Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fd15faf8-0954-4a4f-92ca-a92808ef263c/b07cdc71-2deb-3368-976a-da9bb486e8ab.roa
File:                     b07cdc71-2deb-3368-976a-da9bb486e8ab.roa (raw, json)
Hash identifier:          hLXvzPRNED8nfn01QIf5JXT+FBJtnCgqPyrkgjxWKUs=
Subject key identifier:   28:13:30:4B:AF:2A:A3:47:D7:6A:F5:71:6B:4A:EB:C0:88:EB:97:68
Certificate issuer:       /CN=fd15faf8-0954-4a4f-92ca-a92808ef263c
Certificate serial:       010D0C9F4328584CDB021FDFA657A0D72D2DAB00
Authority key identifier: 79:3F:4B:AA:41:CC:3E:C2:04:A7:3A:7C:4A:09:62:37:ED:CE:43:2D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fd15faf8-0954-4a4f-92ca-a92808ef263c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fd15faf8-0954-4a4f-92ca-a92808ef263c/b07cdc71-2deb-3368-976a-da9bb486e8ab.roa
Signing time:             Sat 14 Feb 2026 02:00:32 +0000
ROA not before:           Sat 14 Feb 2026 02:00:32 +0000
ROA not after:            Fri 15 May 2026 01:00:32 +0000
asID:                     15158
IP address blocks:        199.212.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fd15faf8-0954-4a4f-92ca-a92808ef263c/fd15faf8-0954-4a4f-92ca-a92808ef263c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fd15faf8-0954-4a4f-92ca-a92808ef263c/fd15faf8-0954-4a4f-92ca-a92808ef263c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fd15faf8-0954-4a4f-92ca-a92808ef263c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:db:02:1f:df:a6:57:a0:d7:2d:2d:ab:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd15faf8-0954-4a4f-92ca-a92808ef263c
        Validity
            Not Before: Feb 14 02:00:32 2026 GMT
            Not After : May 15 01:00:32 2026 GMT
        Subject: CN=529bf98c-dfd9-4602-bf56-a231978ddec7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6c:cc:da:03:9a:11:a4:e0:bd:a1:19:57:82:
                    db:5c:d2:58:9e:d6:75:30:fc:c4:db:f9:c0:66:6a:
                    81:68:36:74:d4:b5:3b:6f:8d:1d:e2:bc:02:22:84:
                    d2:e7:ca:5e:c4:de:c0:7f:e3:c9:de:bd:8c:44:71:
                    06:b3:56:76:59:74:9f:ab:4f:31:51:e5:53:7c:08:
                    3f:ad:b3:c3:21:e9:c2:52:66:43:b4:ce:5a:28:27:
                    be:d7:7b:14:99:7b:83:8a:69:91:2e:6c:bd:a8:d1:
                    13:05:0b:8a:a4:f3:61:67:b5:c0:9c:61:df:e1:aa:
                    55:9c:b3:c2:11:4c:51:94:37:93:b0:30:b1:38:6b:
                    02:e7:3a:30:3c:57:15:77:8d:8d:a5:0d:0e:63:75:
                    9a:49:0c:12:6c:da:58:9d:22:74:2b:da:fc:7e:1a:
                    bb:ed:86:2c:a9:ad:43:e9:f8:93:f0:06:64:84:77:
                    60:f1:b0:4b:14:64:5c:37:45:4e:77:e3:7d:6f:46:
                    e8:2a:a5:d5:5c:4c:21:88:5e:9f:0b:b6:cf:72:3e:
                    79:bb:9b:ac:1f:ee:51:ba:cb:da:47:7f:0b:0e:9b:
                    a1:81:48:7d:0c:98:ee:d2:3e:60:5e:12:ba:1c:a5:
                    cd:29:5c:ba:64:7e:5f:7d:08:15:0f:3f:43:be:7e:
                    b5:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:13:30:4B:AF:2A:A3:47:D7:6A:F5:71:6B:4A:EB:C0:88:EB:97:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fd15faf8-0954-4a4f-92ca-a92808ef263c/b07cdc71-2deb-3368-976a-da9bb486e8ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fd15faf8-0954-4a4f-92ca-a92808ef263c/fd15faf8-0954-4a4f-92ca-a92808ef263c.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:4B:AA:41:CC:3E:C2:04:A7:3A:7C:4A:09:62:37:ED:CE:43:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fd15faf8-0954-4a4f-92ca-a92808ef263c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.212.53.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:cb:6d:1c:63:7e:fc:79:95:21:de:65:b3:f9:d6:2f:f4:18:
         ea:e4:41:81:07:16:3b:0e:f8:80:7b:d2:78:ca:61:73:79:cd:
         ca:3e:b8:40:c4:c8:f9:06:3d:94:da:51:9f:35:5a:a4:55:dd:
         2d:bf:e8:a4:5b:4b:9b:f0:9d:02:ae:20:17:46:59:3c:16:df:
         04:fc:08:17:a7:c0:77:d8:a2:ee:3a:e1:75:4b:be:bf:47:75:
         31:f1:67:eb:83:f8:5e:99:63:24:c3:ea:eb:98:42:01:a0:60:
         da:33:c9:c3:18:27:7e:c0:91:d3:a5:4f:77:c0:2a:18:54:16:
         65:7a:6f:e0:56:e3:a1:7e:36:94:cf:e7:a9:41:ee:fa:c3:fc:
         27:ea:24:e6:49:62:d9:e5:79:98:15:92:c1:09:93:af:f0:89:
         ad:ad:b7:a1:6b:d9:38:ab:1f:4e:a0:fd:3f:d5:aa:d0:b4:1f:
         f6:d5:0f:05:fc:3e:f7:14:ba:64:3d:36:c8:f5:1a:02:c0:25:
         09:d0:ea:b6:1b:da:ec:bc:9c:0e:4e:f9:08:1f:42:2d:8a:1e:
         2d:0b:8f:5f:67:f7:12:18:2c:86:5e:65:4b:a4:2a:8f:aa:9e:
         12:69:e8:f0:7e:f7:0b:8b:f1:68:8d:ae:13:e3:3b:30:e6:30:
         b2:be:93:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:26:31 2026 by rpki-client