Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/5c6a2600-430c-3c39-a484-f05a9a811305.roa
File:                     5c6a2600-430c-3c39-a484-f05a9a811305.roa (raw, json)
Hash identifier:          WslHdv2PD7+MgI1TL4Y4HXinG/dDkgG++AuDP7XX4sc=
Subject key identifier:   99:57:55:18:1A:C4:09:07:79:03:A2:B3:49:46:40:ED:9B:A5:F1:3E
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584CC3474448C236AF4E2F8DAE80
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/5c6a2600-430c-3c39-a484-f05a9a811305.roa
Signing time:             Thu 05 Feb 2026 14:00:40 +0000
ROA not before:           Thu 05 Feb 2026 14:00:40 +0000
ROA not after:            Wed 06 May 2026 13:00:40 +0000
asID:                     852
IP address blocks:        209.171.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c3:47:44:48:c2:36:af:4e:2f:8d:ae:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Feb  5 14:00:40 2026 GMT
            Not After : May  6 13:00:40 2026 GMT
        Subject: CN=82bc8bfb-1cd4-4275-a247-8c11822b7861
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:77:da:b7:ce:b4:ae:6f:94:dd:27:3c:98:ee:
                    0a:8b:c5:c8:59:e7:94:44:db:43:37:73:cc:ae:8f:
                    c4:3b:c4:01:5e:3f:da:5b:d5:6d:1f:06:53:e0:54:
                    94:3c:05:13:a2:d6:cc:f9:d6:a6:2b:a8:0c:ec:d2:
                    79:32:40:31:44:42:7c:fc:d9:a1:dc:68:3e:c4:e7:
                    c4:e1:a6:bc:a6:d6:bb:5c:2c:f4:eb:e6:9c:c5:9e:
                    48:a0:30:fe:7d:9b:69:e4:90:c3:e7:c6:1c:f6:73:
                    32:d3:42:c5:63:8c:10:7c:cf:99:b1:ee:6c:de:b1:
                    7f:96:56:d1:ef:5f:94:3b:a0:0e:60:f9:88:11:d2:
                    e2:e7:da:69:86:39:89:c3:37:1f:a5:70:f5:ca:07:
                    01:c9:2e:b6:a9:fb:c2:ac:48:d1:60:bb:2f:31:79:
                    f0:bb:60:47:b9:f6:d0:d7:2b:5c:20:03:bc:e5:87:
                    b4:75:45:9b:7a:3f:b7:f6:3a:66:59:12:05:a3:4a:
                    38:8f:e4:48:7a:42:04:91:8a:d3:b7:52:1c:aa:a1:
                    2c:2c:1a:70:7e:af:18:b5:ae:ae:63:ab:28:e2:9b:
                    83:35:4b:92:e0:02:70:6c:de:ba:38:69:53:c9:7a:
                    d4:59:06:7e:30:01:4b:bd:26:ab:34:d4:ad:2a:5d:
                    5d:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:57:55:18:1A:C4:09:07:79:03:A2:B3:49:46:40:ED:9B:A5:F1:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/5c6a2600-430c-3c39-a484-f05a9a811305.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.171.85.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c4:f1:59:65:41:02:bb:61:66:12:56:9e:e6:94:62:88:49:9c:
         81:a3:12:a6:3d:4b:28:33:c4:21:6d:4a:17:91:ac:b1:ca:3a:
         53:30:2a:48:4f:b4:6a:ef:48:ea:aa:2b:ba:71:ba:74:ef:80:
         a3:de:86:5d:e5:14:c9:f4:60:72:b1:70:34:2b:4a:e8:ff:43:
         00:b3:14:46:98:58:b8:b3:0b:83:99:1d:1c:10:8d:34:11:f1:
         0f:06:0e:aa:2c:4a:b7:35:e4:c4:45:ea:5b:17:67:27:a2:cf:
         fb:5a:3f:9b:dd:0e:9b:3d:f7:c9:96:f2:23:3d:f6:71:11:89:
         54:58:2c:c4:2b:d4:12:17:32:33:ea:88:de:89:29:52:5a:c4:
         ef:d2:cf:53:33:0f:2c:b0:8c:15:3a:bf:66:f0:57:8f:cd:35:
         6f:dd:42:2b:1e:4b:6f:69:dc:55:ad:e2:d5:d2:ff:af:5e:1d:
         c7:a0:83:ab:ee:02:92:d3:b6:fe:59:33:d7:71:2c:97:c8:8c:
         40:60:ed:93:d2:24:d0:86:c3:ca:d6:32:79:f3:1c:f6:b8:ad:
         ad:f7:82:b7:35:ca:99:e6:79:74:5b:94:fb:38:97:18:c6:79:
         14:9c:5f:d9:2e:7b:ad:8b:15:45:df:9a:55:71:e6:73:8e:f9:
         dd:b2:c7:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:58:40 2026 by rpki-client