Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/c4f8707e-8024-3449-9a43-a9af164495b9.roa
File:                     c4f8707e-8024-3449-9a43-a9af164495b9.roa (raw, json)
Hash identifier:          7Vsd5qLKbjizWvA/2DslDbCnMWVGqmuhtiQjhTYpIc4=
Subject key identifier:   B6:02:42:39:D0:6A:79:EA:05:37:99:36:7A:E3:B5:91:2E:A1:D0:0B
Certificate issuer:       /CN=455a97ae-df4e-49bc-9f76-ff025a5c25e8
Certificate serial:       010D0C9F4328584CA5F7104D4661A00B108B8D00
Authority key identifier: D6:AE:8D:6E:B8:CE:58:71:FF:93:91:94:4E:95:35:C4:27:93:B9:4E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/c4f8707e-8024-3449-9a43-a9af164495b9.roa
Signing time:             Mon 26 Jan 2026 02:00:32 +0000
ROA not before:           Mon 26 Jan 2026 02:00:32 +0000
ROA not after:            Sun 26 Apr 2026 01:00:32 +0000
asID:                     57043
IP address blocks:        208.67.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:a5:f7:10:4d:46:61:a0:0b:10:8b:8d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=455a97ae-df4e-49bc-9f76-ff025a5c25e8
        Validity
            Not Before: Jan 26 02:00:32 2026 GMT
            Not After : Apr 26 01:00:32 2026 GMT
        Subject: CN=c16d2599-0773-413a-baa7-0dfd49376a32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:a8:61:22:18:63:7b:56:91:f4:b5:76:a2:5b:
                    c8:4b:d1:65:b0:0b:d7:90:84:69:99:c6:d3:36:ff:
                    3e:6e:0a:a3:b1:cc:11:15:24:7e:92:b3:0e:0f:d0:
                    03:22:06:b6:3d:c9:5e:66:74:7b:3a:17:11:b4:39:
                    15:4b:c1:b2:fd:e3:5a:bb:f1:d5:18:91:a8:72:ab:
                    f1:3b:dc:33:cd:79:18:dd:6f:81:f2:0c:f8:1e:7b:
                    a8:c6:b8:f0:e3:a2:72:e8:7f:77:24:fd:9d:8f:fc:
                    77:77:36:e3:00:ee:98:0f:10:dc:fa:4f:a4:21:57:
                    eb:a2:8b:6c:31:30:33:e3:43:8c:d2:61:45:ca:82:
                    21:eb:f7:59:62:b1:a2:49:e6:1f:c5:ea:36:47:96:
                    57:92:cc:4f:1f:c8:c6:2e:61:a5:84:ab:54:97:60:
                    53:eb:fd:cb:74:80:d4:a6:88:9f:d3:83:b6:55:a0:
                    29:4b:1c:ee:b0:11:a0:b1:7d:25:9a:4e:e1:b2:0d:
                    7f:bb:e8:61:8a:ce:fc:b9:9d:36:2d:59:e2:6d:76:
                    12:7c:eb:e5:c7:fd:f1:28:b6:15:2f:a3:82:3c:40:
                    02:5c:bd:f5:31:37:97:b2:b2:af:08:0e:36:07:b4:
                    0a:be:d0:68:f3:db:db:e8:d9:29:ee:4a:76:af:60:
                    78:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:02:42:39:D0:6A:79:EA:05:37:99:36:7A:E3:B5:91:2E:A1:D0:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/c4f8707e-8024-3449-9a43-a9af164495b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.crl

            X509v3 Authority Key Identifier:
                keyid:D6:AE:8D:6E:B8:CE:58:71:FF:93:91:94:4E:95:35:C4:27:93:B9:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.67.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:a6:ef:dc:54:38:e2:91:4c:f2:e2:e6:03:03:55:6d:3c:cb:
         83:f7:be:8d:25:b3:5f:df:a3:e1:4a:f6:d9:e1:2b:69:ca:7e:
         62:8f:53:10:7e:8d:f7:26:fc:1d:a2:ef:c3:59:4a:56:34:87:
         9f:77:01:ea:b3:5a:0b:4d:e4:97:0e:fd:f2:84:af:ae:3f:74:
         90:79:a1:bc:40:0e:67:24:6d:67:31:7e:bc:33:6f:dd:5c:f9:
         23:2d:8f:52:d2:bb:fa:d9:d9:2f:6b:86:43:82:59:81:8d:26:
         c7:0f:ad:bd:52:22:9a:a4:8d:8c:12:21:49:4c:f0:43:3a:82:
         e4:2a:dc:5e:cd:40:db:7b:2b:4f:26:75:64:51:1f:36:53:b7:
         1e:a6:a9:50:bf:2f:51:b8:58:7b:22:0b:3c:cd:ba:bc:01:3e:
         df:73:5f:4e:0a:b1:13:23:d6:37:65:6a:28:f7:b0:da:7d:81:
         b3:5c:8e:03:7d:24:03:c8:28:33:bf:2f:1f:f9:76:84:d1:b0:
         d6:41:01:22:34:71:25:6a:ec:f5:16:83:bb:38:58:b2:0b:6f:
         80:0b:a7:a8:f9:7e:fb:a5:ef:a9:59:2d:f4:e6:e2:97:90:e4:
         ab:d5:48:49:01:4c:d8:e1:1f:28:21:7b:b9:f1:98:70:5e:94:
         f6:cb:85:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:20:50 2026 by rpki-client