Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/6efccda5-9898-3892-bc80-aa26d7e3db9f.roa
File:                     6efccda5-9898-3892-bc80-aa26d7e3db9f.roa (raw, json)
Hash identifier:          IQp+aMoSGf73WKM4Bq35NdN/1H3ZdOO0NSigDt79Bpk=
Subject key identifier:   96:EC:8E:DB:13:18:11:0F:3B:43:F9:7A:FC:A4:96:3C:18:E0:58:3E
Certificate issuer:       /CN=e4bb5ad3-d823-4023-aace-329885f50c4b
Certificate serial:       010D0C9F4328584CCE71FC366E849F629F78AB00
Authority key identifier: DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/6efccda5-9898-3892-bc80-aa26d7e3db9f.roa
Signing time:             Mon 09 Feb 2026 14:00:39 +0000
ROA not before:           Mon 09 Feb 2026 14:00:39 +0000
ROA not after:            Sun 10 May 2026 13:00:39 +0000
asID:                     14618
IP address blocks:        167.234.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ce:71:fc:36:6e:84:9f:62:9f:78:ab:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4bb5ad3-d823-4023-aace-329885f50c4b
        Validity
            Not Before: Feb  9 14:00:39 2026 GMT
            Not After : May 10 13:00:39 2026 GMT
        Subject: CN=e7513e42-2948-4245-8b05-7daa693ff077
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:23:ed:5a:2c:24:c8:21:ea:89:e9:58:ab:66:
                    b6:10:73:37:b1:06:1f:a2:c1:fa:86:42:8d:78:08:
                    08:2a:33:1e:98:14:fc:23:88:04:df:b1:e4:d1:22:
                    87:4a:78:b7:e0:fd:e5:a6:f4:26:2d:25:ea:74:bd:
                    e1:56:4a:70:0a:c4:03:09:f8:93:5e:30:d7:93:b2:
                    c2:4a:cc:01:7e:ea:ba:4e:44:7e:46:e0:be:9e:94:
                    05:5e:0b:14:0d:09:24:dd:b0:d5:1e:8f:83:da:ad:
                    97:76:0b:27:70:13:3e:bd:64:25:f1:a7:b4:93:23:
                    33:13:c6:4e:2a:86:65:44:2f:b6:70:9e:ce:42:ea:
                    ee:9c:4c:f5:7e:95:ea:d8:f9:e1:68:78:42:d0:b2:
                    13:06:9b:7d:53:1d:43:a0:f5:af:fe:ee:9c:33:f9:
                    06:a3:e7:ef:d7:72:8a:a4:30:83:44:17:e1:19:d9:
                    61:9e:d4:de:1b:55:eb:ab:49:52:d6:f5:ad:02:60:
                    86:32:0e:61:bc:04:b6:38:df:4d:31:26:4b:54:99:
                    7a:f5:7e:8a:67:33:6b:04:4e:54:e4:17:74:fd:d7:
                    95:bc:50:33:e8:95:f8:bb:65:42:e4:11:41:f7:8e:
                    a8:4a:e9:08:d1:df:f4:1f:0b:33:c7:33:f0:8f:8f:
                    54:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:EC:8E:DB:13:18:11:0F:3B:43:F9:7A:FC:A4:96:3C:18:E0:58:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/6efccda5-9898-3892-bc80-aa26d7e3db9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl

            X509v3 Authority Key Identifier:
                keyid:DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.234.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:2b:18:11:25:6f:70:48:51:91:db:28:62:07:75:b9:c8:c1:
         d9:4c:d9:0b:52:f7:31:3d:6c:93:1f:44:72:83:b0:a6:97:f7:
         4a:8c:d4:11:70:23:db:b0:2b:ae:86:ff:5d:dc:03:d1:2d:f9:
         dd:21:b2:81:8e:34:f3:97:85:05:71:a0:3a:c9:f0:18:fb:f0:
         96:af:38:b2:8d:90:74:8f:87:7e:2b:45:23:16:c1:1e:ce:fb:
         c8:59:ac:3f:51:d5:3a:10:d9:38:9e:8f:22:5d:0a:46:19:3f:
         76:d7:e1:18:bc:ad:56:62:d1:e7:9f:03:d6:48:67:95:e3:ee:
         0d:e2:6d:00:1d:f4:84:01:3f:a5:34:bc:49:66:f3:d7:9a:20:
         fc:26:3a:b2:96:61:98:5b:6c:18:e9:53:36:06:d2:f4:df:e9:
         87:a4:a9:55:20:ca:af:e9:b3:ed:8d:f3:f1:04:6b:14:58:b9:
         55:4f:7b:a2:1b:a8:35:a6:63:4d:19:8d:b2:9a:98:99:cc:67:
         0a:90:34:1d:f1:5a:54:a1:3b:48:f1:57:cd:7b:d9:c6:b6:f1:
         6b:ac:60:a1:53:b8:3f:4d:db:4b:a2:24:a1:aa:1c:12:20:df:
         0a:13:5e:96:7b:ab:29:f9:43:01:6d:b9:57:90:a9:13:fd:2c:
         c7:fd:ff:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:31:24 2026 by rpki-client