Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e175b8e9-bd62-4026-9a15-873e2b01713b/8bb765f5-2f2f-3c95-a33b-4630fea15bcf.roa
File:                     8bb765f5-2f2f-3c95-a33b-4630fea15bcf.roa (raw, json)
Hash identifier:          qfK/peZ7a7IPY2mxTItYHooOyHs1L8lH9z8KJjxYA6A=
Subject key identifier:   19:B4:BD:BC:06:9E:FC:57:46:63:24:06:34:D1:31:25:B0:AD:24:0A
Certificate issuer:       /CN=e175b8e9-bd62-4026-9a15-873e2b01713b
Certificate serial:       010D0C9F4328584CCD0C9F952FB4A6F7FA184600
Authority key identifier: 2A:BC:D5:04:78:55:32:C1:D5:59:35:A7:6E:88:4A:4A:AB:9F:7C:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e175b8e9-bd62-4026-9a15-873e2b01713b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e175b8e9-bd62-4026-9a15-873e2b01713b/8bb765f5-2f2f-3c95-a33b-4630fea15bcf.roa
Signing time:             Mon 09 Feb 2026 02:00:31 +0000
ROA not before:           Mon 09 Feb 2026 02:00:31 +0000
ROA not after:            Sun 10 May 2026 01:00:31 +0000
asID:                     3464
IP address blocks:        216.109.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e175b8e9-bd62-4026-9a15-873e2b01713b/e175b8e9-bd62-4026-9a15-873e2b01713b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e175b8e9-bd62-4026-9a15-873e2b01713b/e175b8e9-bd62-4026-9a15-873e2b01713b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e175b8e9-bd62-4026-9a15-873e2b01713b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:cd:0c:9f:95:2f:b4:a6:f7:fa:18:46:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e175b8e9-bd62-4026-9a15-873e2b01713b
        Validity
            Not Before: Feb  9 02:00:31 2026 GMT
            Not After : May 10 01:00:31 2026 GMT
        Subject: CN=71d606bf-eb4c-4807-9298-a75a7d1323b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:60:77:3f:20:a8:7f:af:06:a3:80:f1:45:55:
                    92:5c:76:82:e6:31:5b:fc:5a:de:23:a2:86:2a:05:
                    81:66:49:56:7c:24:d6:cd:17:ec:76:41:db:c0:89:
                    80:86:14:f9:ac:e1:f8:23:9c:31:da:e2:ca:21:2a:
                    33:7a:f6:b6:0c:10:c7:6f:b0:78:25:49:09:03:59:
                    30:97:56:f5:b4:cc:54:2c:b2:e4:7e:cb:c4:1b:33:
                    ac:e3:dd:6f:a2:0c:1f:1b:af:e8:1d:8a:cb:7e:11:
                    b2:9a:d0:46:92:a2:2a:e6:b3:7e:e1:3d:67:2e:0f:
                    47:c0:13:fb:74:98:03:6f:07:a7:5a:e7:47:e0:03:
                    8d:59:b0:99:05:cc:e6:a7:7b:fc:6b:b4:d1:c9:a4:
                    25:05:6a:5c:8c:bb:f4:62:c1:a3:9f:3a:83:fc:4c:
                    97:d2:05:7f:15:38:50:29:00:a1:ac:3f:a3:73:b9:
                    3d:57:6f:b2:48:bd:bc:9c:fd:f0:e2:62:06:84:80:
                    39:34:34:4f:c4:a8:7c:77:c9:78:62:7f:61:f3:03:
                    de:1b:0d:21:ed:2d:fa:1e:91:0c:dd:34:71:42:5b:
                    90:7d:06:36:f2:f0:6b:a7:9a:33:8c:57:04:c3:5e:
                    df:05:c9:ab:0c:f4:ec:d8:16:a1:90:9f:58:a7:16:
                    bf:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:B4:BD:BC:06:9E:FC:57:46:63:24:06:34:D1:31:25:B0:AD:24:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e175b8e9-bd62-4026-9a15-873e2b01713b/8bb765f5-2f2f-3c95-a33b-4630fea15bcf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e175b8e9-bd62-4026-9a15-873e2b01713b/e175b8e9-bd62-4026-9a15-873e2b01713b.crl

            X509v3 Authority Key Identifier:
                keyid:2A:BC:D5:04:78:55:32:C1:D5:59:35:A7:6E:88:4A:4A:AB:9F:7C:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e175b8e9-bd62-4026-9a15-873e2b01713b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.109.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:d2:ee:5b:c2:62:43:dd:ca:db:bd:f7:1a:4b:6e:bd:44:97:
         f6:e8:17:d4:ca:c4:05:7a:97:c7:7d:f0:52:19:89:d9:67:a1:
         1b:4b:f7:cf:23:2c:10:df:de:2d:b7:e4:3b:e1:4a:0d:41:85:
         6c:a8:d4:f9:e2:9c:2a:05:4f:39:54:f3:d6:61:1b:07:4e:db:
         7f:67:e5:72:41:93:f0:89:b3:e1:0e:d9:11:fb:99:29:03:e6:
         02:da:2a:27:74:9b:7d:c4:8f:e6:f0:a2:64:cf:2d:0d:fe:cd:
         5d:e5:99:5b:5c:f4:74:5c:cc:9b:bc:2f:a6:88:19:2b:2c:5e:
         39:97:0d:8c:ad:9f:63:da:85:f0:2b:30:28:55:68:96:37:1f:
         02:e8:a4:65:21:77:2c:5f:26:2d:11:cf:ff:be:42:b1:7f:d9:
         59:9e:8a:a4:11:96:82:97:5d:3d:f1:74:50:4d:62:dc:a0:9f:
         38:2e:96:57:9b:77:fc:81:6f:3b:e1:17:e1:ba:f6:fe:b6:24:
         4f:68:7f:ae:97:ce:12:d7:db:e8:07:87:63:3e:22:2d:b0:b6:
         b1:8d:b2:a3:26:f2:68:e1:ef:03:95:a4:cf:14:4f:1e:5d:6c:
         05:ba:5f:72:cd:bb:de:b9:59:8f:f0:99:6f:e2:cc:3b:bf:15:
         93:dd:77:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:58:01 2026 by rpki-client