Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d/4b8e6d7e-4845-3fc7-b3be-d6439fb3015b.roa
File:                     4b8e6d7e-4845-3fc7-b3be-d6439fb3015b.roa (raw, json)
Hash identifier:          6aassYjWaZy6RDiiD0kQVOL553AoNZypKQE43hqv8DU=
Subject key identifier:   3E:8A:5E:AC:56:AF:FB:9D:A4:F2:FB:91:F3:70:03:58:09:B6:FA:DB
Certificate issuer:       /CN=0be0d1a4-2c88-4596-81d7-3b6685e04a2d
Certificate serial:       010D0C9F4328584CDB021DDA6F1F87B1449388B4
Authority key identifier: BF:9B:E4:B5:3E:13:95:1F:07:53:D8:E9:0C:8E:45:5A:0E:B5:0C:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d/4b8e6d7e-4845-3fc7-b3be-d6439fb3015b.roa
Signing time:             Sat 14 Feb 2026 02:00:32 +0000
ROA not before:           Sat 14 Feb 2026 02:00:32 +0000
ROA not after:            Fri 15 May 2026 01:00:32 +0000
asID:                     33343
IP address blocks:        170.110.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d/0be0d1a4-2c88-4596-81d7-3b6685e04a2d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d/0be0d1a4-2c88-4596-81d7-3b6685e04a2d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:db:02:1d:da:6f:1f:87:b1:44:93:88:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0be0d1a4-2c88-4596-81d7-3b6685e04a2d
        Validity
            Not Before: Feb 14 02:00:32 2026 GMT
            Not After : May 15 01:00:32 2026 GMT
        Subject: CN=b288eb67-36e4-4bc6-a2a9-4616224bbb27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:98:7f:16:7c:e3:45:19:1e:75:bc:87:b7:bf:
                    39:5d:40:a8:58:c6:d7:e4:7c:7e:69:d8:43:5b:5c:
                    71:08:cf:36:fe:3a:07:97:2b:3f:c7:f4:bd:8d:8e:
                    c2:40:63:e2:4e:85:f2:77:e7:1e:7a:ae:f6:94:a3:
                    bf:32:dc:4e:b2:cc:ea:92:c4:9e:4a:14:47:85:07:
                    de:1e:f6:3f:a8:23:2d:9d:ef:8a:b9:f6:cd:ca:67:
                    de:66:38:9a:ee:ec:a5:32:7d:80:21:a2:a9:07:a5:
                    07:f8:28:8e:fa:66:e1:5f:31:22:b0:8e:78:ee:43:
                    bd:7e:a5:c6:22:23:07:53:ff:56:bb:48:c7:c3:83:
                    46:bf:58:1d:ab:9b:30:97:db:5b:af:23:32:a4:4d:
                    e8:1e:b6:bb:f7:89:8c:00:1b:1d:6f:40:d2:0d:f8:
                    dc:67:5e:2f:28:b1:5b:6c:c3:cd:1b:b5:d3:2f:8a:
                    0c:e3:12:9a:c6:3a:68:32:fe:ec:e4:d2:e1:15:6a:
                    6f:f8:84:c5:0e:48:8f:54:bf:3d:36:a1:64:fd:c6:
                    95:11:b1:a5:ee:5b:0a:51:58:b4:4e:88:87:88:e4:
                    f6:b4:5c:92:09:4f:79:c5:6c:44:82:46:cd:dd:a1:
                    c0:8b:f7:1c:d6:49:78:e9:38:61:93:e1:ea:6c:96:
                    73:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:8A:5E:AC:56:AF:FB:9D:A4:F2:FB:91:F3:70:03:58:09:B6:FA:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d/4b8e6d7e-4845-3fc7-b3be-d6439fb3015b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d/0be0d1a4-2c88-4596-81d7-3b6685e04a2d.crl

            X509v3 Authority Key Identifier:
                keyid:BF:9B:E4:B5:3E:13:95:1F:07:53:D8:E9:0C:8E:45:5A:0E:B5:0C:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.110.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:24:6b:04:04:ac:1e:b5:6b:85:1a:36:b4:77:33:f6:d8:b2:
         a8:32:93:6c:41:1f:c7:04:d0:5d:cf:39:a9:d1:7d:8e:d5:ba:
         f9:13:ae:fc:9c:7f:f4:bf:b8:ad:8d:47:01:66:87:23:24:4c:
         5a:99:2b:6f:ff:ac:9f:9f:7a:47:f6:a9:9d:b6:d5:55:05:af:
         8b:8e:29:5b:84:83:de:23:a7:bc:ab:da:b1:cf:24:ae:43:7d:
         a2:be:7b:77:93:5d:67:34:af:4d:c0:50:21:e1:48:67:db:e0:
         e0:f4:a8:ce:90:96:11:e0:12:70:82:a5:b7:6c:e9:12:1b:e5:
         81:c8:0f:5f:ec:bf:5c:c3:d4:20:ea:9f:8e:06:fd:16:f2:5c:
         af:e6:0e:34:59:74:e2:82:1b:d1:00:94:6e:7e:0c:ca:66:0d:
         d3:d2:f1:a5:86:3b:e9:68:f9:59:64:94:d2:1e:18:16:a9:81:
         3a:70:53:62:f1:5b:17:e1:08:3f:42:88:27:0d:e2:58:01:8c:
         da:03:65:6c:8a:27:8b:ea:13:aa:f5:23:0f:f3:fc:cd:40:1a:
         d8:58:ad:86:6c:c6:63:82:ef:e6:f5:d5:67:dc:27:58:1a:9d:
         69:74:7e:97:31:26:26:f3:7c:c0:4a:a4:8f:96:c5:b4:c2:d5:
         98:08:98:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:14:44 2026 by rpki-client