Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/0bbf0a41-2213-3aad-ac1f-292cb0926b3b.roa
File:                     0bbf0a41-2213-3aad-ac1f-292cb0926b3b.roa (raw, json)
Hash identifier:          6FWOIy8fjn1/0KkMpeCkjKTps3cvxI3iCWuBoOWXBQQ=
Subject key identifier:   A4:6F:85:42:CA:81:63:4F:EC:D9:1A:F0:8A:23:F4:23:81:E7:A6:75
Certificate issuer:       /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial:       010D0C9F4328584CE09789D7187E49F86881B8E0
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/0bbf0a41-2213-3aad-ac1f-292cb0926b3b.roa
Signing time:             Mon 16 Feb 2026 02:00:32 +0000
ROA not before:           Mon 16 Feb 2026 02:00:32 +0000
ROA not after:            Sun 17 May 2026 01:00:32 +0000
asID:                     22652
IP address blocks:        184.95.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e0:97:89:d7:18:7e:49:f8:68:81:b8:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
        Validity
            Not Before: Feb 16 02:00:32 2026 GMT
            Not After : May 17 01:00:32 2026 GMT
        Subject: CN=dbee9c1a-c4c6-4c3d-8df1-1011928a742b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:7a:3e:06:97:b3:d1:cb:bc:1d:14:87:5b:30:
                    86:91:24:2f:f8:78:b9:9d:97:ce:c5:93:ff:c1:87:
                    27:39:09:9a:11:78:17:91:e2:27:97:b1:bd:ae:d2:
                    fe:08:0f:f7:49:a3:a5:72:39:fb:28:c8:d0:eb:35:
                    1d:c8:00:9b:5f:28:d2:ef:aa:d5:c3:9a:df:39:3e:
                    42:d9:97:60:6a:81:44:f7:d3:3a:e3:6d:bb:fb:bc:
                    e4:f6:23:84:22:32:28:8b:f8:eb:fe:34:a8:5d:ae:
                    4d:71:bb:68:f1:dd:bf:13:e8:b1:b9:18:17:15:79:
                    ce:81:27:28:5e:74:74:aa:25:69:a3:c0:42:3d:35:
                    4c:ce:3a:4f:c3:c5:e8:35:97:61:44:dc:de:e1:70:
                    7a:92:79:8b:34:67:8c:61:0e:1f:69:a8:e7:e4:ea:
                    8b:68:51:ea:4c:09:17:2d:81:da:99:1f:d3:c4:90:
                    5b:ed:5a:70:a0:da:e4:97:ee:c6:9d:f6:5a:32:dc:
                    2a:dc:e8:25:76:4c:df:cf:ec:65:28:12:5a:2e:1f:
                    85:90:d8:0a:f8:fc:d6:69:81:d5:02:84:c7:39:ed:
                    03:ab:2d:7f:22:36:b4:1c:63:eb:c8:a2:77:8a:f7:
                    17:aa:83:f5:36:47:6e:3d:d1:c0:3c:03:78:a0:88:
                    93:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:6F:85:42:CA:81:63:4F:EC:D9:1A:F0:8A:23:F4:23:81:E7:A6:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/0bbf0a41-2213-3aad-ac1f-292cb0926b3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl

            X509v3 Authority Key Identifier:
                keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.95.206.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:b0:49:51:f1:68:2a:2c:10:38:74:8b:8f:c9:d4:30:51:f3:
         53:ff:6a:06:2f:f0:e0:a5:47:25:cd:a0:0c:fa:59:29:8f:f2:
         76:98:12:a3:b4:42:23:4e:55:03:48:5b:bc:ad:0f:14:8e:bc:
         8b:5b:35:91:77:59:80:ef:28:7a:32:07:7b:66:af:18:a4:3f:
         7a:c0:03:94:ac:02:73:2c:ec:14:12:4a:5e:49:9a:fa:ae:b9:
         69:85:47:85:c0:0f:9a:eb:2f:dc:3d:a9:41:11:9b:43:be:77:
         fd:2d:93:46:b6:c3:81:8c:f0:89:63:d7:46:e1:b5:a0:41:a7:
         e2:63:a3:42:26:21:a0:7a:b3:34:c6:18:13:d8:51:13:0a:00:
         6e:69:9c:93:45:6b:08:ed:15:c2:f6:42:4f:6e:29:24:78:d7:
         71:c5:48:12:c8:04:71:97:d7:23:7c:21:4d:08:70:a3:33:34:
         b9:93:a7:ff:3a:a6:ec:57:5e:a0:2c:64:93:e2:71:bc:40:01:
         b5:52:43:f7:4c:50:31:2f:b8:86:e1:e1:56:4a:69:84:be:f6:
         c8:66:99:ff:39:04:be:44:56:42:bf:56:9d:31:2c:de:2a:d8:
         0c:25:65:13:df:af:bc:a2:38:76:4d:65:30:7e:c1:a6:1d:6c:
         06:ac:0b:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:45:43 2026 by rpki-client