Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/fed315c7-e9df-35c1-b17c-1e75b08b0642.roa
File:                     fed315c7-e9df-35c1-b17c-1e75b08b0642.roa (raw, json)
Hash identifier:          F+hjfzmL8Ia1elFdmiIn0lj+V2f0h4XpVYSpwOn7oI4=
Subject key identifier:   AD:A5:2D:F8:1D:50:EA:35:7B:92:C7:D2:BB:62:B9:8B:E2:8A:AA:1E
Certificate issuer:       /CN=455a97ae-df4e-49bc-9f76-ff025a5c25e8
Certificate serial:       010D0C9F4328584CCE71FD1760987245B6B13440
Authority key identifier: D6:AE:8D:6E:B8:CE:58:71:FF:93:91:94:4E:95:35:C4:27:93:B9:4E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/fed315c7-e9df-35c1-b17c-1e75b08b0642.roa
Signing time:             Mon 09 Feb 2026 14:00:39 +0000
ROA not before:           Mon 09 Feb 2026 14:00:39 +0000
ROA not after:            Sun 10 May 2026 13:00:39 +0000
asID:                     399471
IP address blocks:        163.123.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ce:71:fd:17:60:98:72:45:b6:b1:34:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=455a97ae-df4e-49bc-9f76-ff025a5c25e8
        Validity
            Not Before: Feb  9 14:00:39 2026 GMT
            Not After : May 10 13:00:39 2026 GMT
        Subject: CN=1cb1bdce-cb02-4caa-bf16-801a3f5f1ab5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e9:48:ae:92:09:66:65:a0:a5:64:51:ef:6a:
                    30:e9:3a:cf:ad:51:1f:72:35:d9:51:83:f0:87:bc:
                    c6:9a:c9:8a:0f:57:c3:85:9c:f5:4e:33:3c:73:79:
                    d6:b0:32:a7:08:7b:f9:c7:51:14:38:b0:6e:4b:b1:
                    b0:2b:23:9f:98:ec:27:1f:01:84:5d:f6:49:ec:80:
                    f8:34:80:3d:d5:ae:e7:3c:cc:9d:3e:a5:4b:29:e0:
                    56:ed:c0:d0:94:cd:cd:29:7f:a0:7d:19:cf:d0:47:
                    96:8f:5e:5f:eb:df:fb:23:5f:3b:80:01:fa:7d:f6:
                    2e:cc:c4:17:e6:63:d2:52:c5:0a:75:69:62:fd:ab:
                    18:62:4b:64:6a:e7:37:0e:bf:c2:f0:ca:a2:70:0f:
                    31:4d:14:36:26:c2:9d:df:a3:ea:d4:32:f7:ee:59:
                    c6:62:df:9b:c1:cf:35:f9:9e:76:ee:54:bd:5d:52:
                    7a:c7:b6:80:f2:86:e7:ec:20:55:49:0a:c8:a0:43:
                    f4:62:8b:90:16:cb:5e:a3:dc:35:6e:d9:89:2b:9e:
                    ae:fa:b4:71:7d:15:d6:72:12:c9:b7:57:e3:4b:91:
                    e4:68:cc:1e:a5:35:19:dc:01:7c:59:07:db:c2:8c:
                    76:a2:fb:60:6c:dd:a1:ba:5c:64:1f:56:f0:cd:91:
                    e3:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:A5:2D:F8:1D:50:EA:35:7B:92:C7:D2:BB:62:B9:8B:E2:8A:AA:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/fed315c7-e9df-35c1-b17c-1e75b08b0642.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.crl

            X509v3 Authority Key Identifier:
                keyid:D6:AE:8D:6E:B8:CE:58:71:FF:93:91:94:4E:95:35:C4:27:93:B9:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.123.140.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:81:bd:80:dc:5a:e5:3a:33:4c:7a:bd:b9:ee:dc:0b:d8:3a:
         44:7e:7f:a7:68:ec:b8:ac:47:3e:e3:29:d1:d4:9f:be:93:3f:
         ed:a8:e7:56:8c:4b:16:5d:75:f5:9c:34:75:83:bb:3a:21:94:
         13:7f:d2:fc:51:af:5e:b1:00:11:73:f5:8b:27:b2:ac:04:91:
         b4:f0:f6:94:ee:5c:e3:cf:15:d4:97:0b:30:0b:29:18:66:e7:
         30:75:54:1f:10:ed:52:05:a3:17:1a:e6:ee:53:f2:f3:97:b9:
         91:6e:54:a0:e3:9b:48:86:75:25:94:75:5a:1c:15:5d:62:09:
         32:54:18:00:c2:04:47:7d:93:1e:55:e6:b3:f6:5d:ec:e0:69:
         0e:74:79:1d:de:86:fd:ba:5c:21:2a:8b:ec:47:78:40:b8:b1:
         54:7f:43:e1:af:f7:4e:cb:6a:06:ff:6b:db:10:79:16:8b:d1:
         d0:64:7b:0b:44:0f:a5:a1:ae:6b:66:b5:2a:89:86:bd:c7:ba:
         00:cf:4f:8f:5c:94:7e:7f:56:9d:a7:03:c8:d7:44:fd:84:29:
         70:82:12:eb:13:b3:97:db:91:17:d4:30:55:04:e6:30:35:14:
         4d:de:00:b1:ad:a5:b7:4a:61:55:cb:30:fd:e6:df:0a:68:c2:
         fb:14:09:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:14:13 2026 by rpki-client