Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a7aa98c8-5315-3116-a00d-5e1f1b63dcf2.roa
File:                     a7aa98c8-5315-3116-a00d-5e1f1b63dcf2.roa (raw, json)
Hash identifier:          C140GKcYvQagDDI5RW4kc1UbUK0tQZ8gpbLA/p4hrvo=
Subject key identifier:   6B:62:B7:4C:57:5C:29:9C:10:F6:7A:46:F3:A1:12:EE:AC:2A:0C:58
Certificate issuer:       /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial:       010D0C9F4328584CD99CDB4255541007AA2DCF00
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a7aa98c8-5315-3116-a00d-5e1f1b63dcf2.roa
Signing time:             Fri 13 Feb 2026 14:00:41 +0000
ROA not before:           Fri 13 Feb 2026 14:00:41 +0000
ROA not after:            Thu 14 May 2026 13:00:41 +0000
asID:                     31898
IP address blocks:        173.199.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Feb 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d9:9c:db:42:55:54:10:07:aa:2d:cf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
        Validity
            Not Before: Feb 13 14:00:41 2026 GMT
            Not After : May 14 13:00:41 2026 GMT
        Subject: CN=b02d3e63-88bb-49c2-a3c8-8c23379a7810
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:9e:2b:ba:f8:64:55:96:54:b0:04:20:b6:51:
                    18:c3:28:dc:b3:15:29:44:5c:77:36:41:3f:9d:12:
                    d9:ed:30:9e:ae:cb:61:d7:c8:a1:ee:64:3b:fa:de:
                    33:fd:d3:d7:71:75:0d:a2:4b:35:d1:11:d9:d3:53:
                    59:11:a8:22:58:be:b9:45:0b:3c:f5:08:ca:25:78:
                    80:e1:8a:46:0a:78:f8:0d:9b:b1:56:da:3e:47:24:
                    8e:bd:3c:26:8c:42:f0:c3:e5:18:19:0c:1a:8e:e5:
                    47:25:46:c9:fc:85:26:aa:ed:9e:8e:6c:52:fe:a3:
                    5c:a9:b0:07:5d:05:54:8a:fc:85:29:ba:82:09:56:
                    31:c2:7b:da:28:60:54:50:d6:a4:a6:65:c9:80:14:
                    c4:6f:c5:78:25:87:b1:71:be:12:de:28:9f:9c:54:
                    38:0c:cb:0d:1c:07:96:64:27:7e:45:b4:29:4f:b9:
                    64:17:af:53:8e:8a:91:8a:33:f5:09:82:3e:95:89:
                    09:a4:e4:24:f2:d4:91:12:cf:99:d0:74:7d:de:ec:
                    8f:8d:95:54:ad:2d:02:b8:f9:dd:a9:02:af:99:30:
                    a5:91:42:6f:9b:fc:01:f3:38:57:87:77:fe:cf:40:
                    45:43:4b:fb:53:77:07:e1:55:70:f5:02:3b:ac:1e:
                    80:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:62:B7:4C:57:5C:29:9C:10:F6:7A:46:F3:A1:12:EE:AC:2A:0C:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a7aa98c8-5315-3116-a00d-5e1f1b63dcf2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl

            X509v3 Authority Key Identifier:
                keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.199.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:db:db:6b:62:06:fa:2e:59:9d:8f:6c:c8:11:53:c9:7a:7f:
         b7:11:ba:73:cc:3f:fe:07:4d:2c:08:36:29:01:c4:db:5c:54:
         1f:8f:39:de:b6:f2:23:b3:16:b0:24:b9:83:25:77:f2:4e:8b:
         bc:b3:7f:00:8b:e5:68:ca:25:3b:e0:0e:90:68:dc:f2:78:e3:
         81:0e:5b:9c:fd:c8:1b:15:12:d9:44:ce:76:50:5b:16:98:d4:
         2c:04:41:51:27:80:26:b7:48:92:16:7c:10:97:5a:09:9d:98:
         5d:0a:bb:ab:47:e0:8d:b1:80:d6:94:c5:d1:f5:b0:16:94:1e:
         65:95:af:a0:16:be:f2:84:0e:c5:0d:72:65:0b:18:50:f7:1b:
         57:56:7c:a5:2b:85:90:9c:76:f9:22:46:e5:19:0c:1a:1b:79:
         ce:03:58:0e:93:f6:eb:aa:14:c6:4d:f8:4c:1c:88:81:03:11:
         c3:42:51:0e:33:39:66:13:c7:86:2b:dd:fc:f9:a2:2f:4f:c4:
         08:02:41:39:18:e0:32:69:da:50:df:db:e9:f2:ee:4f:a5:d9:
         83:1d:71:0a:96:61:f4:b8:54:59:55:ea:57:eb:1c:46:ce:dd:
         b9:f0:10:26:3a:53:d2:07:42:5b:1d:ed:66:1b:81:31:03:3e:
         a2:42:20:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 03:31:52 2026 by rpki-client