Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945/d4884f4e-c468-36d8-aa72-3b277a102e42.roa
File:                     d4884f4e-c468-36d8-aa72-3b277a102e42.roa (raw, json)
Hash identifier:          ruuYmQAxGUUytxmtlLgKEHRTHtK74KYJrpLu8+l8e0s=
Subject key identifier:   4E:74:C3:FC:BA:13:A8:B4:DE:37:76:E2:6F:86:C5:9B:0A:85:7F:36
Certificate issuer:       /CN=d03866eb-6362-4657-aa66-83307258d945
Certificate serial:       010D0C9F4328584CA5F6FA417059B6ECE2FBCDC0
Authority key identifier: 65:67:96:9C:5A:F7:28:6C:5C:24:E2:4F:E8:8A:B2:76:7E:B4:29:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945/d4884f4e-c468-36d8-aa72-3b277a102e42.roa
Signing time:             Mon 26 Jan 2026 02:00:32 +0000
ROA not before:           Mon 26 Jan 2026 02:00:32 +0000
ROA not after:            Sun 26 Apr 2026 01:00:32 +0000
asID:                     16509
IP address blocks:        192.101.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945/d03866eb-6362-4657-aa66-83307258d945.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945/d03866eb-6362-4657-aa66-83307258d945.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:a5:f6:fa:41:70:59:b6:ec:e2:fb:cd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d03866eb-6362-4657-aa66-83307258d945
        Validity
            Not Before: Jan 26 02:00:32 2026 GMT
            Not After : Apr 26 01:00:32 2026 GMT
        Subject: CN=d0f37f36-0b24-4d12-8160-f56b88a3a8a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:d8:1e:0b:b2:a8:8c:22:58:4c:70:6b:a5:fa:
                    eb:c6:72:38:4d:78:35:9b:76:fb:95:2f:1f:c5:c9:
                    c2:73:44:64:e9:45:9e:e5:06:c6:a9:ef:97:8a:91:
                    a2:89:2c:7a:c6:f6:c6:b3:5c:29:55:ad:d6:be:ae:
                    bd:b4:b2:06:3b:5c:b6:4c:78:1d:bd:91:58:f0:b3:
                    f9:8e:0f:01:53:01:77:29:22:b2:38:de:61:04:e6:
                    e9:6d:8f:9e:b5:33:b7:9f:f3:49:00:b4:14:7b:b9:
                    5e:2e:74:33:05:f4:30:47:08:96:91:22:fe:4f:f5:
                    18:8c:f2:68:ce:34:dd:23:7d:dc:e1:c1:44:37:6a:
                    fc:55:5b:7b:85:48:f3:4e:07:f1:16:07:cc:1d:44:
                    9b:34:2c:4a:56:32:3b:13:d3:63:5f:f1:8d:94:41:
                    58:15:2c:de:15:dd:1b:e3:1f:d0:94:e7:93:20:99:
                    87:6d:07:2e:4a:48:d5:79:ca:b9:d7:f7:8d:5f:e2:
                    28:29:ee:a4:1c:bf:76:4c:7a:ce:6e:94:d2:72:a4:
                    c5:4a:bc:e6:1c:d0:4e:a9:c7:14:51:89:44:60:67:
                    9b:14:7b:30:b9:dd:cc:96:0b:d3:3d:24:e5:e7:2b:
                    8e:1e:cd:a3:cd:a3:a3:73:1f:98:0c:5b:49:6d:a9:
                    2a:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:74:C3:FC:BA:13:A8:B4:DE:37:76:E2:6F:86:C5:9B:0A:85:7F:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945/d4884f4e-c468-36d8-aa72-3b277a102e42.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945/d03866eb-6362-4657-aa66-83307258d945.crl

            X509v3 Authority Key Identifier:
                keyid:65:67:96:9C:5A:F7:28:6C:5C:24:E2:4F:E8:8A:B2:76:7E:B4:29:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.101.70.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:fb:d7:75:09:5e:9a:86:a0:65:07:a2:11:c8:df:6c:e9:6a:
         c4:f5:d9:1d:1f:00:29:6c:e2:c7:c5:40:a5:d9:61:64:ea:5c:
         9c:8b:fe:42:d6:65:85:d8:df:36:41:f9:1c:c0:34:c2:3f:9d:
         42:58:f4:06:4b:f3:50:93:f6:15:8f:68:f0:bb:34:9e:ec:bb:
         f4:1a:1a:7e:a4:b9:83:bc:6f:3b:65:dd:cd:34:be:e3:b3:2b:
         ae:0f:5d:10:f1:ee:86:6c:4c:4f:29:ef:01:b4:5a:19:95:a7:
         a2:ac:e1:69:a2:e1:67:bc:f7:04:d9:0a:57:83:cb:95:12:8e:
         16:ca:b0:e8:fe:83:32:9a:27:a1:90:86:8c:78:09:20:0a:5e:
         02:c7:5f:46:bd:fa:f5:58:7e:a0:05:bf:15:f8:64:c0:9c:7c:
         a8:ea:89:e8:30:38:2d:1f:29:8d:ed:f6:6d:26:09:fb:f5:e9:
         bc:54:fb:b7:19:ab:be:48:63:4d:67:e8:68:cd:d3:89:97:ed:
         1a:ae:3f:c9:6d:8c:40:05:5b:04:49:83:0a:a0:83:b9:76:a9:
         80:c2:46:8b:dc:4c:8c:20:83:63:6c:34:2a:2f:44:f5:60:49:
         69:25:e5:b3:78:8b:d5:5d:e7:19:cc:f0:1c:26:c9:84:36:da:
         dd:c6:d4:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:19:56 2026 by rpki-client