Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/4f268d85-829a-35fe-8ec0-cb85d47c12ad.roa
File:                     4f268d85-829a-35fe-8ec0-cb85d47c12ad.roa (raw, json)
Hash identifier:          szOhr8xJeKveIXsl5aqensJPC2X34EASlWcIVL7z3XI=
Subject key identifier:   44:85:BF:2E:FF:8B:87:C2:F7:03:96:3D:64:8F:BC:F2:75:2B:B0:81
Certificate issuer:       /CN=4d80daa5-79dc-4c2a-8879-248a3f3e339c
Certificate serial:       010D0C9F4328584CACF1C07E0870E98689E11900
Authority key identifier: 45:24:B4:3E:8E:13:30:ED:D5:96:0D:39:A0:C5:0D:3D:96:C0:56:FA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/4f268d85-829a-35fe-8ec0-cb85d47c12ad.roa
Signing time:             Wed 28 Jan 2026 14:00:36 +0000
ROA not before:           Wed 28 Jan 2026 14:00:36 +0000
ROA not after:            Tue 28 Apr 2026 13:00:36 +0000
asID:                     14618
IP address blocks:        204.57.240.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/4d80daa5-79dc-4c2a-8879-248a3f3e339c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/4d80daa5-79dc-4c2a-8879-248a3f3e339c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ac:f1:c0:7e:08:70:e9:86:89:e1:19:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d80daa5-79dc-4c2a-8879-248a3f3e339c
        Validity
            Not Before: Jan 28 14:00:36 2026 GMT
            Not After : Apr 28 13:00:36 2026 GMT
        Subject: CN=754a6675-f2d7-457f-9a9d-9bb77472ecc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:b7:16:9e:a8:5c:2b:08:97:ad:08:dd:c6:ca:
                    15:c2:99:d5:b8:cc:75:e1:3e:c6:67:12:03:61:30:
                    4d:f4:21:8d:2d:39:49:5c:4b:b7:46:aa:9d:50:08:
                    08:f7:ae:02:bb:82:ec:98:c1:b9:27:7a:36:89:09:
                    04:92:18:4f:c7:db:b3:6c:84:01:a0:b7:7a:35:59:
                    ab:dc:24:1c:e1:ef:af:55:52:04:47:e3:5a:15:09:
                    8f:7b:6c:a4:6e:7b:7b:63:dc:e6:f5:af:d3:05:d5:
                    ec:38:d1:ad:81:e7:b9:24:04:38:a2:43:d9:2a:b6:
                    3a:4c:fb:76:52:4b:f0:a4:5e:5a:09:c4:3f:b0:ee:
                    72:83:1d:82:cb:a0:8a:51:65:be:dd:4e:24:02:5b:
                    c8:15:6c:ab:3d:0b:69:6b:c5:01:1f:5d:35:b3:e0:
                    cd:bd:12:ca:d3:ca:2c:56:eb:9e:70:64:dd:85:ec:
                    49:87:86:e8:c9:83:02:a9:25:1f:0e:e6:26:f8:b7:
                    46:12:7b:9c:14:ca:e3:41:5d:28:83:81:3a:bd:14:
                    4d:83:cb:21:3a:26:05:f1:57:a4:a1:5a:0d:79:9f:
                    56:bb:1f:03:f2:b5:7d:83:a2:73:59:b0:42:b1:a6:
                    2a:1d:21:4a:0a:94:70:96:a5:b0:ec:c6:d3:86:9e:
                    20:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:85:BF:2E:FF:8B:87:C2:F7:03:96:3D:64:8F:BC:F2:75:2B:B0:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/4f268d85-829a-35fe-8ec0-cb85d47c12ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/4d80daa5-79dc-4c2a-8879-248a3f3e339c.crl

            X509v3 Authority Key Identifier:
                keyid:45:24:B4:3E:8E:13:30:ED:D5:96:0D:39:A0:C5:0D:3D:96:C0:56:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.57.240.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:1e:81:e9:4c:06:9f:d1:7a:9c:2e:5d:ad:69:59:df:3f:83:
         7e:22:6d:50:b3:0c:8c:7a:d2:82:54:be:06:74:2e:bc:9c:0f:
         79:a1:1e:14:54:7a:ac:a5:a4:c4:96:b4:12:32:86:d2:be:f6:
         3f:a1:ba:f1:ba:a8:37:64:64:cf:b6:92:9a:1a:7d:f7:41:f2:
         85:ca:86:18:cd:ae:00:14:e9:3c:38:4d:ae:da:38:93:05:d5:
         28:5a:07:e6:86:a5:d3:40:09:89:26:9a:78:45:89:04:de:d5:
         90:90:30:d7:7f:15:20:d3:6d:63:47:42:6c:fc:37:89:f8:98:
         f5:1a:a1:51:33:50:70:a8:05:10:78:1d:90:98:1f:19:e6:bf:
         71:6e:c7:43:81:91:df:40:a5:6b:1d:9b:f7:6a:d0:53:58:b0:
         b2:94:19:5b:48:b6:4d:26:b5:47:48:97:ef:e8:db:de:d6:2a:
         64:35:c0:a0:71:a7:55:88:21:33:63:24:ed:d3:49:14:50:3b:
         d1:94:8e:65:8f:ce:76:f7:43:08:7e:21:eb:6f:37:76:2e:47:
         92:7f:90:9b:8d:9d:4f:ed:10:5d:ce:83:76:55:65:be:3d:9b:
         1f:db:81:8f:cd:b0:f1:b4:3d:9a:b0:2a:c6:7d:b7:13:37:3b:
         53:b3:a7:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:56:36 2026 by rpki-client