Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a3c9ced4-5d78-3417-8736-fae11195a7c2.roa
File:                     a3c9ced4-5d78-3417-8736-fae11195a7c2.roa (raw, json)
Hash identifier:          5n5NZpg6a/ioz3vr6E4FeQCd4j98uQZ35cBJkAhKPQ4=
Subject key identifier:   81:90:4D:E3:46:2E:52:A8:0A:7F:62:D1:B3:A3:58:37:61:E6:9F:5A
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584CEBC2200DFF1629DE5BC362C0
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a3c9ced4-5d78-3417-8736-fae11195a7c2.roa
Signing time:             Fri 20 Feb 2026 02:00:32 +0000
ROA not before:           Fri 20 Feb 2026 02:00:32 +0000
ROA not after:            Thu 21 May 2026 01:00:32 +0000
asID:                     81
IP address blocks:        204.84.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:eb:c2:20:0d:ff:16:29:de:5b:c3:62:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Feb 20 02:00:32 2026 GMT
            Not After : May 21 01:00:32 2026 GMT
        Subject: CN=a2c0e94e-15d0-43c2-b473-06ba0ba9ab95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:7f:c5:3c:69:e3:d1:c9:d8:36:91:cb:13:3d:
                    1a:33:19:7f:1d:05:b4:14:f1:d8:2e:fd:82:7f:7d:
                    34:d1:2a:18:d8:2a:98:93:e0:09:06:a5:30:a5:63:
                    43:1d:50:cb:d7:5d:1c:ff:e1:b3:01:09:6c:1a:3a:
                    44:02:b5:9d:54:b4:c2:2b:bb:13:a2:e7:9c:92:19:
                    91:83:d6:cf:8c:d7:5c:6c:9c:03:26:b3:ba:fb:30:
                    58:43:e2:0b:44:03:5a:83:6c:78:91:65:73:82:89:
                    a8:32:cb:ac:c3:46:04:e2:e1:dc:cf:aa:d0:5e:d6:
                    c8:21:4f:ba:5f:c7:e6:42:bd:aa:5b:3b:1d:d7:fe:
                    37:bb:fc:57:09:eb:51:d8:77:1b:5b:47:3a:32:1e:
                    23:76:86:49:3a:07:1b:9b:65:fe:22:22:d3:5c:c4:
                    46:a9:48:55:93:12:29:1d:ca:5d:bf:72:5f:64:a3:
                    96:e9:b7:9d:16:29:9b:57:09:80:93:33:5c:b7:46:
                    ec:a3:bd:b6:de:1c:e1:d8:e4:bc:1c:7a:35:9c:82:
                    a2:8c:aa:26:56:37:0d:1e:7a:7f:4e:af:d2:ce:f1:
                    93:16:28:23:45:9c:47:eb:8b:47:11:7a:8e:b2:f0:
                    b9:e5:81:0f:e4:14:b7:60:73:4c:35:ae:57:a8:0f:
                    da:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:90:4D:E3:46:2E:52:A8:0A:7F:62:D1:B3:A3:58:37:61:E6:9F:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a3c9ced4-5d78-3417-8736-fae11195a7c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.84.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:3a:39:69:c4:e2:5f:f7:05:22:05:72:0d:49:ce:11:7b:90:
         89:d9:ae:f4:6e:ef:ab:50:f0:14:23:13:b0:97:71:74:7b:b4:
         fa:95:67:7c:80:53:3b:0d:1b:5e:06:83:15:05:d0:1e:d5:ff:
         11:5a:e6:e5:09:56:01:86:b4:61:69:7a:5e:44:af:86:42:5b:
         b2:ff:e4:6b:3e:a1:72:1f:c6:28:72:37:83:4e:4a:39:20:20:
         b1:fa:c1:27:da:a8:7a:58:1d:16:27:2e:b5:e2:40:b6:3b:db:
         77:63:1e:8c:c3:e8:23:9a:5d:a5:2e:b6:91:c6:43:aa:be:c7:
         55:4e:20:3e:49:d9:1a:d1:6d:03:98:d7:af:84:2a:97:38:61:
         88:8a:78:ef:1a:3b:0f:f7:a6:9c:69:82:47:04:27:00:12:0d:
         63:cb:20:65:b0:2a:04:fc:bf:f3:4d:9e:7f:88:9d:77:99:51:
         3f:a8:b7:34:2a:7c:1f:76:38:d2:aa:d2:06:97:ca:a2:86:bd:
         61:3c:48:87:67:de:9b:17:7a:71:2c:a3:96:2f:64:99:70:4c:
         3c:77:0d:bb:40:1a:ec:1e:6b:5c:fd:b8:d7:b9:ec:f0:d7:ef:
         5b:b5:0a:44:e7:38:c0:4f:27:31:f4:90:1e:07:a2:e5:91:b1:
         6d:bc:99:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:36:54 2026 by rpki-client