Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/a23f8b54-4a71-3b0f-92a1-2af73cc2411b.roa
File:                     a23f8b54-4a71-3b0f-92a1-2af73cc2411b.roa (raw, json)
Hash identifier:          OFHFz+HVTbBOPuwSSBzK3IkILKHjV3/o0jIHCvs0y4o=
Subject key identifier:   BF:FC:BD:88:ED:7A:AD:A9:D7:06:E0:85:4F:12:CB:C7:F4:26:38:62
Certificate issuer:       /CN=8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4
Certificate serial:       010D0C9F4328584CDC678DCCBF32D6759748DDA0
Authority key identifier: 4F:4B:38:8D:5F:5D:84:E7:D1:91:04:8E:D4:47:EB:05:74:B3:3E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/a23f8b54-4a71-3b0f-92a1-2af73cc2411b.roa
Signing time:             Sat 14 Feb 2026 14:00:41 +0000
ROA not before:           Sat 14 Feb 2026 14:00:41 +0000
ROA not after:            Fri 15 May 2026 13:00:41 +0000
asID:                     27313
IP address blocks:        204.79.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:dc:67:8d:cc:bf:32:d6:75:97:48:dd:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4
        Validity
            Not Before: Feb 14 14:00:41 2026 GMT
            Not After : May 15 13:00:41 2026 GMT
        Subject: CN=8106d1e2-12e2-461b-a0e7-e9927373ea93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:00:15:ac:c1:ed:b8:63:d2:c7:1f:15:45:75:
                    5c:31:e1:b4:73:2d:71:71:ce:97:07:76:81:87:5e:
                    28:2e:c9:f9:8b:c2:4e:76:76:b1:e9:86:59:71:16:
                    9f:71:99:f9:2d:46:71:b3:11:77:86:38:9f:d4:a6:
                    ca:72:01:5b:a3:8c:ea:17:16:d3:37:ea:33:57:bd:
                    69:c6:43:3b:ce:5e:25:3a:c9:e8:68:b8:28:9f:8b:
                    b6:18:70:d4:59:ca:a5:61:00:38:d6:70:08:70:ac:
                    37:68:d2:e7:52:4f:1a:54:11:9a:98:2b:71:82:de:
                    8e:a4:f8:5e:99:cb:88:2d:f2:b0:df:78:43:72:7d:
                    d4:a3:df:90:7f:ca:51:d1:ef:78:6d:0a:a9:ba:1e:
                    de:ae:1b:c8:2f:cc:5e:b8:df:f8:da:79:4e:44:d1:
                    1a:65:12:15:37:a2:b1:33:e0:2f:25:1b:1c:f7:13:
                    86:49:a9:a2:59:82:a1:d3:27:f7:38:84:5b:f6:93:
                    42:68:43:ac:6b:d6:56:4b:f5:6e:91:31:24:09:63:
                    69:99:62:04:88:cf:a0:0d:54:43:41:d8:80:77:ec:
                    08:67:67:3a:9e:4b:64:ba:cc:8e:c9:0b:f0:dd:cf:
                    83:2e:37:f3:df:1b:1f:09:eb:a8:65:a0:a6:68:26:
                    1e:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:FC:BD:88:ED:7A:AD:A9:D7:06:E0:85:4F:12:CB:C7:F4:26:38:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/a23f8b54-4a71-3b0f-92a1-2af73cc2411b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.crl

            X509v3 Authority Key Identifier:
                keyid:4F:4B:38:8D:5F:5D:84:E7:D1:91:04:8E:D4:47:EB:05:74:B3:3E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.79.140.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:cf:6a:c1:be:65:d8:57:17:01:d4:04:5f:74:5b:92:bb:04:
         db:37:53:b4:58:51:96:96:a2:be:5f:3f:aa:0c:4c:1f:fc:ed:
         40:6d:ba:95:db:f8:03:b2:59:0d:5c:2d:0e:49:58:d6:b8:fc:
         29:ec:e6:09:55:4e:63:ed:e8:1e:77:c8:5a:a0:d9:b0:a6:c3:
         b0:18:ad:93:00:bc:28:b6:b4:b4:42:69:fd:9f:49:41:5d:6d:
         05:09:6e:1a:bb:68:eb:a2:c1:b2:1d:f6:8b:91:7c:85:e0:7d:
         a6:15:7c:97:bd:5d:84:79:2e:60:0f:44:09:5f:16:22:cb:f9:
         d2:2c:f1:77:8c:cc:8d:aa:a6:67:9a:d9:3e:57:ab:ef:83:ef:
         af:9c:79:04:52:bb:04:fe:ed:93:2c:19:af:6a:88:6e:b6:5f:
         04:86:d1:3b:b9:08:9e:61:15:93:3b:b8:55:7b:b4:61:3e:d7:
         26:aa:05:8f:1a:b7:c0:03:66:fe:67:55:b9:e0:fb:08:64:27:
         51:a1:16:52:20:8d:57:29:a2:e4:f6:e1:7a:1c:ea:1f:63:91:
         0d:ad:d7:2a:d9:0d:41:f8:dc:59:71:41:c2:d0:1c:27:c1:1c:
         f2:3b:d7:ef:2f:55:18:9a:2a:0e:10:26:9a:e7:55:e6:4e:c6:
         97:84:74:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:33:18 2026 by rpki-client