Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/17c36367-0860-4b69-85ec-94c5c54b62b6/f07c8046-a47e-3b65-a61e-a52b2cc0beaa.roa
File:                     f07c8046-a47e-3b65-a61e-a52b2cc0beaa.roa (raw, json)
Hash identifier:          Pvj73DG7xIC/lVzV9M5cjw5PQgdPTzc+Zs9ObwGZtY8=
Subject key identifier:   1F:14:6D:90:C1:BE:6B:6E:DE:32:BA:A5:5A:3B:F0:BC:D4:90:8A:F9
Certificate issuer:       /CN=17c36367-0860-4b69-85ec-94c5c54b62b6
Certificate serial:       010D0C9F4328584D00B27B5267F0B4F5AF035D80
Authority key identifier: 4B:59:97:AA:8D:C5:7B:9D:65:E2:E9:F1:3F:10:FA:55:9B:12:D7:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/17c36367-0860-4b69-85ec-94c5c54b62b6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/17c36367-0860-4b69-85ec-94c5c54b62b6/f07c8046-a47e-3b65-a61e-a52b2cc0beaa.roa
Signing time:             Fri 27 Feb 2026 14:00:40 +0000
ROA not before:           Fri 27 Feb 2026 14:00:40 +0000
ROA not after:            Thu 28 May 2026 13:00:40 +0000
asID:                     397169
IP address blocks:        161.199.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/17c36367-0860-4b69-85ec-94c5c54b62b6/17c36367-0860-4b69-85ec-94c5c54b62b6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/17c36367-0860-4b69-85ec-94c5c54b62b6/17c36367-0860-4b69-85ec-94c5c54b62b6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/17c36367-0860-4b69-85ec-94c5c54b62b6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:00:b2:7b:52:67:f0:b4:f5:af:03:5d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17c36367-0860-4b69-85ec-94c5c54b62b6
        Validity
            Not Before: Feb 27 14:00:40 2026 GMT
            Not After : May 28 13:00:40 2026 GMT
        Subject: CN=bd621e70-0d99-468a-8521-77a661a3406c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:a0:c0:b6:80:53:cd:1e:49:69:7c:36:db:48:
                    d9:bc:c2:91:ed:e5:a1:fd:a8:6a:dd:1a:fb:f8:73:
                    13:e4:31:79:73:87:93:03:3f:83:89:1d:3c:01:3b:
                    1f:53:6d:06:71:e5:cd:b7:01:fb:f9:78:f3:7f:9a:
                    3c:79:95:af:a7:7b:cf:1e:63:68:eb:9f:5c:ba:25:
                    1d:5f:fc:89:aa:3d:24:d1:17:88:38:e1:af:0a:9d:
                    fd:99:ee:f8:8e:48:28:b8:c9:ab:c6:85:12:6f:af:
                    4f:3c:a4:f7:72:68:79:80:f7:4f:0b:2f:dc:b9:26:
                    fb:6d:e7:6e:58:32:5b:d2:92:1d:52:2e:c9:51:98:
                    71:40:60:31:75:f5:d3:2c:62:f4:4b:a0:99:6d:4e:
                    bf:51:04:93:41:78:dc:8d:ba:0f:fb:8d:f0:dc:0d:
                    83:a9:18:ae:cb:9e:4b:85:f3:b9:4a:57:5d:d5:46:
                    8b:e0:08:f6:e3:e8:d9:7c:4a:96:95:1a:0c:bb:c8:
                    3f:26:9d:71:ff:7f:99:94:13:26:02:9e:44:38:7c:
                    cf:fe:eb:d6:d8:e6:25:67:c4:df:1b:7e:ef:f9:d6:
                    9f:7b:27:77:d6:c7:60:dc:06:aa:d4:68:ba:58:a6:
                    4a:43:15:ef:f5:d8:8d:33:5a:44:58:c4:0c:7b:9d:
                    df:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:14:6D:90:C1:BE:6B:6E:DE:32:BA:A5:5A:3B:F0:BC:D4:90:8A:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/17c36367-0860-4b69-85ec-94c5c54b62b6/f07c8046-a47e-3b65-a61e-a52b2cc0beaa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/17c36367-0860-4b69-85ec-94c5c54b62b6/17c36367-0860-4b69-85ec-94c5c54b62b6.crl

            X509v3 Authority Key Identifier:
                keyid:4B:59:97:AA:8D:C5:7B:9D:65:E2:E9:F1:3F:10:FA:55:9B:12:D7:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/17c36367-0860-4b69-85ec-94c5c54b62b6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.199.253.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:67:72:f7:a2:f4:ad:2b:62:f7:41:c0:b0:52:d5:0b:84:0f:
         bf:c2:8c:ac:bb:a2:dd:19:99:15:5d:fd:8b:aa:8f:0c:ed:69:
         92:7b:0c:a3:12:fa:72:e3:70:1f:df:94:ec:55:ae:6e:0e:95:
         0b:2f:95:2c:2c:92:c0:ab:58:cc:3a:fa:89:00:11:b9:d2:a0:
         b5:f3:cc:ae:cf:13:98:a3:92:db:44:71:b5:9d:78:cd:88:ea:
         46:09:74:20:42:48:be:42:47:cf:da:c9:9c:4f:b0:ae:5f:43:
         a7:35:28:d5:77:c7:62:07:16:4d:6e:7c:ee:4f:7d:17:a7:62:
         26:8f:47:56:65:c5:0e:af:ca:eb:c9:26:39:c3:04:37:ca:d8:
         1a:c3:c4:48:4c:63:f6:ec:70:53:55:5d:45:0c:0f:33:ac:8a:
         df:5b:88:f9:0f:d0:ed:03:12:3f:6e:77:cf:70:3f:d8:97:d7:
         59:7e:bd:5c:1d:33:eb:aa:a4:d4:6e:86:2d:f8:58:8c:8b:7e:
         52:50:ce:d2:f3:8e:10:57:82:06:fc:64:4c:30:71:09:03:fe:
         e0:a8:07:95:fb:38:59:d7:09:9f:f0:b1:4e:de:b1:34:61:b0:
         90:34:dd:27:e0:28:fd:c5:99:47:38:a3:aa:d2:ee:1f:c9:5e:
         61:bc:05:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:14:48 2026 by rpki-client