Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970/6f894f95-bb5b-39d3-a4a2-ba110e6d9b0f.roa
File:                     6f894f95-bb5b-39d3-a4a2-ba110e6d9b0f.roa (raw, json)
Hash identifier:          B65ENlGAc2uM6hreEHm5D6tJ1d4J30zA5i0n7kcgNEw=
Subject key identifier:   B3:B5:92:3C:38:95:39:E5:E1:05:EE:A3:A9:B0:8D:F8:9A:1A:75:60
Certificate issuer:       /CN=0b5f2daf-7d7a-4848-bbd2-055f43ae8970
Certificate serial:       010D0C9F4328584CD13CA0B5192B3EB4D196CD80
Authority key identifier: 31:92:05:77:3C:9D:CE:89:CE:95:DE:50:97:AF:43:01:1E:56:6F:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970/6f894f95-bb5b-39d3-a4a2-ba110e6d9b0f.roa
Signing time:             Tue 10 Feb 2026 14:00:41 +0000
ROA not before:           Tue 10 Feb 2026 14:00:41 +0000
ROA not after:            Mon 11 May 2026 13:00:41 +0000
asID:                     47050
IP address blocks:        173.224.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970/0b5f2daf-7d7a-4848-bbd2-055f43ae8970.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970/0b5f2daf-7d7a-4848-bbd2-055f43ae8970.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d1:3c:a0:b5:19:2b:3e:b4:d1:96:cd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b5f2daf-7d7a-4848-bbd2-055f43ae8970
        Validity
            Not Before: Feb 10 14:00:41 2026 GMT
            Not After : May 11 13:00:41 2026 GMT
        Subject: CN=24d3189c-225b-46d4-818a-67c08b70a7f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:8f:b9:5a:b6:d2:0f:87:61:ea:9a:46:82:96:
                    76:0d:53:de:eb:89:3c:50:5d:c9:da:15:25:17:51:
                    e2:93:df:58:91:aa:51:fe:b0:69:f0:c5:a8:4f:19:
                    d9:e2:41:db:4f:32:f4:2b:73:16:f6:69:b0:94:01:
                    f4:90:0e:9e:4c:72:ff:73:b5:e8:85:7b:c5:50:5b:
                    84:f9:4d:71:13:8c:8c:00:7a:c3:be:24:ab:82:43:
                    52:30:84:bd:65:8d:f8:cd:79:c8:35:29:6a:6f:05:
                    07:8d:b9:85:fb:80:43:fe:09:19:70:08:46:88:3f:
                    56:f9:c8:05:35:05:db:89:ff:db:37:e5:f0:eb:b7:
                    f0:2b:9f:63:b5:75:de:88:50:c3:3d:38:d0:7d:68:
                    c9:8f:c2:a2:38:10:5d:61:f4:63:c5:57:f6:4e:0e:
                    6c:cb:97:79:cc:6e:4b:7d:d6:19:ed:d7:16:71:c6:
                    e2:bb:f8:fc:82:b7:e3:52:66:2f:18:5f:b8:6c:f5:
                    46:83:a9:2e:9a:e5:b4:ac:40:ba:90:ca:6d:71:a5:
                    a0:5b:43:24:9a:a1:2b:8b:01:56:fd:5f:1d:af:ff:
                    a6:3b:86:ac:9b:f7:38:2f:e0:d4:86:61:a4:2b:2e:
                    d7:e4:ae:78:45:12:27:8f:b9:04:5f:a0:78:bf:f4:
                    50:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:B5:92:3C:38:95:39:E5:E1:05:EE:A3:A9:B0:8D:F8:9A:1A:75:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970/6f894f95-bb5b-39d3-a4a2-ba110e6d9b0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970/0b5f2daf-7d7a-4848-bbd2-055f43ae8970.crl

            X509v3 Authority Key Identifier:
                keyid:31:92:05:77:3C:9D:CE:89:CE:95:DE:50:97:AF:43:01:1E:56:6F:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.224.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:b8:87:97:9b:b7:5d:2f:2a:b8:64:0c:33:c5:e9:b5:e3:c0:
         22:a4:2e:7c:ce:89:ab:01:25:fb:72:ba:9b:87:c1:c3:b6:06:
         da:1b:06:f8:df:eb:8e:e1:10:09:3b:bd:86:7d:b6:5b:c5:15:
         73:68:84:35:93:16:09:fe:23:52:9b:2d:d1:c5:db:d6:cd:89:
         c5:b4:a2:19:f1:58:73:5d:e5:ee:52:71:4d:10:d5:f2:d8:8d:
         fb:f4:95:6e:13:cd:95:a7:82:ff:81:df:30:b7:96:2c:9a:a4:
         51:8b:6c:65:06:56:c9:5a:41:3c:83:7f:c0:70:26:c5:cc:3e:
         3c:22:73:40:f8:88:04:e4:e2:14:eb:f1:99:ca:e9:d7:0b:ac:
         89:a8:20:88:1b:bc:e3:50:f5:67:89:74:e6:5a:88:93:5a:18:
         11:55:c9:2c:a6:53:e6:80:1a:f8:fa:0e:1e:39:e0:b7:90:4d:
         11:a1:4c:e0:36:fd:bc:6b:01:59:e0:9d:01:69:b2:99:ee:0b:
         65:b6:fd:c1:b1:f0:0e:62:2c:7d:0d:8d:a0:bb:5b:33:c7:77:
         ba:77:98:fd:44:65:fd:d6:58:92:e2:15:25:48:47:c5:16:fe:
         b2:92:cc:12:ae:68:17:57:18:e9:af:e8:86:4a:d6:77:91:7e:
         77:f0:3e:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:44:00 2026 by rpki-client