d5:8f:5e:9e:6c:f1:cc:2d:0b:a9:8e:2e:69:
                    6a:45:e6:14:91:44:d3:a7:e8:9d:fc:df:02:bc:7a:
                    26:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:05:23:80:57:CD:20:2A:78:32:BA:F3:57:0D:04:05:6E:A9:74:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f/0aba8ec7-8f66-3b0e-b1a4-268fe0ec6e2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f/1bd97e7a-c31d-417a-bc07-1ecdb96be09f.crl

            X509v3 Authority Key Identifier:
                keyid:E0:BC:46:6D:8F:5F:DC:23:84:62:42:1C:22:C8:6C:C1:EE:EB:CB:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.115.82.0/23
                  199.189.150.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:28:e3:35:18:70:82:10:cb:bb:a3:69:5e:bf:37:0e:30:03:
         67:9f:a8:b9:15:46:cf:58:18:1d:84:d4:c2:a8:dc:b4:7b:0a:
         47:3a:7e:17:b5:74:70:5e:fe:ee:06:f5:4a:b4:be:5e:57:aa:
         76:d4:62:e6:73:e0:ef:2a:11:ff:42:79:33:76:aa:6d:77:51:
         3e:24:9c:cc:40:ec:52:b7:24:7d:07:12:3b:42:70:68:97:e9:
         34:3b:1e:f9:38:aa:a3:5a:96:c1:fd:c6:48:f3:78:93:35:22:
         0d:46:8b:f3:16:07:24:1f:bd:d3:64:36:c8:69:2d:fd:57:09:
         a3:39:42:ed:b4:3f:27:46:1a:57:0d:33:da:fa:e4:21:b9:a9:
         38:c2:5e:71:51:39:60:58:8a:c1:23:9e:d1:a6:cf:67:1b:01:
         07:24:ad:3f:95:a3:49:d8:dc:16:27:19:b0:e2:da:8f:86:da:
         15:bd:de:94:23:c9:11:b5:54:fe:d0:ab:a8:4b:72:f8:bf:5e:
         34:ad:f8:73:a3:45:0d:dc:f9:97:d3:93:92:ec:c8:00:8e:9b:
         e7:4c:97:0d:ef:a9:00:c3:37:9f:66:7d:6c:d2:c1:c8:13:05:
         db:1c:c1:eb:44:be:54:d0:69:29:68:e3:01:9b:bb:c1:fc:71:
         f7:9f:a7:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 22 14:09:24 2026 by rpki-client