Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/40fe0f51-dc5d-309e-a6af-9cacd52547ee.roa
File:                     40fe0f51-dc5d-309e-a6af-9cacd52547ee.roa (raw, json)
Hash identifier:          KCs6HKY5lG0XQ+42KmSZK76ySRafT0de+iegHunGuSI=
Subject key identifier:   28:53:2A:B6:43:25:22:35:8F:EF:64:3B:3C:BF:D1:4F:1B:9B:EA:9E
Certificate issuer:       /CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
Certificate serial:       010D0C9F4328584CAE572AABA58B15F753137140
Authority key identifier: 0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/40fe0f51-dc5d-309e-a6af-9cacd52547ee.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     393740
IP address blocks:        206.180.154.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:57:2a:ab:a5:8b:15:f7:53:13:71:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=69097450-8f72-41d9-b02d-adfc1a7ff760
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:7e:bf:8e:73:1e:82:fe:3d:34:99:f1:e3:6b:
                    ee:cc:b4:7c:5d:d5:53:40:4b:4c:bb:d8:1c:93:d2:
                    e5:fa:01:3e:c0:ec:be:ed:48:ec:c9:15:70:03:a7:
                    74:fd:bd:df:da:e6:39:45:06:5c:f5:45:cc:e3:14:
                    b0:13:b7:d9:9d:85:26:e6:e9:83:6d:2a:26:11:23:
                    32:f4:10:13:78:e3:77:8b:07:e8:5e:7d:4c:c3:af:
                    57:7d:7b:e5:64:4c:d4:4b:3d:3c:20:5f:9b:48:52:
                    a3:c9:cd:12:09:cb:23:cb:cc:22:e6:43:b3:0d:3a:
                    12:f4:1c:b7:e7:e5:ea:4b:a7:c0:1c:65:13:8b:57:
                    82:50:17:88:a5:10:78:9c:fb:bf:70:93:f5:71:0d:
                    48:04:0b:4c:bd:33:31:45:63:c5:fd:02:7f:3a:8b:
                    75:f8:da:2f:bc:4f:f1:06:e0:05:51:ea:13:ea:0b:
                    7b:39:45:9f:4b:9e:d0:91:06:7d:3a:6f:ed:99:ed:
                    0e:62:e3:82:84:af:83:0c:c0:0b:f1:c2:1c:5f:ef:
                    c7:90:db:e7:d6:c8:a7:5d:0d:34:9e:12:53:83:41:
                    fe:1c:1a:f0:de:26:54:47:7e:97:9b:e8:bf:cf:37:
                    be:a2:d2:70:88:31:80:7f:52:cd:84:3d:2b:b7:82:
                    6e:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:53:2A:B6:43:25:22:35:8F:EF:64:3B:3C:BF:D1:4F:1B:9B:EA:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/40fe0f51-dc5d-309e-a6af-9cacd52547ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl

            X509v3 Authority Key Identifier:
                keyid:0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.180.154.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:a9:12:d4:9b:97:a4:c8:6b:07:18:34:4a:fd:9a:9e:bc:c1:
         26:8a:3b:c9:cf:99:58:5f:ae:06:f7:1d:54:90:6b:ca:ec:84:
         b1:b8:28:45:f1:07:ac:74:23:76:47:18:db:f7:1c:48:12:ae:
         3d:85:e2:b9:05:67:81:23:5f:b6:f9:28:8e:69:b8:bc:f9:ff:
         0d:10:0f:25:83:8b:eb:14:5b:a7:a7:53:19:2f:7e:b0:17:6e:
         b3:d8:9f:a3:6e:ab:b2:e1:4b:32:de:1c:45:10:43:77:bd:bb:
         67:8d:e9:19:ea:2f:0d:2d:af:c5:ac:68:0b:d6:9f:82:2b:8c:
         e6:69:46:94:b5:41:e8:2d:13:10:89:31:da:b5:a1:d4:b1:95:
         be:31:44:26:89:6f:5b:fb:f1:bc:bb:22:65:72:b6:c8:e8:41:
         45:ae:2d:98:23:a3:09:72:c3:53:10:c8:53:82:66:80:d3:68:
         65:98:14:41:5d:12:28:0b:b8:1e:b6:f2:8f:a2:af:35:f5:64:
         b6:b6:07:48:6d:71:de:dd:9d:3c:49:a2:a3:66:04:9c:a7:25:
         6d:0b:a3:ab:8b:42:91:ab:56:6d:cb:d0:f6:99:99:5c:3d:9d:
         94:8d:64:90:5c:d3:00:e2:bd:0a:b7:89:bf:e4:05:d7:0c:42:
         9f:5f:ca:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:27:05 2026 by rpki-client