Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/756f5909-5a1f-37e4-a522-6147209a29f3.roa
File:                     756f5909-5a1f-37e4-a522-6147209a29f3.roa (raw, json)
Hash identifier:          iPQwCzcIETlFygZX0tvlEFftw530HiduleHRjl6w8CE=
Subject key identifier:   7D:6E:C6:7B:2D:CD:85:1E:B5:40:3E:82:85:F6:29:FB:50:79:3A:02
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584CAE5734A60B43055AD7286E80
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/756f5909-5a1f-37e4-a522-6147209a29f3.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     8987
IP address blocks:        170.85.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:57:34:a6:0b:43:05:5a:d7:28:6e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=d8b791f8-9f91-4b91-8e52-ad6314c50d09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:77:11:af:73:ca:c7:d1:12:d9:e0:08:d1:2c:
                    bd:c9:ec:42:e9:84:0c:39:11:81:ab:dc:f5:2a:94:
                    68:3a:5a:67:10:59:48:3f:53:56:eb:ad:5a:72:35:
                    d9:83:82:d5:25:d7:7a:5b:11:c2:9a:86:44:59:73:
                    07:3a:9e:8d:11:37:41:ed:0a:41:e9:94:f2:c9:7a:
                    f4:d0:5e:52:41:b0:8e:7c:20:6e:3e:3f:8d:68:6b:
                    0c:8b:f0:f2:d1:4f:10:96:5a:c8:a9:61:c9:a1:be:
                    a0:7c:bc:3f:7e:8f:a8:87:ac:42:26:08:54:b3:c3:
                    e3:fc:f4:9e:eb:90:c9:2c:41:a8:35:84:54:23:d3:
                    0d:e9:7d:0f:97:d5:ec:c6:d8:2f:b7:a6:b6:be:83:
                    a7:22:ce:91:55:a9:8c:ef:93:b2:3d:0c:3a:38:60:
                    21:2e:5e:6b:3e:c2:d9:a9:52:6c:d2:8d:33:09:fe:
                    19:92:4b:25:ba:2a:3f:8e:4f:49:86:65:5e:96:be:
                    84:bd:ee:08:d7:52:e9:0c:ea:ca:f6:e2:9f:82:39:
                    18:51:47:b8:65:02:64:5c:9c:e7:51:07:6c:ad:f5:
                    fd:da:b1:7c:f9:b7:4a:6b:32:3c:7a:5b:d9:aa:58:
                    27:34:f6:0a:4e:61:35:16:b0:3a:10:e7:f3:c1:8a:
                    26:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:6E:C6:7B:2D:CD:85:1E:B5:40:3E:82:85:F6:29:FB:50:79:3A:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/756f5909-5a1f-37e4-a522-6147209a29f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.85.49.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:9d:9f:b3:88:50:07:26:07:7e:f5:6d:5f:3b:1b:06:fe:de:
         92:87:ce:da:32:8c:e9:2c:0c:2b:ce:bd:70:9d:f6:41:40:ee:
         29:f4:e2:d8:db:73:8f:40:f3:cf:d3:b9:01:ad:d3:4e:c4:12:
         93:56:f5:35:03:43:dc:03:c5:cf:fc:08:7b:06:74:ca:3b:e0:
         33:e1:90:58:bc:4a:62:52:31:cb:1f:a8:89:35:8f:42:ad:95:
         1b:29:34:49:4d:3a:21:04:f6:66:1d:5d:2d:8f:37:3d:09:fe:
         6e:6d:e2:69:79:46:55:56:ce:21:a5:06:d3:7e:dd:35:2e:86:
         b4:d4:d7:5b:ee:02:ef:22:7f:b8:64:82:09:1e:ad:aa:4a:04:
         0e:72:51:38:b1:66:d8:f0:aa:5d:37:23:6b:1d:60:15:d2:cf:
         11:dc:42:0e:74:d9:e3:11:cd:01:af:45:c7:0f:46:ee:38:69:
         96:1b:58:0e:d7:92:97:ba:73:4a:e6:11:b8:68:07:72:f2:29:
         f3:92:e1:55:a0:85:77:95:6c:0a:91:19:cd:b7:e1:e9:86:91:
         e3:cf:d2:c9:8d:c4:84:a4:00:db:0f:6d:18:1b:c2:b1:93:b2:
         0f:0c:c0:47:7f:54:24:15:36:e1:bc:d4:59:64:e3:1f:36:6a:
         a1:ac:18:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:51:40 2026 by rpki-client