Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/cd4f07ea-112f-32be-8929-8ba3c89a0e8f.roa
File:                     cd4f07ea-112f-32be-8929-8ba3c89a0e8f.roa (raw, json)
Hash identifier:          4OsPhN5MwvOMpDSNU0OH4OsSPyWT0zTaakJh1v04D5Q=
Subject key identifier:   BC:F2:9B:6F:C2:68:47:8F:93:CE:EC:84:42:A3:5A:2A:F8:AA:02:37
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584CD99CDB695E60C14C12557800
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/cd4f07ea-112f-32be-8929-8ba3c89a0e8f.roa
Signing time:             Fri 13 Feb 2026 14:00:41 +0000
ROA not before:           Fri 13 Feb 2026 14:00:41 +0000
ROA not after:            Thu 14 May 2026 13:00:41 +0000
asID:                     23473
IP address blocks:        216.171.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d9:9c:db:69:5e:60:c1:4c:12:55:78:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Feb 13 14:00:41 2026 GMT
            Not After : May 14 13:00:41 2026 GMT
        Subject: CN=7a082352-1f3d-49e3-bf3b-723f197ea218
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d1:6c:44:c2:14:50:e7:59:7a:3e:7a:3e:d3:
                    46:22:bf:42:59:e7:80:41:8c:6c:87:3f:1d:43:83:
                    60:0c:56:39:61:c7:be:8f:43:05:8e:00:b1:b9:07:
                    b8:68:0f:e9:7b:8b:69:a1:57:64:b0:e4:5b:a2:de:
                    79:e8:3c:08:34:5e:43:c8:83:f6:f9:c9:ad:6b:02:
                    da:2f:c0:a7:89:9e:44:74:47:6a:7b:74:e8:76:89:
                    7e:35:d0:19:52:09:67:76:95:13:82:81:63:bc:15:
                    9a:92:e2:51:75:45:da:b9:a8:38:2d:e9:79:ba:71:
                    ad:3f:0b:05:47:fc:a4:e0:7a:d9:1c:01:86:51:e5:
                    fe:69:0b:98:6c:95:0c:08:f9:11:45:85:d5:84:26:
                    32:e1:cf:97:d1:11:97:16:b1:1c:d7:e7:cc:09:db:
                    63:f4:d0:65:e0:ad:cc:a3:e6:f5:27:1a:01:f9:3f:
                    ed:f1:2f:0c:72:04:c6:67:0f:ee:f5:a0:dd:2d:52:
                    69:0c:62:ad:2e:ed:b7:ea:c9:4b:f5:3f:34:e2:e4:
                    6b:5c:02:81:2a:d3:49:60:9e:2f:3c:9b:d9:ec:f6:
                    08:3c:a6:56:b0:0a:a1:02:dc:4c:7a:0f:a0:09:4a:
                    93:ff:3b:8e:96:1b:8c:90:ab:fe:a3:fe:88:21:8d:
                    6e:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:F2:9B:6F:C2:68:47:8F:93:CE:EC:84:42:A3:5A:2A:F8:AA:02:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/cd4f07ea-112f-32be-8929-8ba3c89a0e8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.171.13.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:9b:c5:75:de:58:c9:01:f6:5e:91:f4:f3:3a:15:38:5b:9e:
         04:a4:d1:a5:f6:ba:d9:c7:4f:f0:d5:d3:c0:82:80:bd:90:36:
         de:59:bb:d6:e3:07:fc:55:68:30:0f:ba:6d:c4:68:6d:a8:6f:
         93:63:5b:3c:87:6b:b4:cd:20:a4:3a:7b:e9:46:82:c1:4a:9d:
         20:e2:67:b6:61:88:fe:47:9b:26:06:75:40:cf:c4:e4:81:f8:
         0a:b5:0d:34:7a:15:72:99:3a:cf:d1:ff:68:34:44:c4:a9:eb:
         9d:86:3a:db:fa:e0:cd:a3:9b:f1:19:44:c3:d6:c3:18:b3:82:
         32:d0:06:c5:24:52:7a:54:a5:ca:5f:81:9e:df:39:16:eb:d6:
         11:fc:c9:08:5e:54:ee:2d:df:02:90:87:e1:0d:a2:c3:c3:92:
         51:46:42:7d:bb:29:f9:c7:63:97:c5:80:5c:8d:7f:2e:fd:16:
         9b:88:70:7a:02:d6:1d:35:76:5b:79:38:e9:ac:87:8f:d7:15:
         00:f3:f1:cc:b4:19:34:8a:cf:6a:44:f8:f4:4d:f8:3b:9c:eb:
         8d:6f:05:86:83:51:df:bb:63:d8:95:c1:85:ff:b0:3c:36:d6:
         87:57:ea:cf:52:5e:7a:26:c7:84:2f:c7:a5:e3:88:f4:f1:dd:
         47:ce:1d:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:38:13 2026 by rpki-client