Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/ab2f8943-9a5a-3f6e-b252-0107ff406710.roa
File:                     ab2f8943-9a5a-3f6e-b252-0107ff406710.roa (raw, json)
Hash identifier:          6WK25dxEuP2bbOkvGcVejcUDjIlQ7edT4oqHZNv0p58=
Subject key identifier:   A1:A7:C8:AD:57:A8:95:16:76:F6:A9:7C:88:41:A0:8F:47:FC:E4:3D
Certificate issuer:       /CN=bf1c119f-5c08-4663-b550-1d531c2fe54f
Certificate serial:       010D0C9F4328584D003C3B912E4E7D5FACE35400
Authority key identifier: AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/ab2f8943-9a5a-3f6e-b252-0107ff406710.roa
Signing time:             Fri 27 Feb 2026 10:02:56 +0000
ROA not before:           Fri 27 Feb 2026 10:02:56 +0000
ROA not after:            Thu 28 May 2026 09:02:56 +0000
asID:                     14618
IP address blocks:        170.139.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:00:3c:3b:91:2e:4e:7d:5f:ac:e3:54:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf1c119f-5c08-4663-b550-1d531c2fe54f
        Validity
            Not Before: Feb 27 10:02:56 2026 GMT
            Not After : May 28 09:02:56 2026 GMT
        Subject: CN=a3cf1584-150c-44da-848a-a4839ca8b29e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c7:49:c8:8e:28:33:36:f6:73:07:30:cf:de:
                    03:3d:5a:17:78:c8:ed:f8:c7:3c:c8:66:18:9b:c9:
                    83:43:4b:61:21:1a:4a:05:1c:1a:a7:1f:66:fd:52:
                    21:e3:32:1a:b1:c3:eb:d2:f1:48:c1:d6:5a:e6:59:
                    52:d1:e1:8a:75:f2:f5:01:91:36:69:fe:a6:f1:5a:
                    19:0d:54:16:6f:55:36:a7:35:3c:96:45:50:24:cf:
                    88:eb:14:f0:b5:72:1f:37:23:31:57:f4:15:ef:8e:
                    1d:f7:bf:c6:78:33:af:89:68:a2:86:cc:4b:2a:5e:
                    5c:5e:d5:09:70:27:0a:95:6c:62:5d:21:34:86:5f:
                    b1:23:d8:60:db:13:de:7e:96:37:d5:b5:9a:37:0c:
                    2a:cb:61:0a:63:73:d2:ac:a6:69:76:09:94:71:f0:
                    20:5e:02:bc:cc:d9:9b:98:c7:21:87:9c:3c:e6:2c:
                    83:a2:b1:cd:75:03:f4:89:29:80:de:a0:12:d3:94:
                    b8:50:74:49:c6:0e:bd:cc:e6:35:d3:03:14:81:06:
                    bc:5c:af:26:a3:67:9b:30:14:23:45:bd:c3:57:20:
                    c1:9a:91:c2:d8:65:f7:c9:56:98:3f:06:7b:48:76:
                    a6:60:c1:9e:3e:da:a3:c2:b6:5a:89:16:1f:d3:74:
                    06:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:A7:C8:AD:57:A8:95:16:76:F6:A9:7C:88:41:A0:8F:47:FC:E4:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/ab2f8943-9a5a-3f6e-b252-0107ff406710.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl

            X509v3 Authority Key Identifier:
                keyid:AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.139.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:43:d8:a7:9a:4d:db:ab:a3:9e:e9:c1:fb:00:5a:28:e3:fd:
         3a:6d:2d:de:18:46:32:cd:0a:93:49:eb:5f:19:b6:0c:7c:1d:
         6f:d9:6a:a7:65:b6:b7:18:1e:f0:3a:45:66:5a:4b:ee:c3:00:
         cc:c7:48:48:9c:41:c1:a5:86:af:23:04:b5:7c:6c:13:5f:53:
         61:3f:69:d9:32:85:26:b1:2e:eb:17:13:e9:41:68:5a:73:8a:
         0d:ef:8c:f5:26:4f:04:59:5d:75:d5:ab:31:61:1d:25:60:a7:
         d9:63:75:92:a2:06:ee:d6:59:d3:e4:7b:3b:af:7d:95:49:dd:
         e1:1c:e0:26:3d:ec:ad:e6:ba:38:83:3c:34:c4:af:4a:58:f3:
         a1:7c:0e:c1:af:61:78:34:27:30:7d:eb:95:a4:c6:50:3f:dc:
         a1:d0:d3:45:13:7a:d4:a2:ad:7f:83:f1:a0:16:08:a2:ca:09:
         33:31:2c:24:f0:6e:ff:c3:ad:2e:07:7f:f8:be:f0:f8:76:95:
         83:78:03:60:64:0b:e4:ee:49:04:25:f0:e6:4c:58:79:47:bd:
         79:6d:3e:b6:93:1f:60:c8:17:20:de:ec:8a:4f:13:91:31:d3:
         85:f5:21:c2:32:5e:57:35:d7:c7:bc:23:60:e9:e3:ef:ee:a4:
         c3:1d:8a:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:55:29 2026 by rpki-client