Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b052c0e7-788b-47d1-8126-ea94da7ceca7/8e2963d7-fd4b-3081-b6d1-4fe12e5469e4.roa
File:                     8e2963d7-fd4b-3081-b6d1-4fe12e5469e4.roa (raw, json)
Hash identifier:          9/JwXGYueiSfpsOQ/4BVSToQFniJe+UYJVTbsu4B+p8=
Subject key identifier:   CF:B6:C8:2C:7C:72:38:FB:23:BF:83:C8:D6:5B:0A:CB:DB:52:34:8D
Certificate issuer:       /CN=b052c0e7-788b-47d1-8126-ea94da7ceca7
Certificate serial:       010D0C9F4328584CB6B71442C0AE7CB7BD92AB00
Authority key identifier: A2:CA:80:7C:4E:97:6F:F1:9F:0E:FA:60:F0:60:96:4F:A5:8B:FA:27
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b052c0e7-788b-47d1-8126-ea94da7ceca7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b052c0e7-788b-47d1-8126-ea94da7ceca7/8e2963d7-fd4b-3081-b6d1-4fe12e5469e4.roa
Signing time:             Sun 01 Feb 2026 02:00:32 +0000
ROA not before:           Sun 01 Feb 2026 02:00:32 +0000
ROA not after:            Sat 02 May 2026 01:00:32 +0000
asID:                     13335
IP address blocks:        192.103.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b052c0e7-788b-47d1-8126-ea94da7ceca7/b052c0e7-788b-47d1-8126-ea94da7ceca7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b052c0e7-788b-47d1-8126-ea94da7ceca7/b052c0e7-788b-47d1-8126-ea94da7ceca7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b052c0e7-788b-47d1-8126-ea94da7ceca7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b6:b7:14:42:c0:ae:7c:b7:bd:92:ab:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b052c0e7-788b-47d1-8126-ea94da7ceca7
        Validity
            Not Before: Feb  1 02:00:32 2026 GMT
            Not After : May  2 01:00:32 2026 GMT
        Subject: CN=5b654623-40ad-4f3e-809e-3c971dac4079
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:88:9b:eb:08:6a:1b:36:01:95:0a:63:53:62:
                    3f:90:f1:9f:1e:6d:7f:7c:06:80:4e:56:9e:80:20:
                    ec:a7:81:63:43:06:a4:36:9c:0f:a6:57:ba:8d:da:
                    ea:99:ca:e7:8a:74:c8:5a:b3:f5:8a:63:45:e5:d8:
                    1a:af:6a:c2:3b:38:25:fc:49:c2:ad:e8:cd:d3:1f:
                    ce:d6:1d:a1:6a:6d:2f:42:2d:e8:ff:85:cb:35:3b:
                    5f:64:76:89:2c:7e:33:7b:8e:15:c2:30:be:21:52:
                    9a:de:02:3e:6c:77:5a:03:dd:7a:8f:43:56:cd:85:
                    25:9c:b4:92:c6:56:0b:ac:16:f1:30:91:b8:a9:c1:
                    dd:10:47:42:82:ad:c3:07:b5:6d:92:b2:c2:e1:66:
                    59:ce:33:df:f3:23:e2:14:af:c9:17:1f:6c:a4:f6:
                    81:64:3c:01:56:dc:ec:b5:86:db:cb:3b:00:5e:ca:
                    77:bf:48:4f:2e:62:0f:7a:2a:ee:54:60:c6:78:19:
                    05:bb:60:e9:f1:7a:fb:ea:4e:cf:ed:58:9a:8e:1f:
                    0a:82:76:a7:dc:54:d9:ad:b7:e6:b7:26:3c:04:09:
                    9b:c9:4b:6c:96:26:b3:df:93:1e:a4:56:ea:9d:7c:
                    3d:6c:03:18:ec:12:3c:4a:40:08:c6:63:72:51:f0:
                    ef:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:B6:C8:2C:7C:72:38:FB:23:BF:83:C8:D6:5B:0A:CB:DB:52:34:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b052c0e7-788b-47d1-8126-ea94da7ceca7/8e2963d7-fd4b-3081-b6d1-4fe12e5469e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b052c0e7-788b-47d1-8126-ea94da7ceca7/b052c0e7-788b-47d1-8126-ea94da7ceca7.crl

            X509v3 Authority Key Identifier:
                keyid:A2:CA:80:7C:4E:97:6F:F1:9F:0E:FA:60:F0:60:96:4F:A5:8B:FA:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b052c0e7-788b-47d1-8126-ea94da7ceca7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.103.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:1b:9d:29:7d:7b:7b:2f:54:cc:a8:20:71:90:6d:01:13:c8:
         22:a5:8a:b5:1c:f2:79:01:d3:cd:e2:82:44:ba:53:71:b0:05:
         85:94:a3:14:6a:28:3f:fe:e6:49:7b:73:f6:e7:86:18:59:61:
         0c:2b:4a:a3:c9:fe:fc:c1:8c:db:c3:ec:0f:fa:b2:96:9b:72:
         f3:bf:49:2b:24:f7:fd:4d:1d:f3:7d:35:e6:80:5c:25:1b:81:
         8e:68:d1:c1:19:60:7f:72:ef:41:a4:1d:ec:c8:7a:ac:8b:8f:
         46:c6:bf:82:fe:02:0c:b6:f2:82:9b:13:bc:29:3a:73:4c:18:
         5a:f1:87:63:0c:ea:a8:a4:ae:9d:c4:b8:58:e8:d8:2c:c2:e6:
         50:dd:93:b3:7d:3a:0d:91:27:89:b6:dd:7a:38:87:de:1e:43:
         64:3e:20:1e:f3:35:03:53:b1:b4:b9:df:12:fd:32:54:17:97:
         4b:5d:a1:68:ad:7f:34:83:d0:99:d2:dc:ff:67:2d:77:16:e1:
         97:74:bd:31:99:30:45:b4:34:5d:e4:d0:f4:fe:4a:5d:f9:bf:
         9d:87:87:d9:ee:a3:9a:57:b9:6d:66:71:2f:22:cd:76:bc:5f:
         47:4f:eb:0a:5f:fb:db:95:be:d9:3d:b9:68:0c:25:9d:7c:dc:
         c5:58:cb:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:03:35 2026 by rpki-client