Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/1b71bda0-e94c-3982-971c-1a69761fb259.roa
File:                     1b71bda0-e94c-3982-971c-1a69761fb259.roa (raw, json)
Hash identifier:          PKh0h84vdFnQzH0UAoGy6miw7dunY12zeQgi6UQbvvE=
Subject key identifier:   C8:83:F2:B1:26:6C:4D:56:32:4F:E0:69:F1:41:4A:AC:2A:12:46:15
Certificate issuer:       /CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5
Certificate serial:       010D0C9F4328584CE7F18E55D5168FECCC294960
Authority key identifier: 84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/1b71bda0-e94c-3982-971c-1a69761fb259.roa
Signing time:             Wed 18 Feb 2026 17:13:04 +0000
ROA not before:           Wed 18 Feb 2026 17:13:04 +0000
ROA not after:            Tue 19 May 2026 16:13:04 +0000
asID:                     55286
IP address blocks:        152.232.128.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e7:f1:8e:55:d5:16:8f:ec:cc:29:49:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5
        Validity
            Not Before: Feb 18 17:13:04 2026 GMT
            Not After : May 19 16:13:04 2026 GMT
        Subject: CN=3fcd5978-5346-4d22-855d-7450220a844c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:db:b6:5a:52:b0:d9:0a:3f:5e:60:bc:30:34:
                    bf:03:2f:cd:e9:c3:3b:06:cd:20:23:d3:2f:00:67:
                    93:75:5d:56:df:d6:f8:9a:c0:86:e6:0d:dc:e4:5f:
                    38:9a:29:9e:30:0c:95:bc:f9:b5:69:88:da:61:63:
                    62:b6:c9:86:8e:21:8b:5c:d4:39:d7:6b:8d:2f:76:
                    e9:51:8e:85:00:7f:90:85:4f:be:d0:48:12:2a:3a:
                    2b:f8:91:e8:39:58:2c:3e:ed:99:e3:37:b5:82:6a:
                    de:99:c2:ad:0c:f8:b9:8c:c0:07:b8:b2:93:7a:2b:
                    6e:94:2f:b1:2f:4b:c1:ae:91:71:8e:2a:98:f8:4d:
                    16:ac:a8:fc:1e:9f:ee:45:dd:35:11:90:58:df:dc:
                    a5:2f:20:65:5e:9a:9d:29:b4:73:82:df:8b:a8:e0:
                    40:e8:84:82:12:f0:8e:bd:d7:1f:f8:b8:a1:28:81:
                    6f:be:68:b9:3c:8b:dd:c0:8e:e2:66:01:e3:08:f1:
                    40:2b:40:f9:e9:db:e6:27:08:18:e6:6e:66:86:f1:
                    db:0c:28:c1:80:7e:77:0b:fc:0e:3c:c5:4a:65:2d:
                    82:77:e2:1d:14:2e:c3:d8:85:fd:89:50:70:19:30:
                    e5:f7:0a:f1:16:b3:cd:f2:b7:6d:29:2e:70:91:6c:
                    e0:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:83:F2:B1:26:6C:4D:56:32:4F:E0:69:F1:41:4A:AC:2A:12:46:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/1b71bda0-e94c-3982-971c-1a69761fb259.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl

            X509v3 Authority Key Identifier:
                keyid:84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.232.128.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:a5:9a:65:f1:87:59:ea:a3:9a:8b:1d:29:92:5c:b8:42:e0:
         0f:38:a5:f6:58:ef:94:18:52:59:1b:64:9f:ab:a7:49:f6:aa:
         db:f4:05:38:10:b7:0d:21:52:84:9c:4c:63:e8:0a:8b:92:6b:
         a5:90:3c:92:42:52:71:51:58:e4:d6:53:0e:9c:88:bd:be:59:
         e6:b8:bb:a2:ee:8e:06:96:30:26:ea:bf:39:16:53:0a:6f:bd:
         c9:89:8a:7e:1e:d7:aa:79:da:3c:43:bf:66:4c:22:e0:18:84:
         a5:71:1a:9d:23:85:3c:a9:78:f8:aa:44:16:6d:d8:ec:34:10:
         21:75:f7:3b:5c:8e:5d:61:20:9e:ab:66:7d:d7:9d:80:62:fc:
         85:3b:c5:63:b5:8c:b3:02:56:a6:4b:e7:35:c9:a3:0c:87:a9:
         40:31:62:de:4a:a8:9c:4a:f7:12:8c:23:12:18:95:cf:7e:f2:
         f0:04:3a:e6:f1:eb:bb:2a:45:47:4e:9f:d1:a9:21:5a:dd:62:
         f1:78:a8:98:7e:99:4a:be:3e:0b:07:00:d0:67:fe:60:19:23:
         2a:ef:ae:ef:36:eb:eb:86:0b:2a:8b:9c:93:75:3a:d0:7d:d1:
         9e:17:b9:dc:11:8e:eb:5a:71:fc:fe:0b:66:3c:53:8d:82:30:
         06:86:37:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 23:47:16 2026 by rpki-client