Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/2473d6ba-3fb9-3582-8ccc-3c19554cff7b.roa
File:                     2473d6ba-3fb9-3582-8ccc-3c19554cff7b.roa (raw, json)
Hash identifier:          156FZS524Eh7eybjA+K4cV0yH4OcRWSH3edSMFhuQNY=
Subject key identifier:   78:60:11:40:B2:65:A4:B6:54:38:C0:8F:A3:2B:55:98:4A:A9:F9:36
Certificate issuer:       /CN=966830a4-0e6f-49a1-9823-af2ae92ac7f2
Certificate serial:       010D0C9F4328584CE1FCBDE5B919681D1301F180
Authority key identifier: DC:5F:4D:B6:AA:A1:18:41:1D:62:8B:AC:74:A8:80:61:BF:05:14:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/2473d6ba-3fb9-3582-8ccc-3c19554cff7b.roa
Signing time:             Mon 16 Feb 2026 14:00:40 +0000
ROA not before:           Mon 16 Feb 2026 14:00:40 +0000
ROA not after:            Sun 17 May 2026 13:00:40 +0000
asID:                     32329
IP address blocks:        162.218.224.0/22 maxlen: 24
                          164.152.136.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/966830a4-0e6f-49a1-9823-af2ae92ac7f2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/966830a4-0e6f-49a1-9823-af2ae92ac7f2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Feb 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e1:fc:bd:e5:b9:19:68:1d:13:01:f1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=966830a4-0e6f-49a1-9823-af2ae92ac7f2
        Validity
            Not Before: Feb 16 14:00:40 2026 GMT
            Not After : May 17 13:00:40 2026 GMT
        Subject: CN=e2dd2bc4-7af0-457f-8bcf-77af002ebbc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:e0:72:10:ed:49:76:76:d3:2a:9f:b2:6d:17:
                    df:07:21:04:b4:8b:1f:4a:32:48:de:8b:e4:bf:2c:
                    40:60:0e:7e:3e:0d:72:4a:4a:73:29:ac:9d:33:6d:
                    b5:6c:20:07:24:c9:3b:00:b2:65:93:30:e9:d4:f0:
                    80:38:57:95:6d:58:25:78:b3:52:b7:1b:9e:b4:f8:
                    38:e5:55:d2:c6:93:ce:ce:c7:67:f4:0c:08:98:94:
                    80:2b:23:6b:a1:04:ab:74:74:73:91:7b:07:53:02:
                    44:5c:b3:ee:bb:72:5d:ac:c8:b9:08:3f:fe:03:1c:
                    4f:df:05:ea:ad:7c:d0:b9:39:d5:26:56:d9:1c:cd:
                    7b:f7:96:31:8d:2c:1f:22:95:09:ca:8a:9b:41:16:
                    d7:a5:cb:dc:84:06:f3:8c:55:00:cf:31:20:c7:fb:
                    7f:90:98:eb:84:28:a9:48:0e:6e:10:ae:91:d7:3a:
                    88:59:70:88:af:e1:d8:ef:b7:80:33:48:7d:79:db:
                    a7:d4:e5:7f:69:04:77:03:28:5d:ad:7c:55:84:f0:
                    28:b0:e4:6d:ce:a4:87:31:a0:4e:e4:fe:2a:a6:78:
                    7e:80:b3:d4:d4:fe:bf:ab:65:70:35:ba:ac:0d:d7:
                    00:8c:c3:bf:8f:1b:85:e3:62:df:6f:1c:6a:7b:75:
                    32:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:60:11:40:B2:65:A4:B6:54:38:C0:8F:A3:2B:55:98:4A:A9:F9:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/2473d6ba-3fb9-3582-8ccc-3c19554cff7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/966830a4-0e6f-49a1-9823-af2ae92ac7f2.crl

            X509v3 Authority Key Identifier:
                keyid:DC:5F:4D:B6:AA:A1:18:41:1D:62:8B:AC:74:A8:80:61:BF:05:14:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.218.224.0/22
                  164.152.136.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:46:3d:92:42:e8:3f:15:90:bb:56:4d:2b:b6:a1:01:85:a3:
         af:b2:bc:db:f0:a8:27:7f:67:6e:36:e5:44:ab:e0:79:82:aa:
         e2:0d:33:c4:a2:ed:82:a1:eb:21:30:ec:63:5d:45:24:ff:11:
         23:ce:79:b4:5f:6e:36:d4:13:4b:99:8b:9d:df:27:2e:80:66:
         47:3e:59:ee:75:36:ad:d8:b3:b9:4e:72:a8:cf:b2:af:19:a1:
         16:cf:c6:5f:fd:47:25:1d:c0:fe:16:64:55:1c:ca:4f:2f:78:
         6c:b4:7a:a7:f8:ff:1a:17:85:db:74:45:b0:2a:60:27:6a:f2:
         ac:a7:dc:80:69:6f:34:aa:26:71:42:e0:21:3f:4a:62:56:40:
         6e:6c:4b:56:09:db:23:d7:71:0b:55:e0:0f:ef:8c:e6:89:e8:
         02:a4:c1:dc:23:18:e7:8b:eb:6a:af:72:0e:f3:1b:4e:29:2f:
         4a:be:19:1c:f4:36:bf:fb:b3:38:8c:28:9f:84:50:0a:7d:47:
         a3:c5:31:fe:0e:65:a2:36:a2:88:52:76:f9:23:29:ba:0b:ea:
         92:df:0a:14:d0:9f:c5:0b:dd:c7:75:6c:5a:99:28:39:74:eb:
         2b:7a:2d:60:8c:99:aa:66:0e:2c:f8:04:b8:72:0b:ae:61:aa:
         97:4e:34:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 22 22:02:29 2026 by rpki-client