Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/1d07058c-91e1-3e8c-b855-66b4e81e6476.roa
File:                     1d07058c-91e1-3e8c-b855-66b4e81e6476.roa (raw, json)
Hash identifier:          EM6htIBNZ/cBiCqx/cH8HuIqEJ1bN54Sf7KMdMqutzI=
Subject key identifier:   0B:76:CA:B6:83:43:C9:F2:E1:6A:02:34:C7:00:D9:F6:2B:97:60:7D
Certificate issuer:       /CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279
Certificate serial:       010D0C9F4328584CD407626EEE19D8B2DA69A600
Authority key identifier: E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/1d07058c-91e1-3e8c-b855-66b4e81e6476.roa
Signing time:             Wed 11 Feb 2026 14:00:41 +0000
ROA not before:           Wed 11 Feb 2026 14:00:41 +0000
ROA not after:            Tue 12 May 2026 13:00:41 +0000
asID:                     14618
IP address blocks:        170.225.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d4:07:62:6e:ee:19:d8:b2:da:69:a6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279
        Validity
            Not Before: Feb 11 14:00:41 2026 GMT
            Not After : May 12 13:00:41 2026 GMT
        Subject: CN=e42423d1-1248-4c88-9864-a34bd2d4790b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:4c:96:2e:a6:83:d8:ea:59:0a:b3:c4:40:56:
                    6a:cb:bc:82:fb:fe:0f:32:d5:68:86:5e:35:95:08:
                    34:55:10:50:bf:dc:c9:64:c2:a2:be:4a:a1:18:e1:
                    41:7e:b2:e0:9e:c6:ea:4b:3b:74:05:03:70:8b:57:
                    01:4c:3e:59:be:cd:a1:98:b3:ae:aa:f2:0f:af:5f:
                    1f:08:ab:03:37:37:a0:18:70:0d:b4:ad:d5:1e:6d:
                    b1:7b:15:fb:70:39:b1:06:12:88:08:35:e0:5f:23:
                    64:06:2c:01:f3:40:27:79:c1:4a:31:cb:80:12:ef:
                    54:57:02:55:0f:3d:2f:ec:7b:7c:b3:26:56:52:9a:
                    06:38:20:eb:23:aa:91:fe:b1:94:37:39:dc:86:50:
                    9a:e9:14:28:95:14:14:e3:29:74:a8:41:60:5e:80:
                    06:1d:f6:2e:20:7f:50:46:ee:a1:4a:7d:21:6d:f9:
                    c8:95:de:61:84:70:b1:76:e5:09:4a:03:0a:2e:cb:
                    91:aa:1e:0f:6c:be:98:48:24:90:ef:16:44:92:0c:
                    b5:c0:50:c0:17:aa:08:17:08:2f:e2:c1:79:44:93:
                    37:43:7d:5e:1a:c3:8a:1c:69:b8:5b:ac:21:98:a7:
                    2c:00:71:88:0c:18:bd:a1:66:ba:d1:23:d7:30:28:
                    16:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:76:CA:B6:83:43:C9:F2:E1:6A:02:34:C7:00:D9:F6:2B:97:60:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/1d07058c-91e1-3e8c-b855-66b4e81e6476.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl

            X509v3 Authority Key Identifier:
                keyid:E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.225.217.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:95:7c:b2:30:08:be:a6:b3:f7:44:c3:0c:29:52:c4:8b:19:
         28:7a:ad:9c:3c:45:88:29:21:83:de:50:48:fe:6c:ce:54:d8:
         b6:f1:25:2d:bb:24:e0:9f:d8:e9:dd:f9:45:cc:d5:54:b8:6d:
         e9:7b:bf:fc:2c:05:12:b0:51:fe:f1:c5:39:72:b1:a7:d6:de:
         7d:21:72:b2:8d:77:ab:b7:85:6b:a6:c7:40:3c:d7:14:33:2a:
         56:e0:a3:9a:1e:5a:84:c7:12:5f:c9:4d:8c:c1:6a:2d:2d:11:
         b5:0b:1a:47:6c:6b:8f:58:2d:c9:fa:62:61:0f:e3:0d:56:3d:
         fa:1f:de:40:a1:93:3c:ad:43:a2:75:8e:11:b5:0d:2c:2b:2d:
         b4:b2:5e:f5:37:36:a9:57:41:74:ef:d2:07:7b:29:79:84:78:
         0c:43:71:1b:49:e6:00:20:98:24:55:3b:60:a0:16:27:b1:47:
         d1:6d:4b:ab:b7:b2:9a:89:54:1c:7d:c1:a5:54:e9:77:22:52:
         ac:ec:b5:d6:d9:75:18:c3:a1:c2:18:cc:d1:b6:bd:53:32:56:
         45:0d:bf:d3:95:08:09:03:88:4d:31:02:ba:db:32:31:2f:ab:
         1c:30:89:a7:69:9c:6c:9f:f7:52:39:c3:a3:0f:35:b4:4e:39:
         c8:03:04:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:16:55 2026 by rpki-client