Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b2456e11-ca83-4345-8884-0becc0831fb7/0ea31230-a310-3723-8781-993a54e89d70.roa
File:                     0ea31230-a310-3723-8781-993a54e89d70.roa (raw, json)
Hash identifier:          Tkzih1Bo8C0xGVTOquyhR/ftrjxOTI8f9lTkiZf7L8Y=
Subject key identifier:   A6:EC:2F:CB:34:B6:A4:30:E6:CE:ED:CA:D9:5B:BE:62:E2:91:0A:AC
Certificate issuer:       /CN=b2456e11-ca83-4345-8884-0becc0831fb7
Certificate serial:       010D0C9F4328584CC07C9D6A5F51A4BA89688740
Authority key identifier: E8:0D:FA:19:40:E1:CD:5A:C6:10:AE:B8:44:D8:0B:05:C4:18:0B:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b2456e11-ca83-4345-8884-0becc0831fb7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b2456e11-ca83-4345-8884-0becc0831fb7/0ea31230-a310-3723-8781-993a54e89d70.roa
Signing time:             Wed 04 Feb 2026 14:00:39 +0000
ROA not before:           Wed 04 Feb 2026 14:00:39 +0000
ROA not after:            Tue 05 May 2026 13:00:39 +0000
asID:                     14618
IP address blocks:        216.181.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b2456e11-ca83-4345-8884-0becc0831fb7/b2456e11-ca83-4345-8884-0becc0831fb7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b2456e11-ca83-4345-8884-0becc0831fb7/b2456e11-ca83-4345-8884-0becc0831fb7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b2456e11-ca83-4345-8884-0becc0831fb7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c0:7c:9d:6a:5f:51:a4:ba:89:68:87:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2456e11-ca83-4345-8884-0becc0831fb7
        Validity
            Not Before: Feb  4 14:00:39 2026 GMT
            Not After : May  5 13:00:39 2026 GMT
        Subject: CN=cc6fdd9a-e249-4a05-aebc-86b03f02d233
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ab:ed:a0:57:ae:c2:ee:27:26:3c:ad:2f:db:
                    00:19:2d:7d:8e:92:c5:09:8c:ce:92:75:10:c1:9e:
                    2e:2d:31:55:9d:18:4c:d9:6e:1b:53:04:ba:2c:c2:
                    a8:25:b3:8f:94:c0:99:34:c4:40:81:7e:7d:d2:a5:
                    86:30:8e:18:e8:82:29:10:5e:12:b4:c7:bc:94:dc:
                    8b:6c:c2:e4:f3:52:04:6d:10:54:84:a1:c3:43:0f:
                    d8:36:2a:02:c6:dc:2e:cb:7b:3c:5d:6c:2b:80:35:
                    6b:41:b4:96:f1:52:9c:9f:c6:7c:40:7d:a7:e7:68:
                    e9:4c:aa:48:1f:47:cd:8e:75:6b:e1:78:a7:a1:8e:
                    01:ce:cb:3a:e1:af:fb:45:55:5f:32:c3:10:11:62:
                    2d:6f:41:50:80:2d:1d:68:10:39:4e:1d:f0:c7:06:
                    c5:78:b1:98:ce:3c:7a:d0:6c:8a:78:ee:ae:e3:16:
                    ea:67:5f:b7:42:c3:e6:9e:62:69:b2:0d:63:fc:2f:
                    a6:d2:e6:99:a6:f7:31:a3:d7:6b:80:ae:73:32:9b:
                    a5:e0:6f:e6:ac:dc:25:8a:b2:bc:e0:a1:eb:8a:f2:
                    3c:5a:21:2b:d6:10:71:78:3b:cb:57:ee:6a:fd:2c:
                    b3:55:22:d7:8c:92:48:4d:b6:42:13:05:39:fa:8b:
                    b4:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:EC:2F:CB:34:B6:A4:30:E6:CE:ED:CA:D9:5B:BE:62:E2:91:0A:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b2456e11-ca83-4345-8884-0becc0831fb7/0ea31230-a310-3723-8781-993a54e89d70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b2456e11-ca83-4345-8884-0becc0831fb7/b2456e11-ca83-4345-8884-0becc0831fb7.crl

            X509v3 Authority Key Identifier:
                keyid:E8:0D:FA:19:40:E1:CD:5A:C6:10:AE:B8:44:D8:0B:05:C4:18:0B:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b2456e11-ca83-4345-8884-0becc0831fb7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.181.19.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:42:d0:c3:7d:58:b7:66:40:f9:1e:45:72:76:7e:98:6f:20:
         b8:84:ca:7f:f3:cd:2f:27:1b:48:0c:2d:e8:72:94:18:ab:de:
         cc:61:ed:9a:42:39:15:e7:6b:41:fa:b2:bf:d7:0a:68:4d:21:
         0e:f9:20:3b:f9:16:83:33:02:22:29:6d:25:52:e5:6a:d5:e6:
         d8:84:10:2a:2b:ea:49:1d:7e:99:bf:05:66:5f:bd:58:a6:15:
         0e:27:9f:f0:07:ce:6a:2f:81:c3:9c:46:29:0a:c4:83:27:45:
         5d:78:44:2c:8c:68:91:39:fa:f7:93:83:58:d0:31:bf:55:1d:
         0b:1d:92:51:84:1d:cf:98:5b:30:a2:37:89:a4:d9:5d:96:5c:
         30:a9:4b:35:95:bc:d5:3f:24:d1:bb:66:c2:55:95:6a:32:08:
         4c:d9:23:8e:a7:15:a5:bc:77:ed:5e:90:49:b6:40:d6:54:fa:
         05:6a:b2:34:2e:d4:bf:4d:11:db:61:96:88:13:11:62:ef:b4:
         93:b8:7b:1f:36:ec:21:31:19:33:7c:62:fc:e2:ae:cd:31:fb:
         61:66:8a:0d:b3:60:71:c6:6d:d8:63:4f:0c:93:e3:49:3e:52:
         97:ed:0a:72:89:b9:fc:9d:a6:9d:19:18:b7:3d:94:f6:91:d8:
         ae:09:22:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:09:19 2026 by rpki-client