Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/f7f8b747-8cb0-3f57-9172-1b93ad3c0bea.roa
File:                     f7f8b747-8cb0-3f57-9172-1b93ad3c0bea.roa (raw, json)
Hash identifier:          bZ/ttXtZvmZO6drPHGW5M/UhKCgPs0LtEESfCXvHASk=
Subject key identifier:   88:5B:96:15:9F:92:DF:45:9C:18:E7:07:9E:9B:6A:F9:3A:76:49:D6
Certificate issuer:       /CN=bc6884d6-b11e-4280-9c4c-8177287d9869
Certificate serial:       010D0C9F4328584CF5879065D664BE5E18772400
Authority key identifier: 15:C8:EE:BC:17:5F:6B:10:C3:DC:7A:CF:57:D4:D1:F3:90:0F:0E:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/f7f8b747-8cb0-3f57-9172-1b93ad3c0bea.roa
Signing time:             Mon 23 Feb 2026 14:00:41 +0000
ROA not before:           Mon 23 Feb 2026 14:00:41 +0000
ROA not after:            Sun 24 May 2026 13:00:41 +0000
asID:                     398324
IP address blocks:        206.168.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/bc6884d6-b11e-4280-9c4c-8177287d9869.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/bc6884d6-b11e-4280-9c4c-8177287d9869.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f5:87:90:65:d6:64:be:5e:18:77:24:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc6884d6-b11e-4280-9c4c-8177287d9869
        Validity
            Not Before: Feb 23 14:00:41 2026 GMT
            Not After : May 24 13:00:41 2026 GMT
        Subject: CN=780881cb-4416-4675-8638-9552e116a501
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:52:3b:d6:ac:a7:55:9e:77:e9:22:c9:b5:29:
                    a7:80:fa:9a:cb:cc:72:1c:31:68:72:3f:57:8f:59:
                    38:96:0a:5e:76:ec:6e:51:a1:e6:0e:73:9a:96:c2:
                    b9:2c:e7:6b:10:90:c2:cf:04:5f:fa:d5:68:2b:b9:
                    60:70:bb:18:cb:ab:46:00:a8:a4:66:9b:9b:a7:96:
                    db:57:a5:d0:c6:ce:71:99:18:43:91:b7:46:d8:8c:
                    22:69:b2:05:38:d1:8a:b5:8b:6c:cb:0d:d9:f7:6b:
                    a6:46:da:4e:1b:4f:38:82:0c:bb:9d:fc:f0:1c:49:
                    3a:3f:86:cf:0e:30:13:3e:cc:a9:34:17:5a:00:6c:
                    a7:17:e6:08:c6:12:f8:cd:75:2d:bc:95:4c:70:9f:
                    41:a3:44:2d:4a:92:49:cf:03:bb:e3:5e:f9:9e:07:
                    e7:06:de:ab:66:6f:ec:06:45:b0:83:59:c4:da:28:
                    26:80:03:09:5a:78:8f:2a:1d:c0:b2:a9:c8:a5:10:
                    a6:f8:d2:d6:ba:09:6c:ff:b6:c2:07:b4:f0:70:3a:
                    73:cc:b7:bb:bb:3d:22:b9:ce:43:8e:d7:73:48:31:
                    11:fb:08:d1:7d:9b:05:23:29:83:f3:78:43:2a:14:
                    94:41:5b:11:de:3d:e2:7a:cf:30:cb:be:10:c8:6e:
                    94:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:5B:96:15:9F:92:DF:45:9C:18:E7:07:9E:9B:6A:F9:3A:76:49:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/f7f8b747-8cb0-3f57-9172-1b93ad3c0bea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/bc6884d6-b11e-4280-9c4c-8177287d9869.crl

            X509v3 Authority Key Identifier:
                keyid:15:C8:EE:BC:17:5F:6B:10:C3:DC:7A:CF:57:D4:D1:F3:90:0F:0E:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.168.32.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:cf:ec:ac:3d:d3:bb:da:22:7d:34:f6:b9:df:60:8a:40:8d:
         34:a2:b8:3a:68:45:ef:f9:7d:d3:75:7b:69:b1:4f:f4:0b:fe:
         e8:ef:5b:62:1b:be:91:65:92:b3:be:e6:10:fb:40:af:ba:16:
         fc:5f:90:ce:89:ff:ea:ea:8c:20:70:32:6b:76:1b:6d:08:fa:
         a9:5c:40:5e:ae:38:3f:d1:58:26:44:5f:4e:bc:ef:ea:21:d0:
         f7:af:24:a1:a8:85:51:ef:59:80:81:27:79:29:3a:f6:19:0b:
         b6:34:18:6b:ee:11:bf:2c:6a:a6:81:12:85:c5:da:1e:fe:17:
         b8:6e:ce:b7:c1:92:ca:1b:54:1a:2f:af:1f:1a:23:70:27:b0:
         c8:16:34:09:32:af:4e:bb:2a:f5:03:26:d2:70:1e:eb:ac:1f:
         1d:56:f1:31:68:7b:e2:8e:49:10:a4:43:0e:35:56:3c:a9:f7:
         48:a9:a6:c5:ab:be:fc:fe:f7:c6:ea:9b:61:8d:2e:bd:39:39:
         df:14:96:c0:77:85:54:c6:27:07:87:e9:ab:01:41:cf:aa:7c:
         b2:8e:1c:f1:be:71:cf:ab:bc:12:c4:88:e9:1c:58:6e:f6:17:
         b6:ec:a1:ef:0d:8d:4d:b3:a4:df:39:a6:dd:fe:32:15:2b:ae:
         8c:5b:16:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:45:22 2026 by rpki-client