Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/bd7cd31f-4cd2-363f-94c4-c5e5d84b2170.roa
File:                     bd7cd31f-4cd2-363f-94c4-c5e5d84b2170.roa (raw, json)
Hash identifier:          +6AJXpLBY9VM5h+I6g/NFw2cRzAZriatrILc+Nv87Eg=
Subject key identifier:   0B:90:DB:10:C7:41:A8:8E:B6:13:B5:D9:45:54:E6:FF:D3:5A:A9:97
Certificate issuer:       /CN=253c1f46-e2ad-4547-8b1c-5935addeddb5
Certificate serial:       010D0C9F4328584CF2BCE055191E8F69817178A0
Authority key identifier: 80:1D:43:D8:F7:17:16:B0:69:AB:08:47:B2:A9:15:13:40:32:69:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/bd7cd31f-4cd2-363f-94c4-c5e5d84b2170.roa
Signing time:             Sun 22 Feb 2026 14:00:41 +0000
ROA not before:           Sun 22 Feb 2026 14:00:41 +0000
ROA not after:            Sat 23 May 2026 13:00:41 +0000
asID:                     13335
IP address blocks:        173.0.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/253c1f46-e2ad-4547-8b1c-5935addeddb5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/253c1f46-e2ad-4547-8b1c-5935addeddb5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f2:bc:e0:55:19:1e:8f:69:81:71:78:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=253c1f46-e2ad-4547-8b1c-5935addeddb5
        Validity
            Not Before: Feb 22 14:00:41 2026 GMT
            Not After : May 23 13:00:41 2026 GMT
        Subject: CN=e79f0de0-18dd-4414-a9b5-ae371bb9deca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:c2:9f:47:12:ac:b2:2f:a6:e0:6e:1e:b7:7d:
                    5f:52:92:3a:76:97:48:fd:db:83:c3:ba:6d:ca:f8:
                    10:e5:dd:05:48:6f:1f:00:c0:bf:20:43:0a:e6:d7:
                    1f:17:e0:a1:70:e7:5e:de:16:5f:da:aa:0c:a6:53:
                    6b:82:ec:fc:62:47:5c:49:6d:ce:f7:81:ec:9e:ca:
                    b3:67:72:c1:b5:9f:9e:57:05:fe:ca:7c:dd:a3:55:
                    af:bd:16:66:ac:89:e5:c8:33:3b:af:b6:38:8b:2d:
                    8b:cf:d3:b6:43:96:3a:01:2c:ef:a8:b0:98:1c:90:
                    54:6d:bb:31:eb:73:28:58:c4:1e:6b:aa:d9:11:45:
                    6c:14:2d:bf:39:94:83:a3:e2:c1:4d:bd:47:b9:ce:
                    f5:f3:8a:a2:ae:2d:05:ac:f5:be:cb:86:12:8b:89:
                    c7:6b:60:9c:16:21:81:ff:1d:a8:f7:54:8b:84:b6:
                    96:90:81:d4:cb:3c:1e:1d:7f:5e:82:db:77:1b:32:
                    f2:79:f2:08:ac:2a:fd:77:d2:b7:10:9c:28:1a:75:
                    37:40:c8:a1:f4:71:0e:38:5c:ad:8c:1b:80:0b:82:
                    46:16:3a:e0:eb:3e:da:b0:07:f7:60:5f:a7:ac:a7:
                    42:8e:67:6b:6f:0f:44:97:db:16:a4:34:a1:16:38:
                    bc:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:90:DB:10:C7:41:A8:8E:B6:13:B5:D9:45:54:E6:FF:D3:5A:A9:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/bd7cd31f-4cd2-363f-94c4-c5e5d84b2170.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/253c1f46-e2ad-4547-8b1c-5935addeddb5.crl

            X509v3 Authority Key Identifier:
                keyid:80:1D:43:D8:F7:17:16:B0:69:AB:08:47:B2:A9:15:13:40:32:69:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.0.92.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:e7:f8:94:0c:6c:1b:0f:b1:40:18:b4:86:a1:12:16:ab:c4:
         e3:8b:da:f7:4e:c3:27:0d:ff:35:da:b8:9f:8d:45:8e:df:4b:
         98:a6:d6:79:67:e0:b8:13:9a:fb:8e:9e:c4:db:68:b2:fe:27:
         a5:75:5e:7b:43:74:74:0d:bf:80:2c:45:95:df:2d:de:64:de:
         07:74:62:17:26:c6:0f:b7:67:83:ce:32:ca:fd:b7:2b:35:35:
         62:87:7f:86:bc:71:e4:80:44:4c:2a:bd:3f:45:8e:c3:89:d5:
         fe:1d:38:6f:3c:03:89:ef:ef:80:9f:12:11:89:8d:e4:20:64:
         1e:db:5a:b0:54:a0:10:1b:f6:97:e7:b7:8d:27:c7:3d:e0:93:
         a6:6c:6f:71:0a:09:2b:fd:15:7f:91:e5:36:a7:94:18:7c:0d:
         43:4c:7a:71:da:4b:14:a9:c8:2c:4b:a3:59:ae:e5:e4:1f:2a:
         31:41:b4:4a:a6:ec:0f:64:23:aa:e1:da:76:09:0d:c6:64:c1:
         7d:87:bb:b8:58:2d:ee:ed:f7:8a:70:66:24:d8:4d:c1:c3:4b:
         fa:f4:3b:bc:76:2b:27:27:50:64:27:5a:67:9e:ba:5f:5b:65:
         55:c5:46:f2:9b:ae:9c:6b:dd:2b:a3:e1:9e:1d:24:40:32:ce:
         bf:fc:1b:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:32:09 2026 by rpki-client