Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/fea257b8-f157-47d0-8513-af66a6301a81/3db547b6-b009-3021-9a6b-10036d835b7e.roa
File:                     3db547b6-b009-3021-9a6b-10036d835b7e.roa (raw, json)
Hash identifier:          KWFkr+ZUN0Xbo7yLA0rdrsIYlfI4VoXDjdF1GW/fUfU=
Subject key identifier:   87:6D:66:61:A1:6E:25:56:64:D7:1C:D3:4F:F9:74:C9:8B:5A:F3:26
Certificate issuer:       /CN=fea257b8-f157-47d0-8513-af66a6301a81
Certificate serial:       010D0C9F4328584CB0405EA0D9233607615B3C80
Authority key identifier: 78:17:52:93:4F:2E:78:74:AB:27:0D:E2:A8:27:4A:7D:E5:C2:87:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/fea257b8-f157-47d0-8513-af66a6301a81.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/fea257b8-f157-47d0-8513-af66a6301a81/3db547b6-b009-3021-9a6b-10036d835b7e.roa
Signing time:             Thu 29 Jan 2026 18:26:36 +0000
ROA not before:           Thu 29 Jan 2026 18:26:36 +0000
ROA not after:            Wed 29 Apr 2026 17:26:36 +0000
asID:                     26375
IP address blocks:        162.211.52.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/fea257b8-f157-47d0-8513-af66a6301a81/fea257b8-f157-47d0-8513-af66a6301a81.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/fea257b8-f157-47d0-8513-af66a6301a81/fea257b8-f157-47d0-8513-af66a6301a81.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/fea257b8-f157-47d0-8513-af66a6301a81.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b0:40:5e:a0:d9:23:36:07:61:5b:3c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fea257b8-f157-47d0-8513-af66a6301a81
        Validity
            Not Before: Jan 29 18:26:36 2026 GMT
            Not After : Apr 29 17:26:36 2026 GMT
        Subject: CN=6a7f367d-c30d-40aa-8340-250f1f176a51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:80:ec:14:f7:60:25:36:f4:26:9d:fd:da:a7:
                    9b:92:ba:8a:c4:18:f7:a9:bf:1e:2e:0c:b9:b2:71:
                    34:c3:58:60:0f:8a:65:d9:0c:70:b0:c6:b4:68:8f:
                    30:f9:37:88:d4:0e:c6:15:0f:ec:35:f2:8b:3d:a3:
                    8f:ed:92:92:6d:c3:cd:34:e2:16:27:b1:4c:8b:56:
                    50:fe:83:91:85:14:08:b4:ef:a7:28:9f:88:85:08:
                    26:27:16:ce:dd:af:05:90:1d:72:65:bb:d0:6e:df:
                    24:48:bd:e0:5e:a3:5b:93:ae:92:4b:db:10:1b:7e:
                    ff:c2:44:47:e3:04:9e:3d:9c:41:96:f0:27:f6:da:
                    c5:9d:9f:89:f7:b4:27:b3:4b:f8:06:47:5e:06:3d:
                    76:a4:86:94:9b:e1:1c:de:34:59:4c:30:9d:65:f6:
                    c7:90:e7:54:9b:ea:bf:e6:0e:20:fb:55:1f:9a:34:
                    16:fd:8e:c1:41:88:79:28:3c:ce:0a:67:94:ab:ae:
                    93:67:7d:95:98:85:a9:f1:8e:d5:bf:6f:63:7f:a7:
                    cb:7d:82:6a:18:e5:c3:ed:bf:87:f3:43:14:c7:06:
                    15:21:df:51:4b:30:06:2c:e3:32:eb:05:38:06:6c:
                    a1:93:b5:4c:b9:3d:98:1b:66:2a:95:66:04:66:42:
                    34:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:6D:66:61:A1:6E:25:56:64:D7:1C:D3:4F:F9:74:C9:8B:5A:F3:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/fea257b8-f157-47d0-8513-af66a6301a81/3db547b6-b009-3021-9a6b-10036d835b7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/fea257b8-f157-47d0-8513-af66a6301a81/fea257b8-f157-47d0-8513-af66a6301a81.crl

            X509v3 Authority Key Identifier:
                keyid:78:17:52:93:4F:2E:78:74:AB:27:0D:E2:A8:27:4A:7D:E5:C2:87:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/fea257b8-f157-47d0-8513-af66a6301a81.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.211.52.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:c7:7b:61:f7:73:78:d3:68:54:65:ae:5d:5f:f4:7a:40:7d:
         85:6f:ea:34:f4:ea:01:47:bd:78:38:0b:91:45:b3:9d:47:37:
         ee:7d:ac:4c:a6:8e:65:92:85:b8:d1:5f:b3:ed:0e:cc:77:35:
         da:eb:c0:9a:bc:0d:7b:3b:bc:d3:e4:ae:c2:80:ff:4c:22:3e:
         d0:7e:c7:bc:e5:7e:34:2c:0f:7e:55:d0:ac:ca:4f:df:10:a6:
         a0:39:bf:02:82:1d:09:bd:d8:63:38:b5:af:17:ec:f9:80:16:
         e4:29:89:ec:50:49:e9:36:4e:12:79:a8:de:ef:c3:7c:2c:8c:
         03:e7:66:8c:be:3b:12:e4:c9:4c:60:a5:65:71:f5:5c:12:cc:
         42:84:d9:77:37:88:af:e6:b0:76:02:f4:50:bc:de:89:30:99:
         1e:1e:c4:78:17:33:9d:b2:fe:06:7a:0d:56:bf:51:88:69:41:
         fc:02:8a:9d:28:18:d6:65:84:26:17:cf:0b:60:1c:09:7d:a3:
         f5:ea:3c:80:bd:f4:32:6a:43:c6:c6:99:6d:00:b1:87:19:48:
         6c:35:27:5f:0f:d8:c9:5b:88:66:b6:d1:24:50:17:11:40:82:
         27:9a:cb:3d:62:44:a5:cb:ac:9b:a5:db:3d:9a:db:d3:67:1e:
         7e:14:75:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 12:36:22 2026 by rpki-client