Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ebba851-73dc-4c81-9c85-edb63b33b305/20b01dc2-482d-37a6-94dc-539807497318.roa
File:                     20b01dc2-482d-37a6-94dc-539807497318.roa (raw, json)
Hash identifier:          0bA78cZ5ToMClqNqRtYNrk0Vzl1XM3mJBArt434n23k=
Subject key identifier:   6B:23:62:A4:08:EA:4E:61:7E:D9:71:DB:23:8A:DF:61:0F:9F:92:7F
Certificate issuer:       /CN=3ebba851-73dc-4c81-9c85-edb63b33b305
Certificate serial:       010D0C9F4328584CDB02050BB8BE809BE4786D68
Authority key identifier: A3:42:73:1D:17:E0:73:0A:39:C2:4C:9E:F9:F5:EA:8E:BC:C5:71:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ebba851-73dc-4c81-9c85-edb63b33b305.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ebba851-73dc-4c81-9c85-edb63b33b305/20b01dc2-482d-37a6-94dc-539807497318.roa
Signing time:             Sat 14 Feb 2026 02:00:32 +0000
ROA not before:           Sat 14 Feb 2026 02:00:32 +0000
ROA not after:            Fri 15 May 2026 01:00:32 +0000
asID:                     20115
IP address blocks:        192.41.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ebba851-73dc-4c81-9c85-edb63b33b305/3ebba851-73dc-4c81-9c85-edb63b33b305.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ebba851-73dc-4c81-9c85-edb63b33b305/3ebba851-73dc-4c81-9c85-edb63b33b305.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ebba851-73dc-4c81-9c85-edb63b33b305.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:db:02:05:0b:b8:be:80:9b:e4:78:6d:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ebba851-73dc-4c81-9c85-edb63b33b305
        Validity
            Not Before: Feb 14 02:00:32 2026 GMT
            Not After : May 15 01:00:32 2026 GMT
        Subject: CN=44580b07-1456-411e-a9af-d1798e8ac63b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:2c:71:fa:36:50:88:99:ac:ec:b1:55:93:1f:
                    49:59:02:20:c2:b0:0b:4c:81:6a:74:d2:75:84:59:
                    6e:d6:7d:01:f6:7f:8b:1c:9e:09:d2:a3:fb:02:00:
                    bb:c3:d1:52:3a:6c:96:d7:73:e3:96:2f:c8:b0:e6:
                    5f:78:51:c2:35:44:53:6a:70:a9:65:ce:08:7a:3b:
                    a6:ef:cc:ef:bf:86:c7:11:df:e1:23:90:7c:be:b7:
                    14:a2:8c:b2:56:d2:b3:bb:fc:ff:01:6e:da:6c:d6:
                    12:98:71:fc:15:9d:4b:96:e8:d3:d6:22:b2:77:7c:
                    71:8e:8c:26:72:ae:4c:c3:6d:85:b9:fe:b7:62:03:
                    17:c8:92:aa:a0:5e:c7:bc:a6:d2:18:ee:89:14:40:
                    56:19:e7:a2:30:36:15:d4:7a:7f:fb:e7:a5:9b:5f:
                    25:9c:b3:4f:04:61:cd:9c:81:3b:ff:97:2a:17:39:
                    03:b9:50:8a:e5:cb:72:86:9f:68:16:71:f6:c7:92:
                    e4:02:91:c1:f8:e9:e6:68:ae:65:0f:34:78:6a:9b:
                    74:1b:7a:a0:f5:fe:4c:a1:e8:cb:b9:11:35:9f:e4:
                    64:2d:81:11:e6:c3:fc:99:b4:b7:1d:25:30:14:8a:
                    c5:46:a3:bb:24:f7:92:ba:a8:cf:b0:79:96:ca:47:
                    df:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:23:62:A4:08:EA:4E:61:7E:D9:71:DB:23:8A:DF:61:0F:9F:92:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ebba851-73dc-4c81-9c85-edb63b33b305/20b01dc2-482d-37a6-94dc-539807497318.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ebba851-73dc-4c81-9c85-edb63b33b305/3ebba851-73dc-4c81-9c85-edb63b33b305.crl

            X509v3 Authority Key Identifier:
                keyid:A3:42:73:1D:17:E0:73:0A:39:C2:4C:9E:F9:F5:EA:8E:BC:C5:71:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ebba851-73dc-4c81-9c85-edb63b33b305.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.41.177.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:75:72:3e:a5:54:98:4c:5c:da:3e:f5:05:bc:08:41:8a:88:
         ea:e5:40:c3:ce:e6:a5:2d:cd:bd:16:7f:1d:1f:ac:51:0d:3e:
         ee:e4:44:27:b6:c4:30:18:28:ab:0c:63:e5:34:e9:9f:58:01:
         44:6d:c6:cd:fe:d7:90:e0:50:27:12:de:19:8a:62:a7:56:0a:
         11:b2:e8:11:a9:e4:ab:13:4b:61:9d:c1:1d:0b:55:38:ba:58:
         48:34:e9:ed:9e:b5:81:b2:38:8b:97:68:67:50:81:01:ad:75:
         0e:b0:c3:0b:fc:9e:7e:fa:d6:e6:56:6e:04:11:84:a2:9c:3f:
         09:61:48:46:58:c1:e1:8b:92:1d:48:35:cb:3b:b1:31:51:d8:
         d2:f7:5f:aa:eb:1c:53:f6:91:d1:32:21:1e:2a:65:4b:aa:27:
         78:41:0f:46:20:a0:91:3e:54:38:df:08:48:d4:e4:48:9a:dd:
         30:78:bc:5e:63:33:a1:1d:fc:36:ac:29:59:50:f4:ba:d5:e8:
         7d:75:39:b8:da:0f:e8:fa:f4:ba:07:16:38:4f:29:ff:bb:93:
         32:7f:76:22:7e:ad:ed:55:b9:11:b8:e8:54:5a:d1:36:08:44:
         69:8b:03:55:11:78:be:49:8e:7e:95:a6:a9:1c:1a:1c:af:8c:
         47:de:8d:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:43:06 2026 by rpki-client