Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/53ffa25c-3e7e-38b8-8b7a-fca5ee0fc3f8.roa
File:                     53ffa25c-3e7e-38b8-8b7a-fca5ee0fc3f8.roa (raw, json)
Hash identifier:          mXZv1axpI48VUJ5S+p1OZx4NG4tSTl7JJoJ/jBJzn8k=
Subject key identifier:   61:38:49:71:BB:F7:A3:4C:65:AD:2F:61:D9:C7:45:B8:B7:AA:69:52
Certificate issuer:       /CN=b5de9249-f707-4392-b43f-d406dfb20aee
Certificate serial:       010D0C9F4328584CD2A1EAA42711D39EB16E5900
Authority key identifier: 05:0C:20:4D:9D:46:81:D1:F9:1C:0A:D8:09:4B:AF:50:A9:B6:E7:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/53ffa25c-3e7e-38b8-8b7a-fca5ee0fc3f8.roa
Signing time:             Wed 11 Feb 2026 02:00:32 +0000
ROA not before:           Wed 11 Feb 2026 02:00:32 +0000
ROA not after:            Tue 12 May 2026 01:00:32 +0000
asID:                     16504
IP address blocks:        134.6.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d2:a1:ea:a4:27:11:d3:9e:b1:6e:59:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5de9249-f707-4392-b43f-d406dfb20aee
        Validity
            Not Before: Feb 11 02:00:32 2026 GMT
            Not After : May 12 01:00:32 2026 GMT
        Subject: CN=f30e62f2-724d-4463-b13e-2abc5112d32e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d2:73:04:9f:e3:e6:87:6c:64:d3:d4:ba:c2:
                    69:1e:36:fc:00:da:61:5f:83:c8:53:67:81:40:8b:
                    4a:80:4f:4c:aa:08:75:36:22:85:39:65:de:ad:80:
                    77:fa:c2:f7:b4:10:73:95:4e:2d:ab:e1:e0:d7:78:
                    2a:27:42:f5:d0:20:5c:00:d6:e3:78:df:5f:a5:d7:
                    1b:ca:42:48:ce:9c:e2:37:a0:ae:60:01:96:ec:db:
                    a8:e7:42:c7:97:97:53:51:00:8f:cc:ad:c3:75:f9:
                    b1:cb:89:d1:b1:39:ef:8e:11:ce:78:d0:72:1a:71:
                    e2:77:2b:8a:95:24:66:ed:ab:a5:19:5b:4c:ed:73:
                    13:ee:b3:68:bc:92:2c:fb:55:31:c7:1f:2e:e3:c2:
                    bf:6d:33:e7:2d:4a:8f:57:8f:56:82:2a:9a:81:03:
                    53:aa:d4:e9:33:74:9e:ff:ce:c0:e4:c9:d4:49:d6:
                    18:26:87:d0:f5:8c:4f:d6:c7:21:da:c9:fa:01:bb:
                    1d:7d:d9:2c:64:40:3b:ee:aa:1a:d0:b0:a0:9e:c3:
                    67:4e:1d:6f:1d:5a:81:79:47:da:c3:ba:f1:88:0f:
                    84:b3:ae:d6:f3:22:2f:e3:c1:c2:99:4f:29:1d:45:
                    42:06:7b:5a:c5:4e:9c:a5:76:b2:b9:df:97:23:df:
                    cc:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:38:49:71:BB:F7:A3:4C:65:AD:2F:61:D9:C7:45:B8:B7:AA:69:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/53ffa25c-3e7e-38b8-8b7a-fca5ee0fc3f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.crl

            X509v3 Authority Key Identifier:
                keyid:05:0C:20:4D:9D:46:81:D1:F9:1C:0A:D8:09:4B:AF:50:A9:B6:E7:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.6.254.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:d4:f6:7b:cc:ac:91:0e:f0:39:13:e6:e2:54:87:8b:f2:01:
         46:11:5b:90:fd:05:9a:9b:7a:47:df:22:7f:96:00:08:92:41:
         6d:1a:08:15:ee:82:ac:04:62:a8:0e:63:6c:fc:dd:f7:0d:73:
         5d:0a:a8:78:6e:af:49:c8:ef:bd:48:ae:f5:10:2d:e0:11:a3:
         33:ac:c7:39:97:7f:91:ad:d0:e5:63:e4:cb:2f:d9:2c:db:3c:
         2f:b1:a1:f1:5d:b9:7f:ca:1d:89:31:20:ff:9e:10:1b:80:68:
         b1:19:72:c8:94:b1:dc:d2:d4:02:d9:7b:fa:b4:88:8f:cb:a6:
         3a:b3:db:22:81:d3:e5:75:8f:9f:6d:73:d5:91:b5:ff:dc:b4:
         5f:dd:9b:78:2a:4c:13:4d:5e:7d:62:9b:65:26:1e:d2:72:22:
         56:74:45:aa:64:24:e8:73:95:74:f7:94:2d:8d:a6:1a:0c:5e:
         42:89:53:fc:3e:e0:b0:e6:dc:5d:7e:d4:e5:3a:f7:86:57:52:
         b3:26:45:ad:47:81:d0:ed:a2:3d:73:f9:82:76:fc:e8:db:bc:
         1e:c6:b7:01:e4:df:33:40:40:74:5d:d4:9e:48:72:e5:57:20:
         33:b5:53:62:be:1c:29:db:dd:e1:74:ec:c0:95:13:ac:a7:c3:
         2b:20:70:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:34:35 2026 by rpki-client