Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/b5ec99c0-15fb-304b-a9b3-b3e97ad0cc59.roa
File:                     b5ec99c0-15fb-304b-a9b3-b3e97ad0cc59.roa (raw, json)
Hash identifier:          6tuYtnZ+wBWxoqTf/+nAwidpbbxlc2Sibds/J7tG6xU=
Subject key identifier:   7F:F1:6F:BD:9A:7E:3F:B7:F4:FD:66:5B:91:C9:26:A3:52:BB:D8:79
Certificate issuer:       /CN=fe86722c-27ec-4059-a1ef-757cf5e15715
Certificate serial:       010D0C9F4328584CCA41E2AB8705EB84FD5B2100
Authority key identifier: 9C:AE:A3:9B:81:AD:00:D5:A0:53:43:BF:27:13:EF:FF:47:D6:B8:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/b5ec99c0-15fb-304b-a9b3-b3e97ad0cc59.roa
Signing time:             Sun 08 Feb 2026 02:00:32 +0000
ROA not before:           Sun 08 Feb 2026 02:00:32 +0000
ROA not after:            Sat 09 May 2026 01:00:32 +0000
asID:                     18794
IP address blocks:        130.156.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/fe86722c-27ec-4059-a1ef-757cf5e15715.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/fe86722c-27ec-4059-a1ef-757cf5e15715.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ca:41:e2:ab:87:05:eb:84:fd:5b:21:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe86722c-27ec-4059-a1ef-757cf5e15715
        Validity
            Not Before: Feb  8 02:00:32 2026 GMT
            Not After : May  9 01:00:32 2026 GMT
        Subject: CN=3aa11f19-7923-45d5-9a97-ab19419f1b19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:c1:a6:a8:24:11:99:c5:94:5c:2a:6a:9d:b3:
                    a6:ca:64:9f:ad:1b:54:f1:b5:5d:0b:ce:28:6a:2a:
                    06:f0:5e:05:da:7f:22:6c:71:71:82:26:42:fe:86:
                    f7:b1:e5:28:42:56:1b:2e:fa:5e:d7:19:b9:5e:6f:
                    2e:45:47:71:27:df:62:4f:e2:46:e7:ac:a0:76:26:
                    d9:bd:cf:3a:12:4a:e8:b8:47:cb:8e:30:d7:92:a6:
                    16:22:a4:06:63:37:43:6d:47:61:00:59:dd:11:be:
                    d7:28:ee:31:bc:01:b0:57:5c:33:8e:bc:99:46:0d:
                    aa:80:15:1f:4b:ea:16:13:39:11:ee:c0:8b:ac:2d:
                    b9:8e:6b:fb:22:15:50:c4:45:20:24:59:7a:3b:e9:
                    ac:07:45:3e:41:de:d5:d9:b6:2c:42:40:de:b2:61:
                    ef:e3:47:a7:71:67:2c:2e:cf:40:3d:07:2e:d7:6a:
                    35:e2:2a:86:0a:d4:5f:80:4b:43:89:9a:78:4a:3c:
                    92:af:64:30:f3:40:be:ff:c3:f5:26:bc:95:7f:14:
                    c8:55:94:26:e5:10:c0:e6:6d:12:b5:f5:06:5a:eb:
                    f4:e8:98:50:10:f1:7b:8b:d6:37:b9:d9:8d:d9:ff:
                    c9:9f:ac:f7:51:d4:02:2a:e9:46:1c:2f:c2:19:5a:
                    a7:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:F1:6F:BD:9A:7E:3F:B7:F4:FD:66:5B:91:C9:26:A3:52:BB:D8:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/b5ec99c0-15fb-304b-a9b3-b3e97ad0cc59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/fe86722c-27ec-4059-a1ef-757cf5e15715.crl

            X509v3 Authority Key Identifier:
                keyid:9C:AE:A3:9B:81:AD:00:D5:A0:53:43:BF:27:13:EF:FF:47:D6:B8:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.156.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:54:83:aa:b3:66:e6:13:9e:7b:3d:72:ed:33:e0:02:0c:13:
         88:8e:46:13:23:f5:9c:56:ff:74:1c:12:f4:9c:3d:b9:21:32:
         4a:6a:6f:8c:c8:8c:2d:a9:ab:43:9d:0e:d6:a2:0c:b7:8e:21:
         3e:a4:da:ae:19:60:82:40:f5:dc:1c:bc:07:54:02:69:51:35:
         13:52:49:50:8e:24:9f:c4:6b:76:21:fb:b2:12:cc:a8:6d:27:
         a3:0f:af:8a:cc:0a:14:eb:2e:46:57:fc:5b:30:91:fc:c8:cc:
         59:8a:0e:23:79:5f:d2:96:63:a4:2a:28:73:46:4f:23:8f:2c:
         77:33:77:1b:b9:d6:21:a2:9b:08:3b:11:93:15:de:b9:22:1e:
         07:9d:74:b0:fd:41:6d:bd:e5:5c:c7:12:8c:16:ef:08:3e:a6:
         21:16:1b:d7:dc:b2:01:50:c2:09:2d:99:ea:bd:48:65:8c:38:
         ff:99:cd:1c:af:fd:2c:20:ff:8c:55:69:5c:db:57:0f:4f:4b:
         28:56:d0:f4:67:77:c8:52:5e:2d:53:be:cf:aa:12:b0:a5:21:
         d8:6e:1a:dc:49:ef:06:5c:34:16:18:46:3a:85:dc:99:c0:91:
         29:1f:10:2b:df:5f:ce:bd:bd:bb:ea:b0:0d:03:55:5a:7b:26:
         a5:e1:e1:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:44:48 2026 by rpki-client