Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d/b30e92b4-600c-34e4-ad5a-4f66b572b639.roa
File:                     b30e92b4-600c-34e4-ad5a-4f66b572b639.roa (raw, json)
Hash identifier:          x26WNuex6Qj6/mVi+sskVX2p2YM+GfJtE3nVSKHdLmg=
Subject key identifier:   3D:B6:F2:E1:8C:68:F6:08:EC:AE:F2:AE:75:B5:A8:E1:8D:39:37:B0
Certificate issuer:       /CN=0be0d1a4-2c88-4596-81d7-3b6685e04a2d
Certificate serial:       010D0C9F4328584CD407702D29D7C0F04A37CEC0
Authority key identifier: BF:9B:E4:B5:3E:13:95:1F:07:53:D8:E9:0C:8E:45:5A:0E:B5:0C:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d/b30e92b4-600c-34e4-ad5a-4f66b572b639.roa
Signing time:             Wed 11 Feb 2026 14:00:41 +0000
ROA not before:           Wed 11 Feb 2026 14:00:41 +0000
ROA not after:            Tue 12 May 2026 13:00:41 +0000
asID:                     12076
IP address blocks:        170.110.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d/0be0d1a4-2c88-4596-81d7-3b6685e04a2d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d/0be0d1a4-2c88-4596-81d7-3b6685e04a2d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d4:07:70:2d:29:d7:c0:f0:4a:37:ce:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0be0d1a4-2c88-4596-81d7-3b6685e04a2d
        Validity
            Not Before: Feb 11 14:00:41 2026 GMT
            Not After : May 12 13:00:41 2026 GMT
        Subject: CN=ed266100-9c40-4b93-ba76-7c54ef3588c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:a1:54:30:2d:38:61:93:92:95:bc:7c:e3:60:
                    7a:c0:4e:8d:a5:50:b2:de:bc:7f:58:eb:38:15:45:
                    0a:74:4a:d6:c5:ea:2b:d4:fa:c1:b5:21:fd:cf:2c:
                    f4:d9:fb:4c:96:0c:f9:78:81:1b:4c:51:35:43:ea:
                    24:d0:df:39:e7:e6:0e:12:4a:f3:7f:47:7e:dd:69:
                    44:9b:3c:5e:e3:ca:9c:9e:a9:e4:cd:85:a1:46:1d:
                    02:8e:c6:4f:d4:64:62:5c:1d:91:32:08:79:3d:f3:
                    ff:a2:0b:22:4e:4d:cf:a2:88:ac:43:5e:0b:ca:cf:
                    28:c2:84:39:ae:f2:9b:72:2f:26:4b:b6:01:9e:57:
                    97:f5:f6:7a:05:cc:1a:93:c5:c6:0b:ca:3a:93:62:
                    da:55:1a:07:7f:68:3c:d1:6e:c9:73:c2:89:8f:e9:
                    b9:2b:61:cd:c4:65:cd:a1:88:ae:3e:72:a8:d5:33:
                    1d:83:da:9d:10:e8:6c:c9:eb:04:f3:e9:b2:60:21:
                    c9:16:35:cb:8f:0a:66:8d:a0:c9:bf:90:d9:8c:9e:
                    80:b0:f0:31:39:4a:1f:b2:8a:af:f9:be:cd:62:3d:
                    44:fd:1a:43:ee:5a:96:43:31:1c:41:b7:3b:70:d5:
                    26:6f:5b:3f:91:33:be:5d:61:57:0c:83:74:e2:b6:
                    24:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:B6:F2:E1:8C:68:F6:08:EC:AE:F2:AE:75:B5:A8:E1:8D:39:37:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d/b30e92b4-600c-34e4-ad5a-4f66b572b639.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d/0be0d1a4-2c88-4596-81d7-3b6685e04a2d.crl

            X509v3 Authority Key Identifier:
                keyid:BF:9B:E4:B5:3E:13:95:1F:07:53:D8:E9:0C:8E:45:5A:0E:B5:0C:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.110.229.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c6:af:db:39:75:e2:72:f6:8d:0c:c5:58:7a:9b:47:cb:13:12:
         ea:fe:45:67:b4:73:0e:a1:85:3f:3f:12:2e:f4:32:37:fa:62:
         17:0e:18:66:5b:75:26:5e:95:c2:34:48:d7:67:6a:66:bc:46:
         2b:47:63:97:7e:f0:dd:eb:53:2f:26:b6:cb:8e:5b:61:8f:09:
         1a:76:97:07:a1:32:42:1d:fe:d8:27:b2:b0:5a:dd:52:94:a1:
         be:a6:ad:ff:f7:98:0d:29:f4:eb:16:36:6b:52:6d:78:2c:fd:
         c3:14:1f:8b:2a:2c:51:a7:a0:17:f4:d9:cd:52:08:18:5c:7f:
         0c:26:9e:83:91:8c:e0:d4:4a:24:6c:0e:2c:7f:78:9b:f3:e1:
         1b:b3:d6:8b:b7:dd:ba:26:bb:c9:15:80:29:86:e2:50:aa:1c:
         b9:53:cf:f3:99:4e:30:ce:f7:98:15:17:df:ec:75:6b:75:ae:
         75:c3:a8:8f:a8:a5:c7:aa:a1:e6:ab:38:62:69:d9:b2:72:20:
         0e:22:23:d8:30:ac:d2:4b:3f:f0:c9:3e:1e:2c:10:ff:81:43:
         cb:5c:26:f5:24:85:b9:dc:d7:65:80:c8:c8:c2:8c:2f:23:bb:
         74:9b:22:46:a6:ad:b1:4f:f6:3b:39:dc:48:42:2f:29:bc:2e:
         53:66:6b:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:24:49 2026 by rpki-client