Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b23ce072-5558-3c62-adb3-b4cef504a838.roa
File:                     b23ce072-5558-3c62-adb3-b4cef504a838.roa (raw, json)
Hash identifier:          1ablIxKqf/GSGReg5w3HXDhs2F/JcXeu4uxR5vUOZwo=
Subject key identifier:   BC:92:D5:64:52:B9:EA:56:40:10:5A:F5:F8:0B:98:19:9E:23:9A:28
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584CB81C8F6693F0F68770C5E6C0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b23ce072-5558-3c62-adb3-b4cef504a838.roa
Signing time:             Sun 01 Feb 2026 14:00:40 +0000
ROA not before:           Sun 01 Feb 2026 14:00:40 +0000
ROA not after:            Sat 02 May 2026 13:00:40 +0000
asID:                     6939
IP address blocks:        216.66.64.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Feb 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b8:1c:8f:66:93:f0:f6:87:70:c5:e6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Feb  1 14:00:40 2026 GMT
            Not After : May  2 13:00:40 2026 GMT
        Subject: CN=94f27daf-e4b4-48a5-8e04-48edae5ecbd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e0:33:bb:05:11:11:77:77:a1:95:43:04:e7:
                    42:a4:c6:d6:61:b4:50:97:01:8f:b9:5b:ff:b4:fe:
                    38:8b:7a:33:ac:af:b0:87:0f:7b:dd:62:b6:49:c2:
                    c6:3e:3e:6f:cb:62:79:81:a4:b8:67:bb:ae:e4:e1:
                    89:15:57:55:07:b2:69:35:fd:13:eb:da:79:1c:f9:
                    eb:58:9b:b7:de:a7:50:14:2c:a4:15:a1:ac:ab:1c:
                    2e:21:a2:be:af:8e:61:70:e0:f1:ad:75:a3:72:8f:
                    84:71:97:49:c9:2a:9d:41:db:f2:e4:1f:7c:99:a2:
                    14:66:55:f5:92:35:94:a8:75:6c:7a:0e:19:e4:aa:
                    a2:5a:86:a5:4e:b2:32:f7:cb:bf:56:2f:2e:5d:9a:
                    27:f9:4a:cc:a1:ed:eb:a7:98:ff:fc:bb:53:a0:ad:
                    03:06:ec:96:a5:0f:5f:15:92:96:1d:c0:c3:d8:52:
                    24:00:56:08:fa:2e:72:c4:47:ca:e2:7b:71:65:98:
                    de:00:69:84:35:bf:cb:8e:58:42:8e:bf:00:5e:a7:
                    80:13:a1:e5:8e:c5:24:bd:d8:12:8d:96:09:13:29:
                    2b:29:ed:ef:97:ba:c2:12:76:0d:65:55:af:0e:55:
                    5a:4e:cd:12:d1:ee:7b:b7:4a:b7:fd:bc:db:c7:13:
                    7d:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:92:D5:64:52:B9:EA:56:40:10:5A:F5:F8:0B:98:19:9E:23:9A:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b23ce072-5558-3c62-adb3-b4cef504a838.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.66.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:21:22:12:b0:78:a2:f3:a6:d0:7e:30:d1:03:87:90:48:34:
         c0:07:c4:f0:43:87:4b:11:98:23:83:09:22:29:3a:74:20:72:
         ca:c8:71:ab:f6:d1:4b:72:60:b6:82:3f:64:bf:14:4a:34:f2:
         65:5b:63:6a:05:06:ab:1f:57:4e:0b:2d:e4:81:88:11:af:4e:
         0c:2e:04:0a:01:f8:a8:cf:f9:d1:dd:d4:17:91:f6:af:0d:f4:
         38:76:0c:c0:e0:e1:b5:8a:a9:54:18:8d:65:5e:d9:c3:51:71:
         86:46:ea:0c:b9:64:29:67:c8:58:d3:b4:62:80:27:87:6f:54:
         d4:53:c3:4c:76:5b:83:39:a2:99:0c:6c:c5:5f:ad:6e:01:63:
         86:38:21:00:17:ed:29:7c:25:a1:57:f5:c0:be:84:79:7b:7d:
         19:77:68:41:56:fa:f0:2c:bf:8a:68:ea:1c:77:86:85:cb:01:
         33:2a:f6:b9:94:5f:e8:2d:bf:21:a0:f8:75:21:1a:c2:c5:0d:
         c5:76:9b:2a:e9:33:7c:cd:3b:d5:15:7d:a3:2f:5a:58:66:0a:
         15:d1:b7:44:2c:eb:da:bb:96:75:ff:5c:03:1e:25:a4:b5:5b:
         77:93:97:13:36:4c:7a:88:9c:2a:e3:e9:6b:6c:f9:a4:46:53:
         63:a5:41:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 17:58:25 2026 by rpki-client