Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/f8aa40e5-2040-3785-9652-fe2f3564c313.roa
File:                     f8aa40e5-2040-3785-9652-fe2f3564c313.roa (raw, json)
Hash identifier:          mpO4M0WyYFLY4bTJ/00khmz03Z0xXIw12F7kXlRC++s=
Subject key identifier:   60:B2:09:DF:64:72:DD:6E:68:88:74:DB:EF:7C:2F:D4:F3:67:62:71
Certificate issuer:       /CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
Certificate serial:       010D0C9F4328584CAE573A71C46BC10A84AF6180
Authority key identifier: 0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/f8aa40e5-2040-3785-9652-fe2f3564c313.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     26744
IP address blocks:        206.180.134.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:57:3a:71:c4:6b:c1:0a:84:af:61:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=a1a9f7c4-7b88-4956-a990-5e618dd71c95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:63:bb:22:28:92:95:e5:0b:94:c2:1d:e9:4d:
                    76:a3:13:98:31:37:ef:3a:9b:ea:69:c6:28:73:09:
                    32:aa:a6:af:9d:e4:c2:3b:e5:e2:a4:e9:4c:a0:80:
                    f0:de:5f:94:99:26:cb:fb:d8:92:b9:bf:d6:99:e8:
                    89:75:73:51:d5:07:7d:6a:ea:c0:11:20:53:43:bd:
                    d6:ed:65:4b:39:03:32:a7:34:78:20:e6:65:97:fb:
                    25:99:ff:d8:c5:58:eb:f8:24:bc:01:cb:38:31:b5:
                    bd:b0:af:7a:d0:a8:1c:b6:0a:6c:be:c2:10:02:55:
                    a1:ea:d7:ec:35:dd:29:ff:cf:ac:9d:14:e9:8a:75:
                    b8:c0:e0:95:af:8c:5d:a9:e6:ad:5b:2d:c9:18:91:
                    d8:bb:82:36:b1:23:25:6b:00:26:24:9a:8f:6c:94:
                    25:9f:ff:d8:33:05:b0:9a:6c:da:75:da:19:5f:60:
                    d2:14:ec:d3:fc:34:db:97:56:70:af:8e:a8:ed:db:
                    74:e7:21:06:48:99:34:de:d3:1e:87:aa:d8:e9:b0:
                    65:41:b7:6b:ff:d0:95:fb:00:19:2f:d3:d3:f0:4d:
                    8f:06:9e:11:c9:ce:ec:ef:4b:d2:1e:ea:1f:fd:c7:
                    c2:44:27:2b:89:79:f4:b0:a6:54:a7:66:e6:01:f5:
                    1a:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:B2:09:DF:64:72:DD:6E:68:88:74:DB:EF:7C:2F:D4:F3:67:62:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/f8aa40e5-2040-3785-9652-fe2f3564c313.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl

            X509v3 Authority Key Identifier:
                keyid:0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.180.134.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:44:1f:9a:60:0d:22:4b:7f:c4:ab:01:47:ea:b6:b5:88:97:
         e8:41:ed:49:c1:d4:c4:4b:1c:c4:4e:84:ea:26:57:5c:67:b7:
         3c:89:73:e7:03:5d:85:9f:7e:3e:43:57:9c:85:96:59:c7:03:
         a2:2c:e3:43:e8:cd:5f:74:ce:c5:3d:fc:d1:cc:b3:49:69:b6:
         d4:e8:bb:2c:2c:92:61:24:1b:fe:e2:d5:8e:41:ea:68:c0:55:
         b4:b8:be:e8:94:d7:98:e0:2f:83:36:4f:aa:9c:c2:98:d2:94:
         01:23:19:d0:5f:4d:0d:e0:6b:d8:39:97:c1:30:61:e3:be:75:
         85:34:88:e2:03:da:f5:70:dc:56:99:8f:c5:e2:10:52:52:80:
         ea:8a:fc:0d:19:c0:47:7d:c6:19:6f:f5:39:0b:c4:58:a7:78:
         e7:5e:7c:af:2a:59:03:00:3b:32:b8:aa:aa:c9:8a:6c:1c:ee:
         ed:ee:b1:c1:e0:f9:69:d4:b0:a0:fb:06:e1:99:25:dd:57:fa:
         6b:d8:e0:96:16:e8:fb:fc:f8:22:53:a9:4b:8e:5b:31:05:f2:
         b7:ed:7f:c8:6a:2f:b3:9d:af:57:70:21:75:60:e6:21:51:3d:
         e8:e9:79:65:97:f5:02:b7:6b:d9:7d:76:e6:30:46:a5:ed:b2:
         14:5e:7b:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:26:20 2026 by rpki-client