Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/8bf04735-6512-3b69-9b6e-ab2251777c4a.roa
File:                     8bf04735-6512-3b69-9b6e-ab2251777c4a.roa (raw, json)
Hash identifier:          jqKQNzpneLUMrkM/9Jrpba1ZWnC68F753M6lITewQLE=
Subject key identifier:   AB:91:F4:A7:E9:21:40:34:49:06:F0:00:B4:A9:1F:B2:3D:9F:7B:AE
Certificate issuer:       /CN=f80f9298-8029-4285-89d7-27308341b2e0
Certificate serial:       010D0C9F4328584CF77CA82A13EA7F8D9F4B6300
Authority key identifier: 67:6F:DF:98:DD:C5:B2:D6:A7:9F:9F:CF:0E:49:5C:38:64:D1:44:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/8bf04735-6512-3b69-9b6e-ab2251777c4a.roa
Signing time:             Tue 24 Feb 2026 06:50:28 +0000
ROA not before:           Tue 24 Feb 2026 06:50:28 +0000
ROA not after:            Mon 25 May 2026 05:50:28 +0000
asID:                     205111
IP address blocks:        136.143.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/f80f9298-8029-4285-89d7-27308341b2e0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/f80f9298-8029-4285-89d7-27308341b2e0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f7:7c:a8:2a:13:ea:7f:8d:9f:4b:63:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f80f9298-8029-4285-89d7-27308341b2e0
        Validity
            Not Before: Feb 24 06:50:28 2026 GMT
            Not After : May 25 05:50:28 2026 GMT
        Subject: CN=63498407-eb10-4cdb-9365-faf184368296
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:03:3d:67:8b:27:9b:4e:2c:6b:27:14:2a:fb:
                    1d:98:40:f2:3f:4d:6d:6d:d1:6b:8a:0f:6b:d2:f7:
                    ed:5a:b4:a0:d8:07:9e:99:a7:51:03:3e:32:6d:cb:
                    b2:e8:a0:82:47:1a:c1:4e:ec:05:5f:f6:bd:6f:d8:
                    92:33:97:8b:5e:34:a8:c7:0c:24:41:64:a8:78:cf:
                    b3:d5:c4:ef:4b:86:3a:43:07:4b:4a:0c:12:1b:c4:
                    2e:13:29:5f:45:4e:50:20:58:55:0c:87:e3:9f:de:
                    d6:bc:31:b8:e0:f7:6a:5b:01:e6:29:00:4c:00:80:
                    53:6c:d6:ad:a1:c0:c4:37:2f:04:01:1c:c9:10:18:
                    cc:2f:73:fa:67:05:b5:7f:9a:a2:22:a6:8f:34:51:
                    05:bf:24:bd:cb:d4:f8:b2:07:8b:74:b1:c0:dd:fd:
                    6a:1a:30:fe:b0:99:12:40:e8:0b:c0:85:38:50:12:
                    3a:bc:cb:e2:16:2e:29:1b:60:00:5c:15:f5:c2:e9:
                    4f:78:b0:8e:f1:11:87:c5:62:3d:5d:57:37:5b:a0:
                    58:60:5d:99:00:9f:9e:25:93:da:b5:ba:86:fd:d6:
                    a7:49:6f:b1:4a:b8:3b:46:09:93:76:99:72:2c:27:
                    94:7c:fe:6e:c1:b2:c9:89:7b:32:fe:f3:70:29:95:
                    f0:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:91:F4:A7:E9:21:40:34:49:06:F0:00:B4:A9:1F:B2:3D:9F:7B:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/8bf04735-6512-3b69-9b6e-ab2251777c4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/f80f9298-8029-4285-89d7-27308341b2e0.crl

            X509v3 Authority Key Identifier:
                keyid:67:6F:DF:98:DD:C5:B2:D6:A7:9F:9F:CF:0E:49:5C:38:64:D1:44:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.143.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:27:56:2f:a0:1a:47:03:c0:bd:33:fb:ff:e2:cb:a4:a8:0e:
         01:7a:9c:e0:a2:05:c0:d9:43:83:20:21:a9:62:2b:af:0c:ad:
         55:1e:3e:f9:23:6f:bc:2c:f6:52:5d:42:69:e7:54:27:d4:6b:
         b0:40:3e:ed:f6:60:45:ab:5e:0a:fe:d7:4c:e7:4d:b4:98:c2:
         a2:bb:6a:a7:5d:20:d0:18:6b:43:7b:c4:2c:d3:57:2f:d1:d9:
         c0:e2:df:68:29:91:c4:3a:15:02:50:85:e5:7a:d0:22:ee:22:
         35:f6:96:b5:6f:88:9c:b9:e7:e9:bc:a8:5d:3a:20:d5:30:48:
         cb:1a:e6:5b:89:79:04:65:cc:fd:5b:bf:08:e5:d2:31:3c:df:
         21:7e:2e:50:71:b7:7e:a0:50:35:35:e2:4a:16:c2:09:85:7d:
         b6:7b:b1:dd:80:c2:ef:0f:84:8e:ea:fb:64:b0:86:af:b3:f7:
         01:34:d3:73:98:b7:d5:70:b4:45:75:bd:3c:ad:3e:4e:0d:51:
         20:2a:00:96:9d:c9:37:08:ec:31:13:6f:31:2e:e7:65:1c:3d:
         c4:75:8c:a0:91:09:6f:0b:c9:15:5b:39:f9:5a:85:da:f8:33:
         af:5a:0f:30:fd:93:57:56:1a:3a:29:c4:5e:20:ad:9d:47:7c:
         12:4e:0f:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:05:25 2026 by rpki-client