Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1c784e5c-bd0e-4d16-9b7f-8fddc41c1414/bebf7928-f361-384a-ac34-db9c92606597.roa
File:                     bebf7928-f361-384a-ac34-db9c92606597.roa (raw, json)
Hash identifier:          No2JrjlHHzJS7ijfnqH8xY6JVyeUC9pQHgvRoerV+i0=
Subject key identifier:   5E:73:13:26:24:17:89:9A:69:23:B1:D3:3A:09:E3:FD:24:B4:0E:C4
Certificate issuer:       /CN=1c784e5c-bd0e-4d16-9b7f-8fddc41c1414
Certificate serial:       010D0C9F4328584CEA5CE22D1E456EA371F1A420
Authority key identifier: A4:7A:B8:9E:7C:33:7B:AC:79:92:22:2F:25:B5:96:56:E9:A7:15:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1c784e5c-bd0e-4d16-9b7f-8fddc41c1414.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1c784e5c-bd0e-4d16-9b7f-8fddc41c1414/bebf7928-f361-384a-ac34-db9c92606597.roa
Signing time:             Thu 19 Feb 2026 14:00:40 +0000
ROA not before:           Thu 19 Feb 2026 14:00:40 +0000
ROA not after:            Wed 20 May 2026 13:00:40 +0000
asID:                     23465
IP address blocks:        69.71.32.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1c784e5c-bd0e-4d16-9b7f-8fddc41c1414/1c784e5c-bd0e-4d16-9b7f-8fddc41c1414.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1c784e5c-bd0e-4d16-9b7f-8fddc41c1414/1c784e5c-bd0e-4d16-9b7f-8fddc41c1414.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1c784e5c-bd0e-4d16-9b7f-8fddc41c1414.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ea:5c:e2:2d:1e:45:6e:a3:71:f1:a4:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c784e5c-bd0e-4d16-9b7f-8fddc41c1414
        Validity
            Not Before: Feb 19 14:00:40 2026 GMT
            Not After : May 20 13:00:40 2026 GMT
        Subject: CN=38b36940-d354-441f-b421-93c2a57abee4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:dc:c9:4e:69:4b:3a:0f:d0:40:78:6a:db:97:
                    36:7f:d2:95:0c:79:07:c1:1b:fc:bf:c0:e6:d9:6d:
                    6e:04:0d:f6:3e:4a:f2:8f:3b:1e:6b:97:7e:a8:1a:
                    41:ed:48:ad:97:54:c6:33:6c:5b:5f:f8:2e:67:86:
                    b7:18:e2:0f:39:fe:0e:cc:fe:9f:42:9e:7e:8d:88:
                    f2:68:2f:ff:2b:69:df:47:4b:d8:4d:63:18:c3:30:
                    48:59:30:07:8a:88:1d:a5:f4:36:a7:24:22:a6:71:
                    83:3c:d3:c6:1b:68:02:7b:94:a8:dc:39:4d:b6:6a:
                    95:85:1d:6c:d6:5f:b8:6d:7b:9a:8b:69:62:0b:88:
                    49:79:b8:f1:17:6e:d7:d4:65:d9:b3:45:0a:1d:f4:
                    54:96:d3:6c:cc:b7:af:bd:fe:81:53:13:ec:0c:bd:
                    cf:2b:3e:b0:c6:89:dc:a9:e3:19:1f:97:4d:e3:05:
                    96:1d:89:c7:10:e3:10:13:03:5d:12:ce:1d:e4:24:
                    89:cb:a6:14:4e:7a:55:7b:ea:20:e2:93:82:6f:3e:
                    fb:31:8a:4f:69:74:1a:b8:45:9f:c8:09:fc:63:1f:
                    39:b4:3a:e1:34:bd:3a:b5:93:ec:51:a1:40:a3:ff:
                    1e:4c:75:6a:9e:83:f0:62:0b:ad:dc:6c:5d:a6:b1:
                    90:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:73:13:26:24:17:89:9A:69:23:B1:D3:3A:09:E3:FD:24:B4:0E:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1c784e5c-bd0e-4d16-9b7f-8fddc41c1414/bebf7928-f361-384a-ac34-db9c92606597.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1c784e5c-bd0e-4d16-9b7f-8fddc41c1414/1c784e5c-bd0e-4d16-9b7f-8fddc41c1414.crl

            X509v3 Authority Key Identifier:
                keyid:A4:7A:B8:9E:7C:33:7B:AC:79:92:22:2F:25:B5:96:56:E9:A7:15:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1c784e5c-bd0e-4d16-9b7f-8fddc41c1414.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.71.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:c9:47:fc:22:fb:2f:ee:a4:a2:79:c9:76:63:f8:13:9d:f3:
         e6:b7:0d:d4:2a:54:01:26:a8:c1:82:ef:a7:a0:be:8a:19:08:
         c3:b9:c1:2c:af:cb:8f:f9:07:ca:d3:b3:76:0f:fb:ed:d6:a6:
         dc:79:2b:2f:de:10:52:7f:92:a6:77:0e:6d:a2:c7:46:71:6c:
         87:72:f5:93:88:30:f0:ce:e7:a0:c1:cc:2d:3a:75:0c:19:2c:
         83:6b:25:4d:a5:5b:93:c4:a8:58:58:9a:e6:f1:77:b6:ff:6a:
         ca:3c:d2:04:21:38:a1:d7:59:ce:ec:5d:e4:26:10:0a:eb:dc:
         e5:99:47:fe:11:b1:9b:de:57:7e:db:92:82:71:69:c5:d5:61:
         6d:dc:ad:78:90:2a:de:3a:12:cd:5b:4c:42:87:04:3e:a9:09:
         2d:c3:23:0c:e7:c7:40:97:40:56:63:7e:7b:1f:ed:bc:8e:d3:
         06:cb:1c:cb:8e:aa:76:93:67:39:0c:3a:44:8a:8f:d2:72:96:
         96:9a:94:33:a3:8c:b8:ee:97:75:f8:76:d2:c3:2a:e6:83:71:
         48:55:f4:fa:90:27:f3:4d:73:7b:03:55:d0:44:18:77:35:5a:
         1f:77:4b:a4:60:68:a4:ba:53:90:fc:34:fc:00:c0:cc:f2:c6:
         4e:cf:47:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:20:10 2026 by rpki-client