Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/f1c6ee9b-7b8d-3bfe-9db5-54bba7be4146.roa
File:                     f1c6ee9b-7b8d-3bfe-9db5-54bba7be4146.roa (raw, json)
Hash identifier:          lBd4yTcHE8wPb66+wv+pW5Vvyg3iiti5WEafkWhHJFA=
Subject key identifier:   04:0D:33:6D:D6:F2:30:78:DF:A6:5E:D9:E6:7C:9E:1C:3B:D8:B3:1D
Certificate issuer:       /CN=09440a93-986f-41da-8723-7b67f81bdbce
Certificate serial:       010D0C9F4328584CBAE73A1F949CEB44B94C6CC0
Authority key identifier: 48:4B:81:EB:A9:96:97:3F:B2:DE:E9:DE:8A:DE:E9:5C:42:30:43:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/f1c6ee9b-7b8d-3bfe-9db5-54bba7be4146.roa
Signing time:             Mon 02 Feb 2026 14:00:40 +0000
ROA not before:           Mon 02 Feb 2026 14:00:40 +0000
ROA not after:            Sun 03 May 2026 13:00:40 +0000
asID:                     19901
IP address blocks:        208.160.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ba:e7:3a:1f:94:9c:eb:44:b9:4c:6c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09440a93-986f-41da-8723-7b67f81bdbce
        Validity
            Not Before: Feb  2 14:00:40 2026 GMT
            Not After : May  3 13:00:40 2026 GMT
        Subject: CN=49c3f747-fbba-4452-8bed-529bb3640778
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a0:76:ce:e2:99:b5:f1:54:82:7d:9b:b8:0f:
                    f9:d7:78:16:70:2b:9a:88:44:2e:a7:b3:f8:be:14:
                    18:35:a7:4d:ae:01:8b:5f:d2:92:2c:dd:07:25:39:
                    2d:9c:f4:22:ea:ca:8e:15:1b:03:a0:5d:4b:80:61:
                    48:da:bf:44:53:28:07:81:0d:5d:83:e2:66:20:45:
                    20:ad:35:dc:ea:46:70:f2:33:49:81:f1:9e:bd:9b:
                    03:2d:5b:0f:45:9e:25:98:c4:3f:19:cb:b5:09:42:
                    11:b5:66:c6:bc:4b:40:87:47:3d:e1:cd:0c:8c:f1:
                    96:d7:07:7a:78:72:ae:62:66:fd:bc:ae:94:b8:3d:
                    74:47:87:a1:d6:6f:52:ee:3c:19:8f:14:00:c8:7f:
                    0f:2b:04:fb:75:9d:c3:ed:cc:1f:c5:74:8c:9f:c4:
                    f1:f8:e1:38:77:dd:1f:30:97:db:2f:cb:3e:dc:e9:
                    b7:37:86:0c:f3:5a:1e:68:be:0c:4f:e3:29:ee:2e:
                    26:98:84:46:bb:13:cd:6a:73:6e:21:0f:36:48:96:
                    b3:83:51:5b:92:24:4d:eb:b6:40:72:89:43:7e:a3:
                    ab:c7:62:5d:40:af:4a:dc:61:4c:cb:36:83:95:63:
                    68:50:c2:73:fe:59:c6:a9:11:b3:a5:ad:9a:7a:24:
                    9a:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:0D:33:6D:D6:F2:30:78:DF:A6:5E:D9:E6:7C:9E:1C:3B:D8:B3:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/f1c6ee9b-7b8d-3bfe-9db5-54bba7be4146.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.crl

            X509v3 Authority Key Identifier:
                keyid:48:4B:81:EB:A9:96:97:3F:B2:DE:E9:DE:8A:DE:E9:5C:42:30:43:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.160.62.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:55:35:77:28:eb:71:29:1e:19:38:e0:31:29:12:8a:70:00:
         5d:0f:ae:e2:c7:a2:b7:c0:68:c6:03:ee:17:45:85:2b:1e:97:
         f5:0f:09:6f:b0:6f:a6:b1:3f:db:b8:b8:c2:c4:c8:71:75:61:
         6d:dd:9a:66:75:54:af:19:88:7a:d8:8f:f7:83:89:12:f4:87:
         e8:f9:40:65:4e:d6:2f:8d:64:fe:c1:51:ef:da:d3:4a:e4:6e:
         4a:6c:20:16:c2:61:23:df:74:f0:53:cc:4e:09:43:36:ba:97:
         8d:eb:e5:09:df:6b:e3:bc:a3:e1:d8:ce:cd:d6:93:3b:3f:f4:
         46:86:74:56:37:99:a0:1d:da:11:86:18:e2:42:62:c3:22:70:
         52:3f:18:a3:7f:05:a8:ec:db:b0:ab:5f:b7:9f:46:14:b2:4a:
         1b:52:d9:6c:c1:1a:35:15:d6:ea:76:fd:d5:e3:9d:dd:66:e4:
         b3:7d:12:85:55:4a:1a:19:ea:4d:f5:ef:59:59:37:42:97:97:
         49:5d:3d:86:ee:59:4f:b7:ac:42:f5:1c:e1:dd:5a:8e:48:cd:
         31:fe:09:fc:2a:74:93:f5:3e:09:25:d9:4e:1e:f0:40:a8:72:
         2c:5c:20:ba:7c:5d:1a:79:ac:9b:e9:5f:48:57:b9:08:9e:be:
         3c:c4:f5:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:10:08 2026 by rpki-client