Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a/9044b9f7-8062-3b86-9fc9-2f3834d4e2e7.roa
File:                     9044b9f7-8062-3b86-9fc9-2f3834d4e2e7.roa (raw, json)
Hash identifier:          hvH4/KUqBtTEEft9Uh88FL4Zv3oEuaicm4l/ABqrvr8=
Subject key identifier:   64:93:52:48:71:A7:9A:83:8B:BE:05:DA:1F:F8:62:7E:29:4D:5B:5A
Certificate issuer:       /CN=8fc21c27-e8e6-433a-86da-315992f3e55a
Certificate serial:       010D0C9F4328584CD99D0B3C2DECE1449F1EE240
Authority key identifier: 95:48:71:EE:B6:BF:34:3A:E4:8E:9C:4B:5E:42:E3:3A:58:1B:F5:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a/9044b9f7-8062-3b86-9fc9-2f3834d4e2e7.roa
Signing time:             Fri 13 Feb 2026 14:00:41 +0000
ROA not before:           Fri 13 Feb 2026 14:00:41 +0000
ROA not after:            Thu 14 May 2026 13:00:41 +0000
asID:                     19905
IP address blocks:        130.254.54.0/24 maxlen: 24
                          130.254.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a/8fc21c27-e8e6-433a-86da-315992f3e55a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a/8fc21c27-e8e6-433a-86da-315992f3e55a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d9:9d:0b:3c:2d:ec:e1:44:9f:1e:e2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fc21c27-e8e6-433a-86da-315992f3e55a
        Validity
            Not Before: Feb 13 14:00:41 2026 GMT
            Not After : May 14 13:00:41 2026 GMT
        Subject: CN=b3caa7b0-7c01-4f4f-a2fb-b32215629e63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:77:97:79:5c:4e:90:08:90:06:40:71:8c:60:
                    78:92:d2:26:eb:89:34:eb:fb:6b:5a:09:be:b1:55:
                    8a:21:2c:d2:e0:06:0b:98:48:da:66:2b:a4:1f:6a:
                    30:87:8a:b5:db:c6:43:3e:c2:4f:02:8a:b7:ae:23:
                    69:1a:c3:4d:4e:56:9d:fa:a1:fc:a3:1e:a0:c5:e4:
                    90:7f:bb:49:fa:ce:40:31:1a:db:b0:8b:83:3a:ec:
                    41:d1:d7:5a:6e:70:64:15:6d:ec:e1:7d:bd:57:19:
                    a3:12:04:e2:a2:63:a2:35:35:1f:d8:bb:ab:b5:cb:
                    73:82:ba:44:44:96:ca:5e:f7:37:fc:dc:47:2a:4f:
                    90:20:e9:c7:ed:3a:cb:20:70:33:7e:aa:4c:c7:a8:
                    2d:3d:27:88:78:1d:ba:e8:23:68:e3:24:ce:a8:e8:
                    a2:70:e4:2b:29:a9:9c:8c:e9:05:79:44:1e:d3:b7:
                    e6:3d:ab:61:73:84:ae:94:23:eb:bb:17:7d:17:8d:
                    af:74:57:a7:28:3c:22:9e:c6:d3:07:30:d7:f8:5c:
                    dd:ee:27:07:37:ee:4d:04:f1:a6:2d:34:55:5c:ba:
                    97:26:f8:4d:12:8d:ee:da:9c:ed:51:50:4b:a2:9e:
                    bd:a9:0e:d5:f2:55:c3:7b:e8:b0:ce:70:a7:6e:ab:
                    e5:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:93:52:48:71:A7:9A:83:8B:BE:05:DA:1F:F8:62:7E:29:4D:5B:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a/9044b9f7-8062-3b86-9fc9-2f3834d4e2e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a/8fc21c27-e8e6-433a-86da-315992f3e55a.crl

            X509v3 Authority Key Identifier:
                keyid:95:48:71:EE:B6:BF:34:3A:E4:8E:9C:4B:5E:42:E3:3A:58:1B:F5:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.254.54.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:7b:e9:da:84:04:41:1a:5c:cf:03:dc:f2:6f:11:cd:f3:70:
         91:0e:22:0a:27:4c:87:ad:77:de:44:f7:e6:04:62:5c:cb:94:
         7d:c1:c1:21:45:eb:c2:f9:5f:15:f5:5f:cf:17:0c:58:5d:ac:
         b7:c8:f8:76:c8:fb:e3:29:94:23:ae:17:5b:39:44:d4:ed:c5:
         32:f4:55:3d:1d:ad:39:16:31:39:92:eb:8b:a2:0f:0d:1e:79:
         e8:2e:76:3d:c2:c2:a2:9d:84:aa:98:44:68:5b:e8:78:95:62:
         40:5f:ee:c2:dc:e0:3d:58:00:1d:02:5f:2f:30:34:46:a7:2a:
         39:11:86:c0:70:26:3f:d8:d9:5b:81:bd:d8:30:62:f8:da:3d:
         da:99:23:55:29:6d:4b:0f:ca:30:52:b7:28:ba:2a:f5:71:a8:
         38:19:9b:5d:ee:c8:cc:75:a0:08:d8:88:71:03:1c:ed:66:ae:
         e6:87:6d:c9:3b:81:be:a2:b8:d3:cd:5c:7f:f0:be:be:aa:46:
         4c:65:14:2e:39:f0:87:fd:68:e1:2a:7b:67:b6:cb:f9:27:52:
         e3:0f:44:da:c7:43:e1:49:74:97:ff:7c:65:ba:c8:2a:9f:da:
         6f:0f:73:cc:bb:fa:c9:73:53:eb:61:72:b1:2b:1b:41:2e:4a:
         34:a8:b8:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:06:04 2026 by rpki-client