Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f6663be-0957-45cd-86d6-e3d6354f6b9b/c770bcc9-e1d9-39d7-8f2d-f40306e1978f.roa
File:                     c770bcc9-e1d9-39d7-8f2d-f40306e1978f.roa (raw, json)
Hash identifier:          dzsKT+osO0Be5x6g3/v9cfrs5JgvIUmfRVl+sPptW3o=
Subject key identifier:   84:EB:B6:6F:F2:BA:F5:6E:2C:34:F3:E5:D8:BF:C6:51:D4:BC:32:50
Certificate issuer:       /CN=8f6663be-0957-45cd-86d6-e3d6354f6b9b
Certificate serial:       010D0C9F4328584CCA41E8ACEC7A70EF3248F840
Authority key identifier: 95:35:DC:88:C9:4E:85:61:93:6A:C8:A6:BD:08:11:D0:A0:AE:7E:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f6663be-0957-45cd-86d6-e3d6354f6b9b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f6663be-0957-45cd-86d6-e3d6354f6b9b/c770bcc9-e1d9-39d7-8f2d-f40306e1978f.roa
Signing time:             Sun 08 Feb 2026 02:00:32 +0000
ROA not before:           Sun 08 Feb 2026 02:00:32 +0000
ROA not after:            Sat 09 May 2026 01:00:32 +0000
asID:                     14618
IP address blocks:        168.100.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f6663be-0957-45cd-86d6-e3d6354f6b9b/8f6663be-0957-45cd-86d6-e3d6354f6b9b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f6663be-0957-45cd-86d6-e3d6354f6b9b/8f6663be-0957-45cd-86d6-e3d6354f6b9b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f6663be-0957-45cd-86d6-e3d6354f6b9b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ca:41:e8:ac:ec:7a:70:ef:32:48:f8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f6663be-0957-45cd-86d6-e3d6354f6b9b
        Validity
            Not Before: Feb  8 02:00:32 2026 GMT
            Not After : May  9 01:00:32 2026 GMT
        Subject: CN=5b13f218-590d-4197-9718-d2c59dbcea87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:79:f4:f5:75:b2:39:ab:ca:6b:cf:8d:c4:82:
                    9d:40:1a:68:2a:3d:58:2a:6c:be:28:3e:ab:92:df:
                    64:0d:71:7c:3e:48:a6:27:d9:9f:0e:2f:37:49:20:
                    f5:35:66:5b:1f:58:39:fe:19:b1:b5:35:10:fb:81:
                    28:6c:fa:4b:e6:97:f4:f9:2f:6b:c4:69:47:c6:ab:
                    94:c9:0e:85:9d:ff:a0:80:de:ff:9e:94:c9:f3:04:
                    af:21:5f:f5:46:66:1f:2e:0c:94:a1:d6:e1:a3:1b:
                    ef:3c:bc:29:be:cf:5f:5c:44:79:be:fe:f0:30:a9:
                    7d:ad:6a:21:03:cb:be:e8:6d:99:39:41:49:95:61:
                    9a:6a:e7:a6:49:7e:92:13:93:f6:87:e8:02:85:26:
                    85:77:32:d4:72:f1:97:aa:fb:b9:0d:c1:0d:85:e2:
                    c4:b6:fb:5b:8a:6d:0f:8d:5b:7e:da:ec:46:8d:a8:
                    13:11:cc:a1:05:3b:5f:4c:f1:0e:9b:72:c0:22:ed:
                    d9:be:32:d9:3e:89:69:ab:98:1f:35:7f:40:e1:85:
                    c4:f2:69:f3:67:19:c1:28:a5:21:2c:6c:8d:2a:97:
                    ec:2e:d6:69:51:43:d3:2c:14:ac:50:44:4c:58:32:
                    d9:af:01:02:9e:55:3d:f0:51:db:5f:da:bd:a6:10:
                    c5:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:EB:B6:6F:F2:BA:F5:6E:2C:34:F3:E5:D8:BF:C6:51:D4:BC:32:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f6663be-0957-45cd-86d6-e3d6354f6b9b/c770bcc9-e1d9-39d7-8f2d-f40306e1978f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f6663be-0957-45cd-86d6-e3d6354f6b9b/8f6663be-0957-45cd-86d6-e3d6354f6b9b.crl

            X509v3 Authority Key Identifier:
                keyid:95:35:DC:88:C9:4E:85:61:93:6A:C8:A6:BD:08:11:D0:A0:AE:7E:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f6663be-0957-45cd-86d6-e3d6354f6b9b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.100.27.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:b5:98:10:4e:85:b0:4c:3d:be:53:06:13:e7:1c:94:d9:3d:
         74:df:1e:2b:4d:65:52:8f:a1:bb:6d:f6:95:5b:95:7b:20:6f:
         59:92:54:b8:68:b9:f2:93:13:da:9e:fe:de:69:15:7f:1b:29:
         8f:e2:2f:a3:d4:5b:96:5a:42:fc:40:6c:8b:99:2f:23:f6:59:
         ca:e2:e1:a7:90:86:b2:ff:2f:6e:f7:40:3c:9e:f9:b2:7b:ea:
         ff:96:3b:43:dc:ef:82:ea:b6:65:25:40:e8:27:04:5a:a8:19:
         8f:2a:fc:30:2f:90:19:19:d6:c1:e7:29:4c:d7:d6:40:1d:a9:
         b0:96:c7:30:a5:e5:6c:f3:e9:53:54:df:c1:78:6a:30:7c:65:
         12:c8:a7:95:22:9e:bc:d7:2f:2a:4d:eb:66:f3:c7:4c:26:6b:
         50:33:9b:18:07:41:a7:4e:09:99:3c:f7:2e:f8:d5:4e:64:90:
         da:3d:ae:b6:c7:b4:51:8f:e4:64:75:80:dd:a1:71:f5:67:d4:
         17:fa:23:58:70:0a:08:76:1c:67:d4:5e:d6:d1:d4:3e:07:ff:
         23:5e:6c:43:7c:40:9f:08:3f:23:38:fb:f1:30:04:d6:c8:6b:
         4c:88:a4:49:4e:cd:0a:a6:14:e4:5b:2f:cd:4c:98:b1:61:2e:
         ce:66:8b:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:34:31 2026 by rpki-client