Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854/7782712d-1e27-3c4f-bb3f-01c6dad76529.roa
File:                     7782712d-1e27-3c4f-bb3f-01c6dad76529.roa (raw, json)
Hash identifier:          OmdZXu8TwUKUVeLPhkWTatZ6ld5S8+tiH3eKk0yXdu4=
Subject key identifier:   C6:F3:F8:72:D4:88:98:DB:91:2C:31:F3:53:88:C7:2D:80:B8:82:AA
Certificate issuer:       /CN=2a71f00e-0200-48df-9cb4-008df9a4a854
Certificate serial:       010D0C9F4328584CD2A1ED50CE9A5BD3EA957E40
Authority key identifier: 38:0D:64:C0:FC:18:06:FB:A2:13:99:2A:01:58:BD:19:46:77:76:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854/7782712d-1e27-3c4f-bb3f-01c6dad76529.roa
Signing time:             Wed 11 Feb 2026 02:00:32 +0000
ROA not before:           Wed 11 Feb 2026 02:00:32 +0000
ROA not after:            Tue 12 May 2026 01:00:32 +0000
asID:                     22855
IP address blocks:        199.230.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854/2a71f00e-0200-48df-9cb4-008df9a4a854.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854/2a71f00e-0200-48df-9cb4-008df9a4a854.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d2:a1:ed:50:ce:9a:5b:d3:ea:95:7e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a71f00e-0200-48df-9cb4-008df9a4a854
        Validity
            Not Before: Feb 11 02:00:32 2026 GMT
            Not After : May 12 01:00:32 2026 GMT
        Subject: CN=69ddcb8f-6cf7-45e2-a8a2-24b54e3d0179
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:93:17:b5:21:da:58:63:ef:f0:02:8e:d3:f1:
                    85:97:a7:85:62:a0:d2:60:f4:c8:11:02:08:c5:a1:
                    d4:61:4c:bc:8b:e0:86:bb:01:0b:28:90:e9:92:a4:
                    6d:65:85:3d:3d:c8:64:ee:40:fe:24:31:6b:e0:b4:
                    7f:bd:01:9c:b4:54:9b:24:a3:66:50:4e:e9:33:af:
                    24:01:3b:e0:01:45:e7:25:5b:40:df:9e:89:d2:21:
                    70:d5:77:8a:13:40:a9:2d:8a:41:f8:03:07:ba:c6:
                    35:ca:65:d2:a2:03:0e:d6:d6:7b:ea:15:58:90:e6:
                    d8:88:e0:18:62:41:87:84:2a:59:1e:b9:f7:35:c9:
                    32:ca:8b:d1:d2:e6:46:5e:51:b8:df:bb:f8:b6:4b:
                    6f:57:7c:e9:45:63:05:61:f4:2c:4b:9a:e5:17:a4:
                    97:80:51:18:aa:b2:60:5e:95:5b:86:b7:dc:85:42:
                    2d:c6:9d:d3:24:40:66:fe:aa:4d:82:89:3f:c8:3a:
                    8d:5e:c9:b6:f7:0e:fd:04:b0:dd:3b:23:80:70:0a:
                    d2:a0:24:b7:a6:36:14:90:ce:94:9c:49:2a:84:c8:
                    13:b4:07:e7:6e:51:7c:51:c3:b4:73:d4:f3:41:f0:
                    a7:33:16:03:c7:f4:3d:ec:90:52:e6:bb:74:d5:56:
                    49:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:F3:F8:72:D4:88:98:DB:91:2C:31:F3:53:88:C7:2D:80:B8:82:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854/7782712d-1e27-3c4f-bb3f-01c6dad76529.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854/2a71f00e-0200-48df-9cb4-008df9a4a854.crl

            X509v3 Authority Key Identifier:
                keyid:38:0D:64:C0:FC:18:06:FB:A2:13:99:2A:01:58:BD:19:46:77:76:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.230.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:13:90:ca:12:06:ae:dd:97:9a:f3:d6:9e:d3:2c:d1:ae:12:
         fe:17:77:f4:32:3b:45:86:56:71:4e:62:a2:74:67:dc:4b:bf:
         66:15:83:60:8d:3a:a9:7f:1e:a2:e6:6e:01:29:c8:e6:b1:5a:
         c6:7e:49:e3:a7:5d:0a:3d:ef:f3:66:6a:0f:27:c3:bf:ec:f8:
         a3:f3:7a:20:b8:d7:77:02:d5:30:a6:45:d7:1f:dd:f7:45:e0:
         fe:34:16:eb:e2:6d:9f:68:06:bc:e0:bb:b5:30:ca:f9:05:3f:
         de:36:f0:06:37:68:c1:5a:50:94:1d:2a:97:ad:c5:09:a7:d2:
         01:73:8d:94:c9:1a:3c:c2:93:4e:08:03:7c:f3:5b:a2:c7:b5:
         7d:76:81:16:0d:b3:83:ea:ce:ee:66:3c:af:06:72:b8:73:b8:
         e2:21:50:1e:7f:68:4d:65:19:59:b5:3a:80:b0:96:de:63:5f:
         26:7c:75:9e:ec:1e:9c:de:70:6b:35:55:36:95:87:36:4f:93:
         7b:eb:b2:8f:c0:f6:ff:eb:b4:4e:8c:91:fc:4f:41:16:f6:b3:
         c0:b2:98:6e:2a:b9:7e:e2:a4:ee:03:62:80:af:6a:66:51:4f:
         ec:c9:a9:bf:c1:85:31:21:4d:f5:d8:d1:d2:88:24:bb:c5:bc:
         84:83:27:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:07:49 2026 by rpki-client