Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/d7e9b37d-5903-3091-b9b8-584129d58d11.roa
File:                     d7e9b37d-5903-3091-b9b8-584129d58d11.roa (raw, json)
Hash identifier:          x1humVpvJ/p2LVQ4omfuUtdyVqPEPsh+MembUWWwy/M=
Subject key identifier:   06:41:77:31:02:B1:F7:B9:D3:E6:83:03:F5:01:B4:5D:0E:6A:9A:0B
Certificate issuer:       /CN=01fc1815-34ef-424d-8258-506f8b486e35
Certificate serial:       010D0C9F4328584CB81C8C2BDD6C9295F03EA87C
Authority key identifier: 51:A2:7B:A9:D7:4E:9B:04:5F:65:DB:3F:C3:08:66:81:84:CC:40:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/d7e9b37d-5903-3091-b9b8-584129d58d11.roa
Signing time:             Sun 01 Feb 2026 14:00:40 +0000
ROA not before:           Sun 01 Feb 2026 14:00:40 +0000
ROA not after:            Sat 02 May 2026 13:00:40 +0000
asID:                     10835
IP address blocks:        65.38.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/01fc1815-34ef-424d-8258-506f8b486e35.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/01fc1815-34ef-424d-8258-506f8b486e35.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b8:1c:8c:2b:dd:6c:92:95:f0:3e:a8:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01fc1815-34ef-424d-8258-506f8b486e35
        Validity
            Not Before: Feb  1 14:00:40 2026 GMT
            Not After : May  2 13:00:40 2026 GMT
        Subject: CN=c21add94-e485-4a0a-bdd2-f1fc090065fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:3e:1d:74:66:1a:a4:12:45:45:14:3c:9a:e3:
                    be:dc:c5:b7:4a:e5:52:17:de:43:5e:ac:7d:48:ac:
                    19:bc:f0:ef:61:03:15:48:01:50:e8:ee:43:c8:a3:
                    41:6a:24:9a:a9:cd:66:25:31:dd:20:85:be:d5:fb:
                    54:7f:d6:9b:3b:73:26:19:ed:59:45:49:fc:ee:7c:
                    43:db:ba:6d:3d:28:79:a0:5a:eb:b6:db:fa:47:af:
                    b4:16:98:08:96:0e:eb:19:3b:46:3b:c2:a3:a8:ea:
                    19:52:1c:58:ec:8a:00:20:ab:b4:6b:ca:ca:a4:fc:
                    c5:cb:dc:a2:2c:87:78:3e:f6:1b:bf:50:1d:94:ef:
                    75:e2:a1:0c:24:d6:2d:34:ff:51:ad:1f:98:00:6a:
                    b0:d8:bf:df:46:29:5f:69:fb:9a:05:4f:fa:a4:52:
                    45:4f:1d:12:09:4f:4b:8a:84:ba:7b:25:33:0f:93:
                    a9:41:73:90:70:ec:d0:3e:7b:95:83:52:17:b4:eb:
                    60:1e:f3:ed:a5:dd:25:05:09:a9:e6:3d:a3:01:4a:
                    2f:47:96:b6:85:28:9f:b5:9d:c0:c3:4a:a4:33:6d:
                    dd:8c:4a:eb:a0:0a:bd:95:cd:c3:ee:bb:e1:c0:e4:
                    cb:73:72:69:17:6f:bb:58:61:00:89:1c:5e:22:67:
                    82:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:41:77:31:02:B1:F7:B9:D3:E6:83:03:F5:01:B4:5D:0E:6A:9A:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/d7e9b37d-5903-3091-b9b8-584129d58d11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/01fc1815-34ef-424d-8258-506f8b486e35.crl

            X509v3 Authority Key Identifier:
                keyid:51:A2:7B:A9:D7:4E:9B:04:5F:65:DB:3F:C3:08:66:81:84:CC:40:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.38.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:78:41:a2:c2:21:0c:ed:9a:f2:38:4b:a1:b7:c2:7f:11:13:
         af:5a:60:ac:8d:93:15:6b:ae:5c:44:be:c6:2c:de:5e:d2:88:
         82:4f:ca:31:9f:27:9e:d5:20:1b:60:66:b7:14:7a:8c:43:2c:
         41:82:01:d1:7c:de:cd:7a:7e:68:e0:bb:5e:3f:5a:2a:69:4e:
         1b:b6:b2:44:22:7a:8e:4c:47:d6:7c:77:3b:a2:40:de:41:c6:
         d7:c5:57:1a:ef:dd:3e:14:ff:36:66:b0:a1:1d:44:db:53:8e:
         60:99:a1:7a:42:f8:17:1b:55:b5:9b:6e:78:92:8a:53:4a:61:
         24:d7:dc:5c:b7:76:32:8e:65:fd:91:24:b2:1d:f6:64:ae:db:
         6e:b6:59:ff:3b:40:5a:ad:33:7b:54:07:4e:a6:3e:40:af:20:
         ad:f4:57:61:56:8f:9a:57:00:3b:43:d2:94:cb:53:6f:fb:fa:
         44:1e:51:4f:78:8d:71:ac:ac:cb:2f:30:74:f0:73:74:ea:43:
         f0:93:86:39:de:8d:20:98:48:a5:4c:a4:ad:9d:55:7c:a7:36:
         dc:d2:d8:f6:3e:e5:71:66:ee:5a:bc:3c:ac:f2:33:64:33:9b:
         ce:90:fb:78:06:8e:c3:e7:de:dd:1b:a7:f8:ab:e3:98:ec:2c:
         6e:fd:83:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:42:05 2026 by rpki-client