Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d8b443a7-ecc0-47b6-8b16-db1fee8c2bb4/470b542c-40cf-3926-b91f-b6e750f55345.roa
File:                     470b542c-40cf-3926-b91f-b6e750f55345.roa (raw, json)
Hash identifier:          eUqw+JwWkurFf8F6gMMpfsxdIb86y80oJ28ElxyKnnQ=
Subject key identifier:   CB:1C:34:40:EB:76:1C:92:BC:89:69:F8:4A:62:F6:7C:7B:6B:01:5B
Certificate issuer:       /CN=d8b443a7-ecc0-47b6-8b16-db1fee8c2bb4
Certificate serial:       010D0C9F4328584CDDCCED5BC26A42F691D6BC00
Authority key identifier: C0:BB:76:5B:62:09:40:B6:EA:DD:1F:3A:6F:31:E0:70:96:2E:85:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d8b443a7-ecc0-47b6-8b16-db1fee8c2bb4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d8b443a7-ecc0-47b6-8b16-db1fee8c2bb4/470b542c-40cf-3926-b91f-b6e750f55345.roa
Signing time:             Sun 15 Feb 2026 02:00:32 +0000
ROA not before:           Sun 15 Feb 2026 02:00:32 +0000
ROA not after:            Sat 16 May 2026 01:00:32 +0000
asID:                     19885
IP address blocks:        206.214.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d8b443a7-ecc0-47b6-8b16-db1fee8c2bb4/d8b443a7-ecc0-47b6-8b16-db1fee8c2bb4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d8b443a7-ecc0-47b6-8b16-db1fee8c2bb4/d8b443a7-ecc0-47b6-8b16-db1fee8c2bb4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d8b443a7-ecc0-47b6-8b16-db1fee8c2bb4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:dd:cc:ed:5b:c2:6a:42:f6:91:d6:bc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8b443a7-ecc0-47b6-8b16-db1fee8c2bb4
        Validity
            Not Before: Feb 15 02:00:32 2026 GMT
            Not After : May 16 01:00:32 2026 GMT
        Subject: CN=ba3a4780-0cd6-405f-b006-78504c83c690
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:0c:8a:b4:5d:71:48:7e:49:cf:63:9c:0b:30:
                    c4:09:15:cf:02:11:57:e1:93:e0:e9:31:f6:c9:7a:
                    4a:65:cb:e8:49:c0:55:6b:0b:0a:24:fa:35:aa:0c:
                    fa:72:8e:9a:ce:8d:4f:ac:6a:b4:64:92:3d:74:62:
                    14:c2:34:ea:e3:89:6a:e5:9d:9b:0e:fc:0e:f6:5b:
                    e1:26:8a:ff:0c:89:e2:ed:f4:db:fb:fc:0c:e6:e7:
                    58:39:0e:61:e3:e0:dd:60:d1:eb:80:62:23:68:ef:
                    de:83:a8:1c:2c:65:b8:d5:5b:e9:c6:a3:ca:41:81:
                    db:17:e5:e4:8c:42:03:79:95:26:9f:24:ef:a9:06:
                    8f:6c:18:a5:64:36:be:a7:e6:ef:a9:1f:fe:75:7a:
                    93:bf:1f:07:64:b1:0b:d9:90:13:0e:28:d7:cb:12:
                    0e:86:c0:29:d1:bb:1b:02:1a:72:96:ef:8e:c2:59:
                    ef:7e:fa:49:5b:1a:23:65:9d:28:20:00:3b:24:d3:
                    40:fa:cc:30:d0:85:2e:98:a1:bd:bb:94:d4:1e:cb:
                    86:2d:98:90:48:8e:bb:19:af:fb:1e:bb:49:e2:53:
                    8b:c6:89:7d:e6:be:42:77:88:3a:50:92:f2:59:db:
                    20:18:68:4b:2e:8f:65:ee:0a:bc:f5:17:4f:dd:9e:
                    f1:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:1C:34:40:EB:76:1C:92:BC:89:69:F8:4A:62:F6:7C:7B:6B:01:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d8b443a7-ecc0-47b6-8b16-db1fee8c2bb4/470b542c-40cf-3926-b91f-b6e750f55345.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d8b443a7-ecc0-47b6-8b16-db1fee8c2bb4/d8b443a7-ecc0-47b6-8b16-db1fee8c2bb4.crl

            X509v3 Authority Key Identifier:
                keyid:C0:BB:76:5B:62:09:40:B6:EA:DD:1F:3A:6F:31:E0:70:96:2E:85:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d8b443a7-ecc0-47b6-8b16-db1fee8c2bb4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.214.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:27:75:15:9d:59:6a:b4:1c:d9:d5:dc:6c:69:07:07:ec:70:
         7f:d2:df:22:97:e3:7f:4b:82:83:7c:ef:15:9d:20:dc:96:f1:
         d4:03:12:d4:cc:b6:2e:84:07:15:30:70:ed:73:a8:62:a4:66:
         23:8e:17:a4:d0:3e:38:d9:fa:f9:9f:d1:25:1f:1c:f7:a6:af:
         55:7f:10:14:45:b2:be:13:b6:4b:fd:f5:6e:eb:bd:86:ef:ca:
         b2:d7:db:bf:5d:3c:82:27:75:aa:8c:08:bb:fe:5a:3c:9d:ae:
         ee:61:dc:e6:73:18:04:4a:ed:dd:db:e0:20:45:4a:a0:69:b9:
         27:23:2a:92:96:9a:9e:ce:11:11:ad:33:17:40:0d:ce:32:ff:
         3e:34:d6:94:44:96:f9:88:eb:28:c2:f3:b8:03:b0:6c:79:78:
         ff:4f:41:f6:03:5b:ec:b0:ec:e9:50:a1:49:e3:99:d3:2b:0c:
         e2:04:8c:22:0b:ea:db:af:ed:dc:98:4b:3d:d8:77:49:ec:d4:
         6d:f9:d6:d1:92:44:8f:3e:7a:f5:b7:65:52:64:a2:d0:90:e6:
         d9:7b:1f:1e:56:2b:40:f6:d8:94:d3:37:10:b7:e9:1b:9e:93:
         c6:a4:f6:fb:98:d8:19:d4:a4:6f:99:c7:73:ea:a4:d5:f4:a1:
         3a:36:4d:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:24:29 2026 by rpki-client