Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a40fbee7-5dae-4a5d-a79b-cf60cd73e49d/aab759df-8a19-3148-84a3-f4bf3df0857e.roa
File:                     aab759df-8a19-3148-84a3-f4bf3df0857e.roa (raw, json)
Hash identifier:          K9qwyjim+CdaNvpS2VpUJ/54xsbOWjIcR1t85Ke0rQo=
Subject key identifier:   85:97:53:D7:A3:25:8D:34:CD:AE:4C:D7:28:B1:62:51:98:1E:69:F4
Certificate issuer:       /CN=a40fbee7-5dae-4a5d-a79b-cf60cd73e49d
Certificate serial:       010D0C9F4328584CEFF23221F7B05ACCA5F99A48
Authority key identifier: 72:AE:D6:7B:2F:27:2D:67:12:6E:C5:B1:00:D2:F8:25:08:E0:00:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a40fbee7-5dae-4a5d-a79b-cf60cd73e49d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a40fbee7-5dae-4a5d-a79b-cf60cd73e49d/aab759df-8a19-3148-84a3-f4bf3df0857e.roa
Signing time:             Sat 21 Feb 2026 14:00:41 +0000
ROA not before:           Sat 21 Feb 2026 14:00:41 +0000
ROA not after:            Fri 22 May 2026 13:00:41 +0000
asID:                     14618
IP address blocks:        192.245.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a40fbee7-5dae-4a5d-a79b-cf60cd73e49d/a40fbee7-5dae-4a5d-a79b-cf60cd73e49d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a40fbee7-5dae-4a5d-a79b-cf60cd73e49d/a40fbee7-5dae-4a5d-a79b-cf60cd73e49d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a40fbee7-5dae-4a5d-a79b-cf60cd73e49d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ef:f2:32:21:f7:b0:5a:cc:a5:f9:9a:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a40fbee7-5dae-4a5d-a79b-cf60cd73e49d
        Validity
            Not Before: Feb 21 14:00:41 2026 GMT
            Not After : May 22 13:00:41 2026 GMT
        Subject: CN=c9b3e093-8e04-4a7f-887c-40ececb4fe51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:4f:ad:18:55:ca:4c:83:6b:b2:1e:aa:26:a2:
                    e9:cf:93:bb:98:94:51:6b:4c:50:a9:c0:61:f7:77:
                    8a:c9:4a:b7:88:d8:47:bd:79:25:20:8a:99:3c:20:
                    9c:90:98:89:ef:27:d0:1e:e0:98:d0:67:35:86:33:
                    5b:e6:e3:a5:eb:84:70:4e:48:9e:85:f6:91:da:37:
                    43:f8:eb:c4:b5:e6:6f:a0:1d:54:43:2b:f2:a1:05:
                    f3:f2:39:50:54:20:46:fd:be:b4:a5:d1:f6:9f:3f:
                    96:33:b3:64:43:e8:dc:59:7c:6a:d3:c1:e3:29:ac:
                    46:6e:f6:98:97:e3:cf:a4:09:28:b8:86:3a:d5:67:
                    3a:c9:30:dd:94:13:c0:3f:d1:99:5e:bf:36:e0:69:
                    d6:6d:85:96:be:17:c8:43:7c:5d:1b:5b:9c:f5:ee:
                    9a:ae:a3:26:cc:0b:b2:12:09:9f:ff:61:a8:d4:c9:
                    57:45:93:82:a7:b2:20:90:1c:fe:05:9e:15:d9:84:
                    23:32:7e:4b:37:2c:7c:31:5d:02:30:9a:1a:6d:b3:
                    54:c3:f1:b0:63:a8:5a:27:f0:e2:5e:d8:54:73:6a:
                    88:2f:5a:b9:90:85:21:ec:1c:5d:9f:3b:be:2a:fc:
                    60:09:5a:68:fe:69:1c:9a:b3:f8:f4:b9:21:ef:85:
                    e9:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:97:53:D7:A3:25:8D:34:CD:AE:4C:D7:28:B1:62:51:98:1E:69:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a40fbee7-5dae-4a5d-a79b-cf60cd73e49d/aab759df-8a19-3148-84a3-f4bf3df0857e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a40fbee7-5dae-4a5d-a79b-cf60cd73e49d/a40fbee7-5dae-4a5d-a79b-cf60cd73e49d.crl

            X509v3 Authority Key Identifier:
                keyid:72:AE:D6:7B:2F:27:2D:67:12:6E:C5:B1:00:D2:F8:25:08:E0:00:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a40fbee7-5dae-4a5d-a79b-cf60cd73e49d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.245.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:bb:6e:05:0b:2c:f5:e8:e8:b1:63:9f:56:22:30:c0:48:3b:
         3a:15:f5:a4:18:bc:58:09:a7:2f:4f:4b:f8:85:69:a6:ff:88:
         15:14:cf:4f:f1:2f:ee:2e:b0:fb:84:28:d3:8a:78:0e:3b:93:
         ce:e6:b2:57:e7:90:1c:7d:7b:85:85:8b:51:af:de:fc:5c:b4:
         06:4f:6a:6a:0b:c9:76:ec:dd:23:12:98:b6:14:0d:06:98:6f:
         cd:a5:14:db:42:a7:d4:65:ba:06:b0:9e:9b:15:da:fc:2e:74:
         8e:55:89:7a:ac:12:82:d1:87:7d:c7:70:ec:3f:2a:4c:22:0f:
         12:bd:f6:7e:06:08:76:d7:9e:2d:c6:24:af:f3:0b:9c:7a:9a:
         5d:5d:17:32:bd:13:fc:44:53:49:83:14:3b:b6:40:c3:6a:05:
         3d:e1:7b:e9:87:a5:88:ed:77:d7:4c:3e:bc:0f:0e:56:7e:60:
         32:02:8a:ad:73:eb:3e:be:4c:e7:28:4e:8a:7e:b8:ee:fc:a8:
         50:6b:ea:55:28:dc:0e:2b:d8:1b:4a:2c:29:a8:83:77:90:93:
         c3:88:4e:54:59:a4:39:84:fb:cf:07:68:34:40:68:da:3d:69:
         ce:a9:ec:02:fd:f0:d5:2e:d2:48:67:fa:cc:4b:c1:54:30:78:
         58:85:d6:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:15:42 2026 by rpki-client