Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/3f3ee44a-749b-385d-85cf-9e52bdd3a03b.roa
File:                     3f3ee44a-749b-385d-85cf-9e52bdd3a03b.roa (raw, json)
Hash identifier:          jx+du3cS0Kdv7kdCDtdtMSUN1ica8IdIbGU+QgxYcgk=
Subject key identifier:   7C:0B:9E:EC:9C:72:76:C1:4A:0F:6B:33:07:AD:62:E6:64:32:E2:EE
Certificate issuer:       /CN=4e81a256-41ff-4f51-8092-c7fffa4d9221
Certificate serial:       010D0C9F4328584CE36200BD46F382634CAA5D80
Authority key identifier: C2:2B:67:61:D1:1E:AC:E5:13:26:4F:10:46:D2:FA:CC:7C:45:8B:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/3f3ee44a-749b-385d-85cf-9e52bdd3a03b.roa
Signing time:             Tue 17 Feb 2026 02:00:31 +0000
ROA not before:           Tue 17 Feb 2026 02:00:31 +0000
ROA not after:            Mon 18 May 2026 01:00:31 +0000
asID:                     6922
IP address blocks:        204.158.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e3:62:00:bd:46:f3:82:63:4c:aa:5d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e81a256-41ff-4f51-8092-c7fffa4d9221
        Validity
            Not Before: Feb 17 02:00:31 2026 GMT
            Not After : May 18 01:00:31 2026 GMT
        Subject: CN=e3382ac5-d3b6-4090-b0fa-a8731ee85c89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:09:86:33:af:85:54:ee:82:d0:20:e4:5a:ad:
                    1e:73:d9:64:16:ab:1f:62:9c:d2:7b:24:6f:31:0f:
                    be:7c:30:9e:68:f6:c1:39:b8:43:16:7b:67:6a:01:
                    fe:e4:b6:eb:68:5e:bf:ba:19:1d:d3:b9:5d:b4:19:
                    03:c2:ab:57:cb:ff:7e:7f:11:85:ed:0a:03:e1:7c:
                    5f:d5:ca:f0:31:15:f7:12:8b:30:4d:bc:e2:3d:7f:
                    28:a1:cf:78:26:a4:0f:8a:cc:38:13:59:cd:02:52:
                    e9:07:d9:48:d4:d0:a2:90:1c:98:52:b5:ae:36:78:
                    d3:54:8c:38:09:5a:d4:e5:7b:e6:16:76:34:b5:d5:
                    49:b2:c4:7f:95:b5:31:83:52:c6:e1:a1:d1:c6:b3:
                    ad:ba:3b:b3:48:57:fd:31:40:75:94:36:96:77:a4:
                    94:ca:8a:89:06:41:03:4f:6b:c6:ad:de:fe:13:4f:
                    29:17:9e:a7:54:b4:2f:93:ce:9f:a0:69:e3:26:64:
                    ba:0b:6b:8a:79:22:dd:0a:d2:fb:de:d1:ba:84:f9:
                    9b:b2:5e:53:ad:22:98:37:5e:e5:1d:85:e0:10:e3:
                    0e:c6:00:17:ad:03:6c:5d:bc:c7:64:e9:a3:e0:15:
                    ef:a6:df:26:d5:c0:bb:b0:cf:09:97:1a:74:04:8a:
                    a2:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:0B:9E:EC:9C:72:76:C1:4A:0F:6B:33:07:AD:62:E6:64:32:E2:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/3f3ee44a-749b-385d-85cf-9e52bdd3a03b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.crl

            X509v3 Authority Key Identifier:
                keyid:C2:2B:67:61:D1:1E:AC:E5:13:26:4F:10:46:D2:FA:CC:7C:45:8B:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.158.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:a8:18:4e:c0:5e:e8:33:b4:1f:a3:19:cb:8b:60:e7:04:98:
         f2:04:cf:d8:b6:9b:88:73:9c:61:b5:b6:e3:16:82:ed:e7:5e:
         bb:ad:1a:d8:a9:db:d5:e0:60:74:18:37:8c:14:9e:a7:ff:ae:
         bd:0c:ce:97:d2:fa:eb:c5:b7:05:ab:a3:c9:aa:f2:6c:c1:8f:
         ff:42:70:8e:65:eb:19:99:8b:95:c0:e2:8d:b7:9f:23:f5:a8:
         44:de:93:72:8d:3f:ee:6f:2e:b2:bd:04:bf:13:25:90:5e:4f:
         e9:74:1c:d1:47:86:ce:59:6f:44:d4:1c:a9:ca:a7:60:5c:92:
         cd:d0:73:f0:31:5e:06:2a:2f:e8:41:96:4d:02:a9:f0:0b:3b:
         57:8a:de:e3:6a:7c:5d:ea:ad:3b:ab:1b:60:c5:c5:72:ee:14:
         c8:34:52:ea:c6:1d:03:8d:e1:9b:a4:e3:cd:b9:22:62:5b:85:
         4d:34:be:8e:ca:ab:d3:56:b8:9b:6b:c2:cc:07:6e:05:a6:e5:
         a6:45:62:bf:84:0c:75:d0:e0:22:a5:0d:90:41:aa:fb:df:09:
         0b:e1:36:3a:32:b2:8c:9b:67:58:35:e9:c5:11:cf:40:e4:11:
         4c:00:42:bd:6f:04:2a:b4:95:ea:d3:f9:77:a3:17:2f:3a:9f:
         c6:67:6a:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:56:41 2026 by rpki-client