Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d07f7786-4a6c-47ef-8d66-b603024f6d87/920c1219-daf5-3a2d-bbfa-5e33d008766b.roa
File:                     920c1219-daf5-3a2d-bbfa-5e33d008766b.roa (raw, json)
Hash identifier:          I7tXUUaM0Co5okRBjEqrgAQnGs+6f168MU7IaJel0Nc=
Subject key identifier:   A3:3A:C1:5D:E0:7D:10:1F:7D:0A:9C:6E:2D:57:87:93:17:5A:4C:C1
Certificate issuer:       /CN=d07f7786-4a6c-47ef-8d66-b603024f6d87
Certificate serial:       010D0C9F4328584CB551F0506C9C264E8979A9D0
Authority key identifier: 6F:2C:A5:E8:3D:8F:C9:0A:24:D7:DA:E4:20:30:5C:2F:9B:AD:7C:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d07f7786-4a6c-47ef-8d66-b603024f6d87.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d07f7786-4a6c-47ef-8d66-b603024f6d87/920c1219-daf5-3a2d-bbfa-5e33d008766b.roa
Signing time:             Sat 31 Jan 2026 14:00:39 +0000
ROA not before:           Sat 31 Jan 2026 14:00:39 +0000
ROA not after:            Fri 01 May 2026 13:00:39 +0000
asID:                     14618
IP address blocks:        162.254.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d07f7786-4a6c-47ef-8d66-b603024f6d87/d07f7786-4a6c-47ef-8d66-b603024f6d87.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d07f7786-4a6c-47ef-8d66-b603024f6d87/d07f7786-4a6c-47ef-8d66-b603024f6d87.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d07f7786-4a6c-47ef-8d66-b603024f6d87.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b5:51:f0:50:6c:9c:26:4e:89:79:a9:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d07f7786-4a6c-47ef-8d66-b603024f6d87
        Validity
            Not Before: Jan 31 14:00:39 2026 GMT
            Not After : May  1 13:00:39 2026 GMT
        Subject: CN=1fb5c8cd-298c-4b57-9e2b-e45f5df185fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ed:bb:0a:65:d0:ec:36:07:7f:9a:fb:e6:81:
                    fd:51:93:5a:6b:07:72:2f:4f:06:90:70:03:1e:bf:
                    46:79:c0:06:70:d6:53:72:a4:57:46:29:36:cc:99:
                    ae:55:b7:6d:69:ca:94:87:f8:0f:ae:a1:b3:a7:1c:
                    73:b0:b7:4b:27:4a:a1:6a:1b:7d:72:44:1e:4c:f5:
                    12:aa:1a:6b:5f:9f:8d:5c:99:4e:67:33:79:c5:6a:
                    45:2f:87:5f:14:f0:5e:01:9c:f9:27:9a:ae:46:2b:
                    86:96:69:10:3a:10:bc:52:40:0f:97:de:24:52:e8:
                    1e:41:ab:70:1b:a3:96:c4:07:af:8a:9d:1e:16:97:
                    ba:60:bb:75:32:6e:cd:08:00:2b:ee:78:c3:61:6c:
                    7f:62:cd:b1:52:c4:d3:c0:76:96:2c:92:af:53:42:
                    a9:20:b1:af:71:7a:23:36:d9:e1:30:0c:79:ec:58:
                    11:4c:09:25:93:be:02:31:45:ba:4b:eb:4e:66:90:
                    89:69:10:17:2d:80:4f:ab:dc:33:18:8d:ff:27:d5:
                    24:f1:05:a3:01:b8:0a:15:02:cc:a1:df:bf:be:19:
                    ac:70:d3:d0:13:d2:63:63:79:18:e9:46:09:80:bb:
                    e5:44:8b:05:18:ad:7b:6c:25:af:cf:83:f1:22:cf:
                    43:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:3A:C1:5D:E0:7D:10:1F:7D:0A:9C:6E:2D:57:87:93:17:5A:4C:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d07f7786-4a6c-47ef-8d66-b603024f6d87/920c1219-daf5-3a2d-bbfa-5e33d008766b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d07f7786-4a6c-47ef-8d66-b603024f6d87/d07f7786-4a6c-47ef-8d66-b603024f6d87.crl

            X509v3 Authority Key Identifier:
                keyid:6F:2C:A5:E8:3D:8F:C9:0A:24:D7:DA:E4:20:30:5C:2F:9B:AD:7C:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d07f7786-4a6c-47ef-8d66-b603024f6d87.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.254.233.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:6a:53:29:e4:90:3a:cd:58:a0:ce:b2:c3:aa:15:3a:3e:ec:
         ae:2d:e0:73:52:88:6e:93:72:d6:a1:6e:d4:5d:40:5b:90:40:
         a3:49:22:16:86:bc:85:4d:b2:86:b3:59:80:1e:92:1c:c7:ae:
         fc:3f:78:d8:b0:73:57:fb:1d:03:31:28:27:2d:82:40:9e:8a:
         4c:3d:16:8b:8f:a8:8a:3e:c0:20:86:96:8c:db:34:a9:aa:65:
         94:ad:36:32:bd:64:d4:ef:7d:fd:a6:7d:f3:69:b6:e7:e6:49:
         33:03:24:d6:52:7a:d7:f8:0b:c4:b5:35:88:63:34:3b:fa:16:
         66:5f:6c:a7:87:fd:a7:9a:fc:7f:94:57:1b:a4:59:e7:c4:46:
         f6:f7:c0:ea:95:70:fa:62:4d:ed:ca:e3:00:03:36:f5:fd:68:
         50:0b:63:e0:02:17:8a:ba:a6:4f:bd:70:d9:43:f4:60:53:aa:
         cf:2c:02:a1:5a:a3:33:fb:3c:36:51:e5:6c:4f:38:d9:8a:8f:
         06:a2:dd:8b:c1:83:11:dd:0e:0d:67:6f:04:71:db:ef:a1:75:
         86:03:51:da:ce:4d:34:19:c3:b8:64:01:50:7c:6f:2d:37:4f:
         3e:16:ff:54:4e:d4:57:20:23:62:23:ca:27:8b:58:4d:3f:2a:
         d2:2d:5d:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:31:23 2026 by rpki-client