Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a/6ff943bb-82d7-3a1f-8122-47b8734b0cef.roa
File:                     6ff943bb-82d7-3a1f-8122-47b8734b0cef.roa (raw, json)
Hash identifier:          TqLDJXv0vot+wo9dLR86Ax5udwyXdFS8v++S2+syFW0=
Subject key identifier:   EF:92:84:46:B6:F0:1A:0E:C6:97:1D:AE:42:33:10:23:90:AC:B9:38
Certificate issuer:       /CN=8fc21c27-e8e6-433a-86da-315992f3e55a
Certificate serial:       010D0C9F4328584CFB5559F9EBEABDFDC143ECE0
Authority key identifier: 95:48:71:EE:B6:BF:34:3A:E4:8E:9C:4B:5E:42:E3:3A:58:1B:F5:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a/6ff943bb-82d7-3a1f-8122-47b8734b0cef.roa
Signing time:             Wed 25 Feb 2026 15:54:30 +0000
ROA not before:           Wed 25 Feb 2026 15:54:30 +0000
ROA not after:            Tue 26 May 2026 14:54:30 +0000
asID:                     14537
IP address blocks:        192.16.80.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a/8fc21c27-e8e6-433a-86da-315992f3e55a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a/8fc21c27-e8e6-433a-86da-315992f3e55a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fb:55:59:f9:eb:ea:bd:fd:c1:43:ec:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fc21c27-e8e6-433a-86da-315992f3e55a
        Validity
            Not Before: Feb 25 15:54:30 2026 GMT
            Not After : May 26 14:54:30 2026 GMT
        Subject: CN=670c0de1-cc04-4ce4-98fc-06bb0ddd43f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:45:3a:7d:0a:a4:1b:9c:50:e7:f1:bf:17:a9:
                    2b:9d:79:d0:0b:38:f9:42:4b:62:df:8d:2a:d2:d8:
                    5f:45:b4:b2:34:b2:a7:cc:59:d6:dd:c7:dc:38:bd:
                    32:b7:87:6d:5a:5d:45:3b:38:a4:e3:90:f1:d7:55:
                    09:f5:ba:d0:6c:fc:f8:aa:6b:dd:6b:90:10:a6:74:
                    78:a9:69:9a:0e:06:b7:9d:d5:35:db:1a:9d:e8:95:
                    b8:7e:a6:de:f7:50:9a:50:05:2d:45:73:45:6c:5a:
                    29:9d:7d:05:b3:28:a1:23:02:72:e7:7b:99:4a:8f:
                    d2:f9:c9:f4:d8:92:42:d6:f2:88:05:4e:d1:02:de:
                    87:14:c6:0f:fb:d6:f4:09:f0:c9:5c:85:d4:af:c5:
                    85:5e:dc:49:71:25:77:cc:99:6f:df:30:2d:b3:c3:
                    ef:f8:d4:4f:f4:84:23:9c:a7:f0:3e:9f:e9:66:49:
                    c2:ce:c4:cb:d5:7a:94:60:c1:c9:ae:62:00:c5:d9:
                    d6:e0:91:38:13:71:26:c1:a9:de:20:a7:6b:9e:68:
                    c7:00:9f:b8:ca:1b:78:06:91:6e:dd:54:cf:ad:33:
                    80:55:ee:48:69:38:25:b6:7e:48:9b:8a:8e:64:5f:
                    75:87:85:12:5a:56:01:25:51:b0:ee:39:10:1d:55:
                    1e:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:92:84:46:B6:F0:1A:0E:C6:97:1D:AE:42:33:10:23:90:AC:B9:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a/6ff943bb-82d7-3a1f-8122-47b8734b0cef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a/8fc21c27-e8e6-433a-86da-315992f3e55a.crl

            X509v3 Authority Key Identifier:
                keyid:95:48:71:EE:B6:BF:34:3A:E4:8E:9C:4B:5E:42:E3:3A:58:1B:F5:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.16.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:b8:2e:2c:17:5e:7d:27:01:9b:76:7f:94:7e:e7:27:ba:94:
         8b:08:7a:01:d8:48:62:6b:d0:f1:a0:46:95:93:d5:24:5a:5d:
         5d:1d:63:c6:b4:40:cb:01:75:66:70:f1:17:1f:df:93:4c:47:
         e4:18:e9:26:3c:7e:a0:e8:bb:ab:ab:47:e7:9f:1b:64:d4:54:
         42:24:88:49:9e:46:d4:5b:2b:66:9f:ae:95:d8:38:3e:87:9c:
         31:d7:af:d0:8d:d1:11:75:3f:a2:be:5a:b3:30:d9:03:c3:7b:
         25:b0:fa:97:bf:c7:a6:b4:6e:06:05:3f:c9:a4:c6:3a:05:f3:
         7f:90:88:aa:bd:ca:58:2b:55:bc:1e:b1:10:d0:38:f9:50:58:
         fa:c0:44:66:1a:57:ac:1f:68:bd:21:d0:6d:91:3e:2a:2e:84:
         54:22:fd:9c:92:23:03:11:42:9f:36:08:7c:45:b3:d2:56:9b:
         41:72:cb:a8:e2:c6:71:4b:19:67:b5:18:de:7a:d4:44:0e:52:
         03:a7:a5:82:cf:a6:dd:14:20:0a:29:86:8c:76:d0:22:66:6b:
         81:02:fa:2b:52:7a:5f:1a:a1:21:06:ff:89:35:c1:3f:af:2a:
         a3:8b:de:09:8a:06:7e:f5:bb:26:49:67:d7:3e:df:9b:93:7c:
         69:af:cb:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:55:46 2026 by rpki-client