Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/b0d4a783-aede-347d-a376-96810f016fda.roa
File:                     b0d4a783-aede-347d-a376-96810f016fda.roa (raw, json)
Hash identifier:          J5fYEDTNt7v1AGBeo6VLl2N5eMQor68uZMPDp5Mv3Lw=
Subject key identifier:   EC:C2:94:4D:75:78:1C:5F:7F:EA:ED:E1:D5:8F:54:14:3B:63:BD:4E
Certificate issuer:       /CN=341b7e96-a6f0-44d3-aecc-9294d6bccc78
Certificate serial:       010D0C9F4328584CDF3243A681E1687B016E0800
Authority key identifier: A0:F0:41:78:61:8C:48:96:CF:A9:8C:C6:9A:53:8B:40:50:28:B2:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/b0d4a783-aede-347d-a376-96810f016fda.roa
Signing time:             Sun 15 Feb 2026 14:00:41 +0000
ROA not before:           Sun 15 Feb 2026 14:00:41 +0000
ROA not after:            Sat 16 May 2026 13:00:41 +0000
asID:                     19551
IP address blocks:        107.154.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/341b7e96-a6f0-44d3-aecc-9294d6bccc78.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/341b7e96-a6f0-44d3-aecc-9294d6bccc78.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:df:32:43:a6:81:e1:68:7b:01:6e:08:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=341b7e96-a6f0-44d3-aecc-9294d6bccc78
        Validity
            Not Before: Feb 15 14:00:41 2026 GMT
            Not After : May 16 13:00:41 2026 GMT
        Subject: CN=36629af1-cea8-4109-b53b-ef95fbaddc03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:09:90:d0:35:92:4d:af:20:39:70:75:4f:47:
                    f6:01:59:02:59:56:b0:b6:a1:2c:46:dc:31:18:d6:
                    6c:3d:00:a8:17:e4:ec:69:d5:6f:40:1f:6e:fb:1b:
                    96:48:02:54:11:81:7c:16:fa:a4:d2:8a:d2:ad:93:
                    ad:4e:9d:bb:fe:eb:ed:6c:14:4e:21:84:23:2b:b6:
                    42:61:0d:6a:15:fd:5d:7f:c9:d3:06:b4:0c:d3:3f:
                    f6:32:08:87:a8:e3:b0:96:e0:d3:7c:6e:ed:9d:28:
                    38:93:8b:b0:ff:bb:00:12:ea:15:92:12:ea:f5:ce:
                    e6:36:77:5e:ba:e3:0b:af:d2:5a:5b:d2:e5:86:34:
                    ce:69:24:07:34:5b:b1:d8:3c:da:9d:89:49:db:61:
                    9b:86:0f:5d:15:71:27:26:89:e0:b3:f3:78:08:31:
                    86:95:44:bc:c5:f5:c5:9e:85:dd:b5:81:10:c6:97:
                    32:23:37:05:3d:3e:cf:04:14:0e:ad:67:f1:eb:34:
                    24:b8:f9:cb:63:72:d3:4c:5f:33:96:61:b9:b2:af:
                    f2:de:da:9e:b7:02:93:be:b3:ce:61:65:b3:13:db:
                    1b:eb:ba:1c:c1:27:56:43:b2:91:5e:fd:b2:16:81:
                    98:0c:a0:47:fb:c1:b1:32:cc:58:74:7b:62:a1:b2:
                    5b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:C2:94:4D:75:78:1C:5F:7F:EA:ED:E1:D5:8F:54:14:3B:63:BD:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/b0d4a783-aede-347d-a376-96810f016fda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/341b7e96-a6f0-44d3-aecc-9294d6bccc78.crl

            X509v3 Authority Key Identifier:
                keyid:A0:F0:41:78:61:8C:48:96:CF:A9:8C:C6:9A:53:8B:40:50:28:B2:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.154.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:e4:6f:8d:aa:b2:2a:4f:ad:ff:34:e9:7e:11:91:68:3e:cd:
         ce:99:52:23:c6:63:3b:da:96:d6:b6:58:73:65:ae:3c:e9:d4:
         c8:3a:06:d2:a4:5c:5e:25:0b:42:9b:25:89:5f:b4:b6:77:04:
         e2:29:20:af:3a:8d:dd:f7:49:25:15:6f:c9:32:f2:64:f9:86:
         fd:02:65:0e:d1:fc:4c:84:ae:ff:4a:e7:9a:aa:43:fa:7a:eb:
         53:6e:19:4c:fb:ca:7c:cf:ca:fb:2d:31:d5:e5:e5:b8:33:d1:
         78:bc:9f:f1:81:19:f7:d7:9f:cc:78:85:79:eb:ca:a3:21:b3:
         38:b8:a1:c7:28:ab:7e:bf:dd:04:a8:08:ad:fc:ae:30:46:8c:
         ed:74:42:90:0e:9b:a6:f9:cc:ef:f1:a8:41:80:16:c9:1b:71:
         72:f6:b6:64:7f:de:8b:c6:3e:64:20:61:1b:2a:e8:65:45:5c:
         f0:77:9c:dd:53:a0:8b:75:7f:db:f2:ce:05:79:2d:cb:98:00:
         ed:fa:10:33:11:4c:93:cc:5f:99:ac:3d:0b:8a:46:5f:9a:fd:
         37:32:4c:83:4c:23:6a:83:1d:1c:27:3c:ce:06:4f:8d:da:1f:
         64:80:9b:41:29:26:5f:8e:ce:dd:bd:5a:14:ce:99:c6:d4:90:
         8a:25:d1:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:31:44 2026 by rpki-client