Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/b49ce4bf-3aa0-38e5-9819-64e23913b9b6.roa
File:                     b49ce4bf-3aa0-38e5-9819-64e23913b9b6.roa (raw, json)
Hash identifier:          lLV3Pu9yzCMYyG4lpcIc5cBQnAn32Re3yd8GWOJyp+0=
Subject key identifier:   8B:D6:4F:55:54:52:E0:FB:40:DE:34:52:72:A2:B5:AF:BF:E0:F2:7F
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584CCD0C8EC11BC89F1BFA492300
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/b49ce4bf-3aa0-38e5-9819-64e23913b9b6.roa
Signing time:             Mon 09 Feb 2026 02:00:31 +0000
ROA not before:           Mon 09 Feb 2026 02:00:31 +0000
ROA not after:            Sun 10 May 2026 01:00:31 +0000
asID:                     62610
IP address blocks:        128.1.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:cd:0c:8e:c1:1b:c8:9f:1b:fa:49:23:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Feb  9 02:00:31 2026 GMT
            Not After : May 10 01:00:31 2026 GMT
        Subject: CN=c37d8037-9272-4841-a40b-97942fe678a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a6:ab:e3:a3:2e:bf:80:a8:7b:3c:05:96:8c:
                    46:ef:39:ef:05:bd:d0:d8:01:06:43:de:90:4a:5f:
                    89:47:42:6a:79:e0:ae:88:52:0a:46:a9:f0:8b:04:
                    2b:97:09:ef:f3:87:e8:82:0d:05:2b:45:b8:96:bf:
                    9c:c8:31:d5:9c:82:39:00:d4:e0:ef:23:43:bb:32:
                    94:8e:41:03:72:46:3f:86:bb:f0:0e:a9:07:69:81:
                    2e:e8:a8:50:41:6a:85:f7:b0:08:b5:09:b3:35:60:
                    95:ea:df:82:6e:13:c3:21:36:b3:95:03:5d:27:e5:
                    45:c2:16:85:2a:f6:6c:b0:01:f9:a6:07:2c:54:9d:
                    28:4e:8c:a0:cf:6c:39:e3:46:e5:60:42:64:32:f1:
                    12:ec:0c:34:8f:d9:f5:71:64:81:ad:a2:af:8b:e5:
                    a1:6c:17:26:81:3c:c1:55:0e:ab:04:ad:40:e0:ce:
                    d7:b6:8e:6b:57:da:5f:db:63:66:f3:dd:97:19:bd:
                    ef:4b:8e:6e:63:7a:6f:9b:78:bb:69:1b:1a:0a:e6:
                    ee:66:2e:60:a7:ff:b2:e6:1d:fe:0c:ef:84:4b:af:
                    a9:ca:e4:70:e2:1e:0a:f2:ad:77:d1:99:24:93:14:
                    ed:d8:27:6b:e4:f8:de:0a:60:0e:69:71:b2:ff:97:
                    68:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:D6:4F:55:54:52:E0:FB:40:DE:34:52:72:A2:B5:AF:BF:E0:F2:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/b49ce4bf-3aa0-38e5-9819-64e23913b9b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.1.237.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:05:ec:d0:5f:2f:bc:88:1c:e3:7a:8b:ca:0a:3d:42:fb:52:
         e9:bf:c8:99:14:5c:dd:00:1a:9b:75:b4:ee:df:f5:20:f0:0f:
         35:01:7d:87:27:8b:cf:4d:ec:46:82:75:3d:6f:e6:00:f1:72:
         34:18:35:fd:77:6c:0e:1e:f7:77:75:d1:7f:a9:39:c7:ed:e1:
         24:be:47:ce:3c:54:33:21:61:d1:5e:74:44:26:33:0c:4d:17:
         39:6f:b7:a7:ec:d7:ec:3f:8b:69:ed:2f:00:f7:d3:57:c3:84:
         f4:4a:82:17:20:7b:3d:ae:e5:8f:a8:94:3b:5f:df:53:71:aa:
         e9:29:cf:9e:0f:19:dd:ec:2b:48:d8:5e:bb:b2:09:99:e3:4c:
         84:13:6b:fd:24:0f:96:6c:ac:df:10:82:7c:9f:11:a4:9a:62:
         36:dc:e8:e1:a9:57:cc:e5:a0:b2:77:00:ef:cf:b8:b4:97:a3:
         65:fe:6d:c7:a2:5a:3d:fa:29:ec:89:0b:1a:a0:7b:46:61:96:
         1a:00:f4:da:8a:f6:c8:aa:7a:64:e9:69:6d:52:65:c9:2a:15:
         76:3e:d9:c2:25:0c:17:fd:85:ff:d9:9b:10:62:29:49:94:b7:
         15:91:e3:eb:3a:ee:d9:e3:c0:4e:c3:bf:53:bb:74:79:36:95:
         cb:c1:9a:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:00:08 2026 by rpki-client