Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/55031a70-6ea8-4521-acbd-0217ada4cf57/10edbdbf-fefe-3135-b393-2a1c2718221a.roa
File:                     10edbdbf-fefe-3135-b393-2a1c2718221a.roa (raw, json)
Hash identifier:          GxWixFCD7zwaOsbccVpkkKUpkTQHm74FkOEO0IGQDfY=
Subject key identifier:   97:FB:09:A7:A8:7B:BC:4B:2D:80:F6:7A:DB:21:49:E6:E6:87:08:38
Certificate issuer:       /CN=55031a70-6ea8-4521-acbd-0217ada4cf57
Certificate serial:       010D0C9F4328584CDB020D147B1EFADE82A37480
Authority key identifier: 69:40:BA:02:73:9A:6F:7E:97:63:19:0E:44:61:29:E9:8C:E2:C7:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/55031a70-6ea8-4521-acbd-0217ada4cf57.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/55031a70-6ea8-4521-acbd-0217ada4cf57/10edbdbf-fefe-3135-b393-2a1c2718221a.roa
Signing time:             Sat 14 Feb 2026 02:00:32 +0000
ROA not before:           Sat 14 Feb 2026 02:00:32 +0000
ROA not after:            Fri 15 May 2026 01:00:32 +0000
asID:                     36000
IP address blocks:        142.71.8.0/24 maxlen: 24
                          142.71.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/55031a70-6ea8-4521-acbd-0217ada4cf57/55031a70-6ea8-4521-acbd-0217ada4cf57.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/55031a70-6ea8-4521-acbd-0217ada4cf57/55031a70-6ea8-4521-acbd-0217ada4cf57.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/55031a70-6ea8-4521-acbd-0217ada4cf57.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:db:02:0d:14:7b:1e:fa:de:82:a3:74:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55031a70-6ea8-4521-acbd-0217ada4cf57
        Validity
            Not Before: Feb 14 02:00:32 2026 GMT
            Not After : May 15 01:00:32 2026 GMT
        Subject: CN=59b0f881-3368-4fb9-842f-9efb309ffc32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:11:37:10:2b:7f:35:31:35:fa:6d:2b:b1:97:
                    ad:95:73:b3:ca:e1:62:87:0e:34:75:4b:e1:cd:41:
                    f1:cf:53:35:00:72:55:37:13:00:47:a7:9b:c4:9c:
                    ea:9e:6b:f8:73:cf:1f:c0:7f:8a:1d:25:16:14:29:
                    7c:26:6c:86:a4:ac:89:76:5d:dd:10:04:7e:8b:71:
                    a7:0d:e3:d8:0f:a9:0d:f1:a7:d0:d9:d9:47:d8:2e:
                    f5:02:06:47:cb:8f:c8:6f:b6:21:5f:0c:28:62:35:
                    50:0d:bd:20:e9:a9:f6:bf:27:cd:3b:e2:69:83:0e:
                    9d:41:e9:14:4b:10:6a:39:c2:61:9e:73:88:82:8a:
                    7b:ca:b6:ee:ea:e0:e0:83:82:c0:56:d4:f2:81:62:
                    2a:bd:5a:2a:67:75:bb:72:f0:3b:34:02:c0:89:4e:
                    31:fc:e5:18:9c:28:3c:34:c2:ae:0e:fd:28:4a:70:
                    83:ea:bc:c3:6a:d7:78:f7:d2:2a:1a:ad:f1:51:4d:
                    d6:f7:ef:78:e2:98:0e:9d:a4:75:e4:9d:08:43:92:
                    30:b7:1e:4e:55:5c:7d:e7:c4:a3:1c:34:79:17:e6:
                    47:c9:d0:34:29:f5:5b:8a:7d:b2:0d:eb:b7:c2:00:
                    a8:95:96:55:7b:df:ee:dd:05:67:d4:87:7b:0e:0a:
                    90:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:FB:09:A7:A8:7B:BC:4B:2D:80:F6:7A:DB:21:49:E6:E6:87:08:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/55031a70-6ea8-4521-acbd-0217ada4cf57/10edbdbf-fefe-3135-b393-2a1c2718221a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/55031a70-6ea8-4521-acbd-0217ada4cf57/55031a70-6ea8-4521-acbd-0217ada4cf57.crl

            X509v3 Authority Key Identifier:
                keyid:69:40:BA:02:73:9A:6F:7E:97:63:19:0E:44:61:29:E9:8C:E2:C7:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/55031a70-6ea8-4521-acbd-0217ada4cf57.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.71.8.0/24
                  142.71.10.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:41:5a:b8:3f:ce:a2:f9:19:51:be:bf:c0:41:f1:4c:6f:99:
         0b:a6:4c:2e:a5:98:8c:48:92:ba:41:2b:12:26:8c:cf:1f:a6:
         4e:73:ba:3e:82:cb:c2:90:a9:47:dc:b2:41:e9:65:4a:fc:b5:
         fa:fb:09:a3:0b:2e:bc:6a:f1:50:bb:0f:72:5b:86:94:c6:b2:
         58:6a:30:81:0f:3e:9f:a8:ef:5e:6b:04:df:7a:4d:e1:29:46:
         3c:b8:4b:67:76:ee:2c:e0:25:26:ec:a1:51:3d:3b:15:b5:15:
         15:87:d0:28:1a:aa:4b:f8:23:30:97:bb:96:a0:85:9a:1c:37:
         a2:c2:c4:1d:e2:ab:ca:74:86:1d:26:91:bf:92:07:a0:0d:0e:
         5f:9a:60:26:c9:2b:f1:7b:5a:03:26:50:44:46:d4:7e:e4:e2:
         5c:b9:94:46:50:a5:0b:42:7c:a2:d7:29:92:af:09:04:97:ae:
         a9:e4:02:b1:df:34:62:07:f1:5b:e5:94:87:d4:90:b8:88:9c:
         be:7e:a2:fb:eb:b7:c8:05:95:35:de:a3:a3:5b:c5:6a:0b:3b:
         1f:c7:19:28:ca:e0:5c:79:af:94:c4:d8:f5:fc:90:d0:46:2c:
         48:52:04:ce:ee:2f:43:0c:aa:25:da:76:16:db:4c:ce:dd:9f:
         1e:3f:45:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:24:44 2026 by rpki-client