Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/96a7d5f8-e293-37e1-9694-e0d0a7da47b9.roa
File:                     96a7d5f8-e293-37e1-9694-e0d0a7da47b9.roa (raw, json)
Hash identifier:          F8fOgjBaBRfUs8nCtWOySkWWtpZVtupCZKbRoeVZj4M=
Subject key identifier:   0E:9C:A1:24:88:C7:19:93:E5:81:B6:57:A2:56:4F:3C:85:E9:33:BD
Certificate issuer:       /CN=3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc
Certificate serial:       010D0C9F4328584CDB022217B9657A7485045990
Authority key identifier: 56:34:70:D9:2B:60:85:B1:A7:7C:A0:97:7D:A5:7A:1D:B8:27:54:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/96a7d5f8-e293-37e1-9694-e0d0a7da47b9.roa
Signing time:             Sat 14 Feb 2026 02:00:32 +0000
ROA not before:           Sat 14 Feb 2026 02:00:32 +0000
ROA not after:            Fri 15 May 2026 01:00:32 +0000
asID:                     10497
IP address blocks:        138.220.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:db:02:22:17:b9:65:7a:74:85:04:59:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc
        Validity
            Not Before: Feb 14 02:00:32 2026 GMT
            Not After : May 15 01:00:32 2026 GMT
        Subject: CN=4287371d-d7f4-445e-b0ab-95b6804f095e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:c6:42:34:b5:62:59:41:2c:47:76:71:8b:7c:
                    1a:17:2b:c0:f5:e2:b4:ab:96:3d:44:8d:f9:fa:61:
                    31:0a:3f:89:f1:04:76:00:f9:bf:af:ce:ac:ea:d3:
                    1b:97:47:8b:1d:69:b4:63:ef:43:6a:9e:44:64:15:
                    df:fb:8a:d2:2b:f0:b5:e5:3b:83:74:f1:c6:ae:f5:
                    b7:fd:a5:3e:d5:77:33:70:42:a7:10:4e:f6:84:94:
                    5a:0c:b6:45:12:71:51:02:ed:c2:2b:84:59:8d:12:
                    36:2d:fe:06:ac:a6:96:58:ac:d9:31:e4:3a:f1:10:
                    92:5c:df:c3:69:72:50:b5:60:0e:fe:04:34:de:f9:
                    7b:c6:4a:fb:38:e4:c4:50:e8:0f:b8:82:ca:9c:3b:
                    cd:15:29:99:fe:b5:f8:1b:d4:27:36:0c:33:6b:58:
                    dc:12:75:45:7e:03:ef:bb:9a:93:ad:97:a7:56:16:
                    bc:db:4c:45:36:30:62:81:92:09:66:8d:e8:9c:fd:
                    b3:21:1a:b5:c4:40:41:77:7c:43:5f:d3:6a:7c:18:
                    26:36:b8:de:88:46:9d:da:8a:20:dc:12:8c:5c:d2:
                    08:0c:a8:99:3c:5c:da:27:9b:f2:04:3d:67:c2:41:
                    0e:8c:af:32:85:0f:78:cf:62:88:06:72:a6:41:cf:
                    74:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:9C:A1:24:88:C7:19:93:E5:81:B6:57:A2:56:4F:3C:85:E9:33:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/96a7d5f8-e293-37e1-9694-e0d0a7da47b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.crl

            X509v3 Authority Key Identifier:
                keyid:56:34:70:D9:2B:60:85:B1:A7:7C:A0:97:7D:A5:7A:1D:B8:27:54:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.220.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:72:62:4b:0a:e0:c1:bc:25:17:af:40:0c:ac:30:86:6b:5c:
         a4:c7:90:c8:39:40:0c:a5:c1:c8:d3:d2:c2:5d:2e:5f:7b:9c:
         75:d5:c8:8f:30:ac:72:e2:7a:6b:95:32:43:4c:6a:d1:67:03:
         58:3a:ff:16:50:ec:41:5f:34:7d:51:70:53:d6:95:99:40:89:
         b4:ff:f8:a8:6f:75:34:5d:36:55:c2:0e:a8:5d:cf:ce:13:a2:
         8a:9b:3e:ff:50:64:00:7e:ab:c3:2c:f2:1f:10:48:fb:5d:04:
         92:85:fa:c7:d6:ae:27:e9:62:e0:d2:21:b5:91:5e:c3:4a:9e:
         09:cf:c0:4c:9f:f5:ba:a8:aa:d6:0f:12:eb:10:9e:d9:b6:31:
         8d:8e:7b:c7:46:16:41:3d:15:f6:6b:4b:d6:fc:59:23:38:da:
         20:1f:ae:23:60:36:85:7a:11:7e:45:0e:cf:82:5c:bf:75:b7:
         03:cc:5b:5a:88:8a:e8:8f:ee:a5:54:43:1e:a3:57:bf:5b:f3:
         ef:33:c5:b7:cc:d2:7f:ed:f1:86:de:cf:cb:fc:57:23:60:bc:
         d2:02:63:6f:95:cf:ae:83:0b:78:6a:a0:33:37:3f:ca:d1:98:
         c0:9d:41:27:10:0d:45:f7:68:6e:54:e7:f8:2a:e6:3e:db:16:
         a2:38:b4:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:55:52 2026 by rpki-client