Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/9a9923ae-7a0e-3e14-8809-47fccc39d6ee.roa
File:                     9a9923ae-7a0e-3e14-8809-47fccc39d6ee.roa (raw, json)
Hash identifier:          i/AYO5ihyZgMZluJhHcfFqpK+Of362RZ25NZPxiDTW0=
Subject key identifier:   3C:7D:BB:1B:DC:AC:0E:C3:CD:83:21:1A:98:19:C2:7B:3D:36:8D:DE
Certificate issuer:       /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
Certificate serial:       010D0C9F4328584D037D138CAD11AD48D774B680
Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/9a9923ae-7a0e-3e14-8809-47fccc39d6ee.roa
Signing time:             Sat 28 Feb 2026 14:00:40 +0000
ROA not before:           Sat 28 Feb 2026 14:00:40 +0000
ROA not after:            Fri 29 May 2026 13:00:40 +0000
asID:                     10794
IP address blocks:        171.161.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:03:7d:13:8c:ad:11:ad:48:d7:74:b6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
        Validity
            Not Before: Feb 28 14:00:40 2026 GMT
            Not After : May 29 13:00:40 2026 GMT
        Subject: CN=6cf55a8f-d94d-429d-a13f-41945ba662dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:80:05:9e:d5:89:8f:cc:41:41:08:31:b6:3e:
                    fa:ec:7f:46:d3:21:a9:21:f6:04:f7:d9:3b:38:e0:
                    aa:21:0c:e4:2e:f5:28:21:01:ab:80:66:d6:17:36:
                    15:06:30:5b:ef:a4:79:2e:3a:6f:f9:1a:cf:ee:c7:
                    4d:09:47:75:0f:b7:4a:0a:f8:04:59:7f:b2:0f:ff:
                    af:d5:fa:52:05:d8:1f:d5:ce:87:d8:c9:ca:ca:9e:
                    6f:bf:25:f0:e1:e8:33:35:51:88:08:b8:dc:17:8c:
                    53:9b:eb:9e:64:95:46:af:d5:f2:1d:71:76:ad:ec:
                    62:b4:76:61:84:72:4c:a5:0e:c1:7e:b1:5a:fb:ba:
                    5b:d6:a2:cb:cd:b3:fe:1b:ee:bf:fb:1c:9e:f4:0f:
                    5f:22:90:1c:b2:b5:a4:66:40:93:42:0d:b8:31:51:
                    b7:6a:fa:5d:70:40:a6:74:ac:99:d7:e7:31:ab:80:
                    70:f7:8b:0c:d3:f2:28:ba:29:13:a0:ae:61:fa:3b:
                    af:76:28:57:58:83:fe:95:45:09:c3:3b:f1:25:aa:
                    33:6e:6d:c1:d2:c5:0a:ef:ee:86:31:e9:cd:d6:08:
                    9a:4d:69:b9:03:26:b4:71:fc:0e:99:ca:06:1e:4b:
                    58:bc:83:36:b1:c6:99:89:28:18:66:e5:1c:6e:7a:
                    85:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:7D:BB:1B:DC:AC:0E:C3:CD:83:21:1A:98:19:C2:7B:3D:36:8D:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/9a9923ae-7a0e-3e14-8809-47fccc39d6ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl

            X509v3 Authority Key Identifier:
                keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  171.161.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:a1:94:d2:37:07:07:b5:e4:31:6b:01:d9:db:42:84:b9:bf:
         73:72:15:9a:3c:ee:91:b0:14:51:2f:f3:ad:e4:e9:15:eb:af:
         b8:43:18:c8:1b:c9:5d:ee:13:22:75:7c:60:1b:8d:50:7f:44:
         e8:2a:82:0d:82:2c:c6:75:9a:b8:51:d7:35:41:c1:f0:ab:66:
         47:92:e9:eb:5c:d9:7d:17:e0:4a:66:d8:35:39:b8:de:49:f3:
         df:79:d3:a4:d0:99:93:0c:1c:bf:dc:d5:f2:e5:45:8d:3d:b3:
         44:7b:81:34:cc:31:f7:b5:a8:7f:60:78:e8:0d:5d:96:b9:d1:
         b7:57:60:54:c4:84:be:e6:c4:79:ff:e9:d7:1f:96:4f:63:fa:
         49:b2:6a:29:e7:25:b2:2e:55:c0:06:f7:8f:6c:9a:ae:e6:97:
         59:f4:4f:ee:91:a3:38:08:b7:a2:46:14:a4:c2:3a:fd:68:6b:
         98:20:41:be:ce:68:83:44:26:dd:32:74:5b:35:5a:63:28:c5:
         d2:d5:c8:d5:ba:e6:e6:0c:4c:0f:7d:a9:ae:67:f6:96:7b:fd:
         40:8d:b5:e6:d3:28:8e:24:a1:c9:67:c1:f9:c6:04:14:71:a1:
         49:86:c8:f2:37:80:d7:4b:45:6c:44:4e:e6:19:3f:b0:3b:73:
         f5:f5:ab:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:28:11 2026 by rpki-client