Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/00ac3cd2-c333-3dd9-a1d3-b44a1ed86058.roa
File:                     00ac3cd2-c333-3dd9-a1d3-b44a1ed86058.roa (raw, json)
Hash identifier:          XwHhKKxUNAEsM2oWgkAqjVmq/aCnlElIsBZFTfMd30o=
Subject key identifier:   0A:62:04:8F:8D:91:79:D7:04:98:A5:13:2B:78:D0:16:6C:23:C5:23
Certificate issuer:       /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
Certificate serial:       010D0C9F4328584D037D507A047E0340D130E500
Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/00ac3cd2-c333-3dd9-a1d3-b44a1ed86058.roa
Signing time:             Sat 28 Feb 2026 14:00:40 +0000
ROA not before:           Sat 28 Feb 2026 14:00:40 +0000
ROA not after:            Fri 29 May 2026 13:00:40 +0000
asID:                     10794
IP address blocks:        171.162.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:03:7d:50:7a:04:7e:03:40:d1:30:e5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
        Validity
            Not Before: Feb 28 14:00:40 2026 GMT
            Not After : May 29 13:00:40 2026 GMT
        Subject: CN=8473a2f9-7a0c-47ce-92fe-0d4033ca110a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:30:41:c4:d5:c8:c3:fc:1a:ec:49:d0:09:28:
                    5b:e9:5c:16:1f:e0:28:9b:93:e3:44:21:f9:c7:7a:
                    c9:80:ea:cb:03:e3:1b:4d:73:0b:92:e8:4c:70:53:
                    11:39:6a:ad:79:b7:ab:15:a4:cb:9f:77:63:7a:61:
                    9a:80:de:8b:8b:a9:17:67:17:3f:29:04:c6:8a:bc:
                    84:ac:89:cb:3f:c6:d3:db:c9:9f:f5:9d:25:06:a6:
                    b5:d7:9e:d1:4b:66:5c:8a:6c:f9:e1:3d:d8:2a:9d:
                    ca:49:45:a3:80:d0:a2:3e:99:9f:16:ca:ba:3e:2d:
                    da:82:32:5a:39:4c:db:02:d3:90:d1:5a:26:df:a9:
                    13:9f:c3:26:e2:bb:6d:e3:bb:be:bf:a2:48:2a:8e:
                    f3:3e:7b:30:3d:90:80:09:ef:61:1f:cb:d1:04:28:
                    98:45:bd:87:07:47:86:fe:4a:9b:8a:be:69:66:b8:
                    64:01:76:3a:cd:9c:05:0e:14:cc:95:82:a3:94:d9:
                    d2:6c:8a:9f:df:35:64:70:fc:16:cd:ae:e6:52:76:
                    f5:f5:28:5a:18:f8:18:ca:13:db:52:33:21:84:2b:
                    ca:c6:20:c1:35:8b:5a:f7:ad:b7:bb:8d:c1:44:e9:
                    bb:e9:96:ea:a9:8a:fb:c3:42:7a:17:0e:47:14:39:
                    7d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:62:04:8F:8D:91:79:D7:04:98:A5:13:2B:78:D0:16:6C:23:C5:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/00ac3cd2-c333-3dd9-a1d3-b44a1ed86058.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl

            X509v3 Authority Key Identifier:
                keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  171.162.7.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:56:29:58:ac:5f:d8:31:dc:8f:80:a6:25:39:28:2f:ee:3d:
         80:e0:21:a8:8c:e1:23:5f:6e:0b:52:13:c3:bb:30:7d:60:e1:
         a1:25:e4:ac:a8:32:6f:62:f0:45:86:80:18:fc:f2:f9:86:6c:
         3d:44:9d:82:6c:3b:6d:e6:33:50:32:34:ba:31:ba:e0:22:54:
         43:51:0c:7a:1d:b9:7b:c8:16:f8:8a:99:d7:b7:4c:f7:0f:32:
         41:82:c0:37:61:3f:b1:46:e4:2c:db:80:f2:bc:a7:1a:ce:e7:
         eb:e6:5f:89:eb:b1:01:34:40:81:02:80:63:d1:0a:99:74:c9:
         22:ae:5f:3e:53:54:0d:94:1d:b3:34:f0:49:60:e2:72:f6:af:
         46:a0:c1:83:c1:b4:94:5e:a0:16:a6:51:4d:8a:65:22:f4:a4:
         78:4a:60:42:e5:4d:0c:af:f2:ba:20:5e:18:eb:0d:c2:fd:70:
         92:c1:44:e6:88:6f:8f:f3:7c:fa:e6:c2:86:2e:8a:33:9f:c0:
         8a:df:42:bd:23:c1:64:ff:fd:bd:7f:71:ae:2f:2f:54:9a:86:
         69:51:9d:0c:47:23:ca:52:f3:b9:88:d9:9a:7c:0f:ce:f2:85:
         37:c3:a5:98:c8:c0:53:44:bd:90:91:14:0a:da:38:08:98:6f:
         8f:af:55:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:18:17 2026 by rpki-client