Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f184b6df-fca7-3523-ad93-d755ed6a9743.roa
File:                     f184b6df-fca7-3523-ad93-d755ed6a9743.roa (raw, json)
Hash identifier:          6jhTZIQOtcM67vFy1sr2Sit317iwJ4rDROOQOa7b3D0=
Subject key identifier:   D5:FE:F1:EB:4C:E1:44:30:CA:C6:B4:B7:EA:E3:2E:DF:5F:7D:78:A3
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584CE891086FA569771C75829F80
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f184b6df-fca7-3523-ad93-d755ed6a9743.roa
Signing time:             Wed 18 Feb 2026 22:34:24 +0000
ROA not before:           Wed 18 Feb 2026 22:34:24 +0000
ROA not after:            Tue 19 May 2026 21:34:24 +0000
asID:                     31898
IP address blocks:        157.137.48.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e8:91:08:6f:a5:69:77:1c:75:82:9f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Feb 18 22:34:24 2026 GMT
            Not After : May 19 21:34:24 2026 GMT
        Subject: CN=cfd798d8-5d8c-43b4-ac43-8bfc7bf1457d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:2f:32:68:89:9c:c2:f2:4f:4b:1c:01:6b:e3:
                    62:4e:49:c3:57:c7:67:cf:84:e9:3f:a6:be:d5:ec:
                    fc:d4:c4:b4:76:79:63:fb:c6:f7:fc:7b:f1:68:78:
                    43:ac:f8:66:82:cf:67:0d:a5:35:c0:be:00:a0:ae:
                    3e:6b:af:ea:12:74:4b:d5:c3:c0:e0:e6:c6:bf:39:
                    90:dd:b0:b2:34:69:37:06:7c:8f:0c:c0:02:b2:66:
                    b6:d7:4e:e1:49:ab:ce:ec:28:a2:fa:48:c2:dc:0c:
                    c2:04:35:04:74:74:19:62:45:a7:88:1b:ab:26:da:
                    14:5b:a4:75:47:84:72:ae:9f:5b:83:a5:ca:01:d9:
                    1f:6d:2a:c5:67:3c:00:00:a4:d3:95:95:29:c3:81:
                    16:65:39:1e:94:1f:ee:92:56:9d:de:e9:38:12:2a:
                    39:8c:14:cd:21:05:9a:0b:19:73:18:58:82:7e:20:
                    27:45:5d:93:5d:82:42:c1:4c:0f:1d:12:f0:22:52:
                    9d:fe:20:18:a2:cb:36:95:16:c4:ab:c7:4f:f6:f3:
                    64:c4:18:3d:b9:42:1a:b3:b6:ca:59:15:8d:52:45:
                    5a:5d:14:ae:b5:9d:1d:11:b6:35:b0:8c:2a:4a:d8:
                    6b:db:55:76:6a:ac:cd:72:0b:39:33:8d:84:56:6e:
                    fc:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:FE:F1:EB:4C:E1:44:30:CA:C6:B4:B7:EA:E3:2E:DF:5F:7D:78:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f184b6df-fca7-3523-ad93-d755ed6a9743.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.137.48.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:a3:5b:5a:e9:8a:64:06:76:ac:84:97:c8:2d:cd:05:89:00:
         06:d9:86:f1:72:e4:d2:c6:20:0d:e7:80:f0:6d:96:f7:fa:e9:
         4c:41:aa:6f:92:69:f9:53:83:b4:98:37:0d:77:5c:0f:fc:d2:
         64:e0:cc:9a:65:bf:33:36:14:36:69:b8:23:95:87:60:f6:f4:
         b0:3d:30:7b:66:42:fd:d1:3c:56:04:e1:05:a1:6e:87:12:1d:
         6c:c6:48:ed:c0:2f:49:e9:1e:93:6c:ef:d9:74:8b:70:fb:54:
         f6:31:3c:cd:ab:34:35:3f:ea:9a:6e:c1:dc:f5:64:31:84:d1:
         b5:01:58:ca:18:07:10:44:ee:2f:49:3c:2f:54:52:87:30:a6:
         af:0f:1b:73:f6:6b:8e:5a:d5:e1:bc:3e:b7:df:da:ec:f6:45:
         55:3a:2c:73:7a:a1:29:87:cc:5b:22:42:b0:bb:ed:7e:08:4f:
         96:3b:5f:b7:e3:6d:2e:fd:44:53:8f:80:4e:10:02:b8:ff:43:
         2f:a6:46:a1:38:d1:6d:95:40:cf:9c:ea:4f:a6:0c:85:31:58:
         48:9d:26:36:bc:1a:51:da:06:e5:c6:78:59:85:65:93:01:9d:
         96:5b:af:f4:c5:c1:61:45:11:49:0d:15:e4:49:b9:d2:d8:11:
         ce:e9:d3:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 03:25:49 2026 by rpki-client