Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/865c08fa-99a0-3677-830c-d5bd61bb2bd7.roa
File:                     865c08fa-99a0-3677-830c-d5bd61bb2bd7.roa (raw, json)
Hash identifier:          xnZXo0wWiGNXqHd1E47fMQ6igZp3fGILSIQPCg+DcnM=
Subject key identifier:   68:90:DF:4A:C1:79:BD:47:E0:13:67:5B:41:69:03:17:92:33:A7:0B
Certificate issuer:       /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
Certificate serial:       010D0C9F4328584D037CF9ABA0E06549253FD390
Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/865c08fa-99a0-3677-830c-d5bd61bb2bd7.roa
Signing time:             Sat 28 Feb 2026 14:00:40 +0000
ROA not before:           Sat 28 Feb 2026 14:00:40 +0000
ROA not after:            Fri 29 May 2026 13:00:40 +0000
asID:                     10794
IP address blocks:        171.161.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:03:7c:f9:ab:a0:e0:65:49:25:3f:d3:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
        Validity
            Not Before: Feb 28 14:00:40 2026 GMT
            Not After : May 29 13:00:40 2026 GMT
        Subject: CN=f104e055-a5fb-4b3e-9e82-6cb37b232547
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:cd:e1:44:9d:76:26:4b:1b:05:76:73:6d:66:
                    c5:9f:57:45:c3:68:c5:d0:00:e4:93:9a:49:29:e1:
                    e8:14:2d:d1:20:03:5c:68:6b:e7:83:f4:57:0f:36:
                    ba:8f:a6:ec:89:56:25:b0:c4:70:39:9a:3b:26:3e:
                    ee:96:09:96:23:a2:75:d5:70:1a:61:09:96:79:01:
                    70:2d:b4:fd:a5:a8:72:0a:d6:7d:d9:10:0f:6e:de:
                    56:13:78:cc:5f:44:6d:fa:15:97:5c:b9:99:56:7c:
                    5b:c5:5a:56:cd:f0:b2:af:97:a3:6c:e7:25:09:7a:
                    35:a2:4e:17:bd:39:d6:68:48:8a:8c:a9:66:aa:f8:
                    2d:69:79:ac:0f:16:8b:c1:e7:ec:35:77:93:54:dd:
                    0c:77:5f:45:38:63:0d:3a:b9:79:cf:a2:d0:3b:b9:
                    d7:03:1c:ed:e4:46:ac:19:47:cf:65:ac:9d:e8:7b:
                    90:a6:27:63:f0:e6:d6:48:c9:a0:c0:0f:fb:7a:fe:
                    f1:03:e3:ab:4e:ee:d7:f2:a8:21:57:8f:a7:b4:9c:
                    2d:24:e7:bf:b0:77:e3:86:09:a1:62:5c:6a:c1:2c:
                    43:9f:0b:b5:a9:fa:30:08:d2:8e:39:9b:97:8b:eb:
                    82:45:25:a8:81:84:8e:3f:89:25:a2:cb:e3:fa:42:
                    f3:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:90:DF:4A:C1:79:BD:47:E0:13:67:5B:41:69:03:17:92:33:A7:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/865c08fa-99a0-3677-830c-d5bd61bb2bd7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl

            X509v3 Authority Key Identifier:
                keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  171.161.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:84:76:2a:e8:f5:13:96:a8:39:e0:14:7e:dd:fd:14:89:4e:
         c1:fe:16:3e:a1:11:3d:6a:2a:86:30:1e:d5:6d:a2:d8:a2:37:
         3e:d2:94:75:d8:12:eb:17:b1:e2:c1:26:c5:a7:d8:d3:7b:3f:
         ee:11:01:02:fc:67:c8:0f:20:4e:c2:59:09:25:3d:93:09:65:
         fb:b0:75:a1:ab:71:6d:8c:7c:84:5f:47:eb:fd:7a:50:34:27:
         dc:dd:a5:bd:8b:31:1f:29:dc:ed:18:4e:6e:de:27:df:b5:ff:
         23:d0:bc:57:c2:e1:a8:9f:e4:a6:e3:98:e1:90:24:31:94:04:
         36:f8:58:7d:df:c6:bc:f4:eb:80:0e:9d:4c:48:70:52:e0:4d:
         71:47:2d:c7:52:d4:f3:03:19:0c:d6:ea:cf:e4:f1:b6:c2:64:
         05:24:bb:ae:f7:f9:f7:02:4e:84:18:0c:d0:96:5e:f9:45:d6:
         33:33:3d:aa:f7:e1:50:73:d4:ba:e9:1e:c9:69:9a:71:a7:d0:
         0c:64:10:da:a5:29:7a:00:ac:a1:c5:d8:ce:f3:59:0b:f6:ae:
         71:dd:91:fb:5c:07:a3:52:f4:f5:69:8d:7b:e2:83:4a:ff:5b:
         5f:92:7e:57:ca:7c:c9:82:8a:51:61:25:fb:e4:13:a6:93:d8:
         37:00:0f:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:59:12 2026 by rpki-client