Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ebba851-73dc-4c81-9c85-edb63b33b305/effe9ee4-06f0-397d-9c77-10106018e4bc.roa
File:                     effe9ee4-06f0-397d-9c77-10106018e4bc.roa (raw, json)
Hash identifier:          0RmyNIxspOKNhtkpAftKJCOctnvQ8o4v7d/v+efTH6M=
Subject key identifier:   D4:7E:FC:3D:27:A3:70:36:48:CF:4E:D7:BA:9F:0D:1E:16:AC:DF:50
Certificate issuer:       /CN=3ebba851-73dc-4c81-9c85-edb63b33b305
Certificate serial:       010D0C9F4328584CDB01FEF422177C72FCBFBE00
Authority key identifier: A3:42:73:1D:17:E0:73:0A:39:C2:4C:9E:F9:F5:EA:8E:BC:C5:71:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ebba851-73dc-4c81-9c85-edb63b33b305.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ebba851-73dc-4c81-9c85-edb63b33b305/effe9ee4-06f0-397d-9c77-10106018e4bc.roa
Signing time:             Sat 14 Feb 2026 02:00:32 +0000
ROA not before:           Sat 14 Feb 2026 02:00:32 +0000
ROA not after:            Fri 15 May 2026 01:00:32 +0000
asID:                     393550
IP address blocks:        192.41.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ebba851-73dc-4c81-9c85-edb63b33b305/3ebba851-73dc-4c81-9c85-edb63b33b305.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ebba851-73dc-4c81-9c85-edb63b33b305/3ebba851-73dc-4c81-9c85-edb63b33b305.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ebba851-73dc-4c81-9c85-edb63b33b305.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:db:01:fe:f4:22:17:7c:72:fc:bf:be:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ebba851-73dc-4c81-9c85-edb63b33b305
        Validity
            Not Before: Feb 14 02:00:32 2026 GMT
            Not After : May 15 01:00:32 2026 GMT
        Subject: CN=0d14929b-1937-4c36-a3b8-13a08ac0a4ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f1:82:01:df:7a:23:ef:7a:92:14:21:48:ff:
                    ea:55:49:b3:fa:25:bf:1d:06:68:24:cd:3b:46:3d:
                    f5:27:c6:75:53:93:c1:70:2f:1d:28:b7:44:ad:fb:
                    f8:ee:82:94:1c:5b:46:07:f5:72:d9:28:d6:c1:69:
                    e9:97:59:65:94:57:31:a4:79:0d:a2:60:7e:a8:03:
                    39:3d:6a:d8:8a:b2:a0:36:c6:4a:fa:d4:17:49:32:
                    8b:28:db:50:55:93:35:df:3d:45:9f:f1:20:7a:d9:
                    fa:a2:d7:14:d1:cd:d8:2f:5a:d0:27:b6:55:ab:a6:
                    41:a8:d8:41:4c:ce:04:b4:8c:07:9e:c3:ca:89:45:
                    10:79:2f:33:07:01:d3:39:5c:44:33:c2:97:fe:59:
                    73:f9:a2:40:b6:a7:c5:af:df:4b:c7:64:ba:55:b8:
                    77:6e:78:f4:3c:6e:4f:9c:20:7d:b6:96:88:81:81:
                    32:29:ba:90:db:be:74:e2:82:b6:4f:dd:3c:eb:b6:
                    9b:5c:30:df:1e:e8:10:52:c1:30:c7:8d:24:e5:3c:
                    2c:eb:35:2c:ea:c5:25:b2:ca:eb:2d:4c:88:09:fa:
                    e3:85:6a:d8:66:dc:6a:73:c7:88:d1:e8:66:ca:cd:
                    4b:07:77:10:09:f0:6a:29:85:3f:f8:e2:02:6d:c5:
                    e7:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:7E:FC:3D:27:A3:70:36:48:CF:4E:D7:BA:9F:0D:1E:16:AC:DF:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ebba851-73dc-4c81-9c85-edb63b33b305/effe9ee4-06f0-397d-9c77-10106018e4bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ebba851-73dc-4c81-9c85-edb63b33b305/3ebba851-73dc-4c81-9c85-edb63b33b305.crl

            X509v3 Authority Key Identifier:
                keyid:A3:42:73:1D:17:E0:73:0A:39:C2:4C:9E:F9:F5:EA:8E:BC:C5:71:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ebba851-73dc-4c81-9c85-edb63b33b305.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.41.177.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:66:66:89:6d:fc:71:2d:2d:45:1e:b2:ea:fa:ed:2e:64:cf:
         52:e3:be:44:c1:c6:05:75:6b:a0:74:d0:92:b2:78:3b:0c:ad:
         99:91:1c:fe:73:b5:20:55:8f:4c:c5:db:43:6c:97:e1:b8:6b:
         3d:ca:03:69:6d:b3:a9:e2:cd:50:22:02:8d:49:65:c4:9e:bb:
         2a:f3:e9:4f:8c:1d:16:c6:c5:74:fc:7f:13:c8:50:a1:39:20:
         52:6c:f1:15:c5:d3:65:36:e5:21:40:84:a9:a2:2d:de:a9:a5:
         88:5e:b9:b9:8d:be:6b:85:4c:42:c2:7c:91:59:5e:64:21:ad:
         95:ce:f3:91:4c:72:38:9c:de:71:ee:8c:86:fa:95:b0:e4:67:
         58:70:76:72:8a:9c:f5:05:23:aa:7e:90:dd:01:95:e5:ea:92:
         ef:de:4a:c2:82:2b:2d:22:8b:e7:bb:65:27:14:13:0f:48:4b:
         f6:63:54:70:8d:6a:11:08:20:9d:c6:e8:a6:01:be:ec:79:88:
         dd:78:da:23:0d:8e:06:13:a6:ba:20:b5:05:4c:ac:0e:dd:b0:
         6f:ca:e0:d1:51:88:27:d6:84:2f:22:b6:5c:bc:f9:00:b4:43:
         3d:cd:3c:4e:e1:f5:05:04:7a:cc:43:17:8d:fd:32:8c:25:df:
         c0:f7:1a:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:38:19 2026 by rpki-client