Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc/beb65aaa-554e-3dad-9bca-51bf7fc1ee35.roa
File:                     beb65aaa-554e-3dad-9bca-51bf7fc1ee35.roa (raw, json)
Hash identifier:          d73cULkGnS4PS0rPyb3zw7YtxLAaTSlaIOb1p1kqsfw=
Subject key identifier:   B2:1B:27:ED:0F:FB:CF:9D:76:6D:4E:A5:F6:EA:6F:A4:A6:CE:CB:FA
Certificate issuer:       /CN=1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc
Certificate serial:       010D0C9F4328584CD40761AE76F2E433DC7E8760
Authority key identifier: EA:EB:95:40:D0:14:0A:23:A5:10:18:0E:E2:48:98:83:75:CD:BC:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc/beb65aaa-554e-3dad-9bca-51bf7fc1ee35.roa
Signing time:             Wed 11 Feb 2026 14:00:41 +0000
ROA not before:           Wed 11 Feb 2026 14:00:41 +0000
ROA not after:            Tue 12 May 2026 13:00:41 +0000
asID:                     174
IP address blocks:        170.75.160.0/20 maxlen: 20
                          172.81.176.0/21 maxlen: 21
                          2602:ffb6::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc/1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc/1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d4:07:61:ae:76:f2:e4:33:dc:7e:87:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc
        Validity
            Not Before: Feb 11 14:00:41 2026 GMT
            Not After : May 12 13:00:41 2026 GMT
        Subject: CN=9753492e-6116-426e-999f-b2f947cc19e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:8a:d1:8d:90:e7:d9:09:73:9a:d3:1c:9d:b3:
                    b3:00:78:1a:c3:57:19:ed:b7:83:31:f6:fc:fd:c0:
                    61:14:42:e2:89:e3:7e:93:4f:e5:53:21:6a:60:4d:
                    88:30:12:b1:5c:7c:a4:ae:d9:3c:dd:94:1b:bb:33:
                    81:45:d0:a8:8c:cd:3d:04:89:21:2b:42:8c:ec:cd:
                    20:ae:e6:19:03:85:47:e2:fa:90:62:2c:b0:44:14:
                    a2:0a:49:f9:72:20:8e:5f:92:f7:e6:da:dc:f3:c2:
                    c0:c4:1f:03:b8:7c:62:e2:32:37:ef:e0:83:fb:76:
                    23:3d:1a:f3:b4:c8:73:17:3c:57:34:5e:94:bd:bb:
                    a1:3f:12:02:a1:db:46:21:19:44:de:a9:c3:38:62:
                    c9:21:a4:96:0f:c2:26:dd:4c:cb:39:0a:d4:f0:09:
                    dc:24:fc:91:36:bd:45:d8:e5:be:fb:38:37:71:79:
                    a8:ac:d7:7a:4a:6d:1c:33:ba:6e:4a:11:78:a0:d7:
                    b6:dd:97:e9:f5:66:44:fd:0b:2e:01:64:76:a8:a1:
                    5d:39:cc:fa:3b:f1:53:4b:28:29:22:51:6c:01:c2:
                    32:45:c1:aa:3a:93:ce:c8:83:f1:63:76:29:98:71:
                    f8:14:07:90:88:07:c9:e2:a2:0d:71:09:c2:bf:0f:
                    7e:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:1B:27:ED:0F:FB:CF:9D:76:6D:4E:A5:F6:EA:6F:A4:A6:CE:CB:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc/beb65aaa-554e-3dad-9bca-51bf7fc1ee35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc/1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc.crl

            X509v3 Authority Key Identifier:
                keyid:EA:EB:95:40:D0:14:0A:23:A5:10:18:0E:E2:48:98:83:75:CD:BC:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.75.160.0/20
                  172.81.176.0/21
                IPv6:
                  2602:ffb6::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:a4:1c:a4:c4:27:d2:b5:9c:26:45:ae:b1:a6:a2:ae:08:9d:
         eb:05:82:91:53:e6:ed:c2:10:98:40:70:0a:a8:db:a3:0f:95:
         9a:89:6d:19:3f:9e:4a:c4:f5:68:ee:02:2b:cc:7e:9b:0d:71:
         81:cc:9b:3c:f6:88:a5:b3:f8:5f:d6:2f:7c:e9:6f:87:9f:20:
         6b:e3:91:bd:55:af:7b:ce:c2:a1:5f:4a:39:f7:2f:68:b5:8b:
         e0:6d:a8:52:54:6f:ac:53:c8:d6:be:b9:0b:64:01:36:e7:5a:
         ac:99:db:0c:38:d4:03:94:52:b8:b6:9a:7c:a5:f5:ea:6f:fe:
         e8:a4:a0:ff:84:e4:7b:1e:6d:ca:a5:ad:bc:3c:0d:9d:a7:64:
         27:3b:27:76:bd:1b:54:0b:0b:00:8a:97:92:54:70:6a:41:a5:
         de:a6:c3:c3:a0:3b:85:39:64:07:4c:c3:c1:31:dd:61:7f:e1:
         59:df:a2:9d:f9:a4:e1:d5:bf:4b:b8:92:50:05:c7:f8:5c:fb:
         3b:c1:b9:3f:9e:3e:1b:b1:28:33:a7:08:76:09:7a:be:3b:db:
         9b:14:d9:21:5d:90:55:41:3d:1e:06:26:3e:50:16:54:5b:57:
         38:a7:62:39:99:27:d8:96:30:35:81:d9:b7:4a:e1:ac:82:b1:
         42:9c:59:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:22:21 2026 by rpki-client