Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/8a0d8ff9-0e83-3f7d-9da4-b8164674e7ec.roa
File:                     8a0d8ff9-0e83-3f7d-9da4-b8164674e7ec.roa (raw, json)
Hash identifier:          Ri16bSqACoKu8k1zw6QlwhCQXkV8U+cd2Tc+bcZbiDs=
Subject key identifier:   66:78:08:E4:E4:8E:E0:CF:F8:A7:10:C6:3F:C0:78:27:7D:00:61:65
Certificate issuer:       /CN=b5de9249-f707-4392-b43f-d406dfb20aee
Certificate serial:       010D0C9F4328584CC07CD70BA222B4A1356E84C0
Authority key identifier: 05:0C:20:4D:9D:46:81:D1:F9:1C:0A:D8:09:4B:AF:50:A9:B6:E7:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/8a0d8ff9-0e83-3f7d-9da4-b8164674e7ec.roa
Signing time:             Wed 04 Feb 2026 14:00:39 +0000
ROA not before:           Wed 04 Feb 2026 14:00:39 +0000
ROA not after:            Tue 05 May 2026 13:00:39 +0000
asID:                     16504
IP address blocks:        156.70.184.0/21 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c0:7c:d7:0b:a2:22:b4:a1:35:6e:84:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5de9249-f707-4392-b43f-d406dfb20aee
        Validity
            Not Before: Feb  4 14:00:39 2026 GMT
            Not After : May  5 13:00:39 2026 GMT
        Subject: CN=5474d1ad-62a4-42fa-96d3-ed433abd7b22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:0d:68:60:ec:af:51:e5:78:88:fb:03:8a:fc:
                    bf:72:8b:ad:1c:59:5b:e1:34:2e:ab:a6:b3:c1:5f:
                    4b:88:bc:84:80:e7:94:7e:c4:d7:25:8c:44:d3:98:
                    21:c0:39:0c:ac:5d:4e:49:d0:c0:6f:21:2f:cb:14:
                    82:2c:fc:36:7a:8c:31:9a:ed:15:b1:68:9d:6a:6d:
                    f5:21:18:a8:b0:f3:32:9b:a2:8a:5b:a3:98:ae:ec:
                    f9:31:ed:22:4f:40:bc:50:d2:10:8f:ec:92:f5:1d:
                    ae:07:32:fc:f5:a8:78:b7:8c:37:d7:a7:51:ef:48:
                    4c:c1:28:74:10:a4:15:18:09:6b:0b:bf:81:2f:54:
                    77:13:50:83:ab:25:8e:ef:43:6b:12:9f:55:19:2e:
                    45:2d:9a:2f:dd:3a:ce:95:c7:74:f6:14:51:29:15:
                    d7:0f:79:23:19:27:a0:d9:eb:53:c3:3e:e1:da:29:
                    89:f4:48:62:70:1e:78:39:38:6d:d3:02:4d:57:0c:
                    9d:c2:53:19:bf:04:12:b5:70:5b:6b:85:be:96:39:
                    d6:72:d4:cd:d1:3f:3a:fd:19:8f:c3:6b:64:71:71:
                    04:4b:f7:1c:92:71:45:be:49:ac:d3:a1:0d:cb:5b:
                    a7:ed:bc:28:f5:22:ca:b0:f8:9e:61:94:26:41:04:
                    cc:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:78:08:E4:E4:8E:E0:CF:F8:A7:10:C6:3F:C0:78:27:7D:00:61:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/8a0d8ff9-0e83-3f7d-9da4-b8164674e7ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.crl

            X509v3 Authority Key Identifier:
                keyid:05:0C:20:4D:9D:46:81:D1:F9:1C:0A:D8:09:4B:AF:50:A9:B6:E7:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.70.184.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:a5:64:89:7f:f2:3f:67:2b:05:0e:10:fe:dd:77:a7:36:f5:
         06:24:b9:6d:a9:69:da:d9:d4:77:39:dd:a6:38:25:5c:36:47:
         60:db:ed:62:cb:95:65:29:d9:ca:bf:77:24:0e:22:a0:82:62:
         37:69:11:de:74:9f:df:de:97:55:1a:9b:87:68:c6:1d:b0:53:
         2d:d4:94:b8:bb:64:1c:0c:9a:fd:cb:26:bc:68:53:d3:f7:67:
         de:b9:f0:09:e5:e0:db:04:33:8d:73:b5:9f:ed:c2:16:65:91:
         42:9a:5c:35:bb:5c:8a:5d:e8:2c:ae:ca:fb:ed:ad:79:10:92:
         b0:6a:26:1b:29:49:c5:87:79:b0:2f:88:42:d4:1b:9c:9c:df:
         23:e4:7c:96:b4:e8:62:58:ac:36:7c:c1:7b:a8:7e:c9:2e:06:
         fc:6f:cc:1a:d9:b8:49:0d:54:8f:a8:e9:af:95:2f:2f:a8:eb:
         8e:42:b9:d8:1a:4c:c5:cf:22:5f:5f:07:bc:74:dd:0f:8c:ca:
         c3:87:a4:43:c1:bd:7f:52:22:3a:d5:14:be:a6:f2:f2:a1:95:
         f7:66:54:e1:e5:5a:dc:75:c7:89:48:ae:ae:a0:5b:20:9d:ec:
         91:70:23:71:0e:d8:29:2a:63:4d:da:cc:8c:29:8f:11:a7:5a:
         86:f1:33:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:07:25 2026 by rpki-client