Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/7fd155e7-23a1-31e5-8943-3860335773e4.roa
File:                     7fd155e7-23a1-31e5-8943-3860335773e4.roa (raw, json)
Hash identifier:          inLnayvcrTdPQrlaS/14yvy6FBXBl6aHpbQaqq4znUA=
Subject key identifier:   3A:42:66:D8:B9:97:CE:36:FA:48:05:CD:F9:6A:36:8D:12:B6:2D:55
Certificate issuer:       /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
Certificate serial:       010D0C9F4328584D037D59196B4B80185AF79F80
Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/7fd155e7-23a1-31e5-8943-3860335773e4.roa
Signing time:             Sat 28 Feb 2026 14:00:40 +0000
ROA not before:           Sat 28 Feb 2026 14:00:40 +0000
ROA not after:            Fri 29 May 2026 13:00:40 +0000
asID:                     10794
IP address blocks:        171.161.16.0/22 maxlen: 22
                          171.161.16.0/24 maxlen: 24
                          171.161.17.0/24 maxlen: 24
                          171.161.18.0/24 maxlen: 24
                          171.161.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:03:7d:59:19:6b:4b:80:18:5a:f7:9f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
        Validity
            Not Before: Feb 28 14:00:40 2026 GMT
            Not After : May 29 13:00:40 2026 GMT
        Subject: CN=af860e48-cc48-4a38-90ca-f73874c234e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:8c:c9:87:7a:02:15:48:ff:d3:f9:c2:ea:c9:
                    bc:46:e1:27:8b:c8:2f:13:dc:34:a8:e6:8c:15:99:
                    78:04:19:0b:7d:aa:7e:51:1b:52:09:75:8d:eb:c4:
                    22:77:26:37:a1:d8:69:8e:6a:14:fe:e9:64:e2:54:
                    6f:ad:20:67:50:50:4e:5a:5a:e4:07:c6:b9:11:bb:
                    58:9f:f6:86:03:10:1d:ec:b7:b6:51:c1:24:1a:7f:
                    45:23:e1:47:c8:7c:8c:88:bc:d6:1a:67:d9:ea:03:
                    62:63:10:55:d4:6c:e6:97:44:4c:29:b7:70:ff:58:
                    ee:8e:f8:39:f1:43:f5:59:6a:d5:ed:50:d0:10:a1:
                    c5:f8:3a:29:54:73:e4:2f:4e:16:d7:b7:75:9d:f1:
                    eb:1b:5b:60:fa:cc:65:b5:48:09:8c:1a:f2:0b:15:
                    3b:80:a3:1f:b7:e6:8e:2e:38:c3:73:a4:62:fb:1f:
                    93:d7:e9:d4:a5:5d:5d:a4:19:54:a8:43:0c:bc:38:
                    a2:76:2b:0e:a2:91:5b:8f:5f:19:eb:b4:64:3e:e9:
                    3e:95:3c:dd:5f:bd:24:5d:61:8b:cd:db:a3:9e:9d:
                    a9:a4:7e:40:41:4a:b8:b7:10:e1:a0:82:02:b6:86:
                    39:7c:67:fd:3a:f5:2b:ff:6d:6e:1b:b2:84:a0:56:
                    c9:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:42:66:D8:B9:97:CE:36:FA:48:05:CD:F9:6A:36:8D:12:B6:2D:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/7fd155e7-23a1-31e5-8943-3860335773e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl

            X509v3 Authority Key Identifier:
                keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  171.161.16.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:40:c0:48:02:1c:8d:78:28:d9:00:29:8c:20:00:a1:c7:00:
         71:69:14:3b:c4:89:7e:69:db:d3:b9:62:b1:58:8d:b4:63:e2:
         1c:53:da:d8:c3:1c:72:2c:1d:6c:a7:5f:0b:ec:20:9a:46:02:
         37:59:1a:87:ff:8d:42:ae:4f:b0:0a:46:58:47:52:e6:d5:53:
         c0:c7:e2:a3:3f:6d:eb:39:8b:1b:ee:d0:67:e9:bb:5b:65:93:
         59:55:d8:64:5e:0d:cf:1b:57:f9:15:a3:30:51:61:d0:a3:d9:
         f3:6a:40:80:0d:78:51:b1:16:1c:76:d2:5f:87:5b:98:66:42:
         26:2f:49:f2:6b:43:ae:86:52:4b:3c:f1:ce:0d:0f:5a:49:59:
         4b:85:6a:e4:b9:ed:c9:00:3e:23:57:ff:c4:a1:cf:54:57:87:
         6d:b6:fd:7f:ad:02:00:e0:b2:40:aa:ef:14:1a:ab:4b:69:d3:
         9e:4e:4f:37:32:b9:c8:fe:77:31:18:ac:52:7d:df:09:6d:b1:
         d3:5c:5a:0a:35:d0:8d:85:13:25:7c:61:39:93:7a:c8:0a:b1:
         d9:3d:fc:10:a9:c4:53:9e:09:42:cd:8b:97:38:0c:86:9b:7b:
         80:03:15:48:c3:af:7c:41:bf:c2:38:ce:a2:29:7a:59:24:96:
         42:a3:ad:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:28:54 2026 by rpki-client