Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2/66006420-1af3-3ecd-8691-f4c4740fbadc.roa
File:                     66006420-1af3-3ecd-8691-f4c4740fbadc.roa (raw, json)
Hash identifier:          KG4ZvOB5pg/wJnm+vO0/zD9sksp773trEjrWipghXmE=
Subject key identifier:   61:68:B1:CA:E3:42:A2:71:07:3C:48:AA:41:45:65:90:47:2D:1B:EE
Certificate issuer:       /CN=0d1af089-3ace-488d-8f52-6b375c813ba2
Certificate serial:       010D0C9F4328584CCA41E87405C4A7347FE14600
Authority key identifier: A6:9C:CE:F2:D7:BC:3F:8C:EE:2F:16:34:59:64:85:BD:CE:1E:2E:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2/66006420-1af3-3ecd-8691-f4c4740fbadc.roa
Signing time:             Sun 08 Feb 2026 02:00:32 +0000
ROA not before:           Sun 08 Feb 2026 02:00:32 +0000
ROA not after:            Sat 09 May 2026 01:00:32 +0000
asID:                     10490
IP address blocks:        149.149.248.0/21 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2/0d1af089-3ace-488d-8f52-6b375c813ba2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2/0d1af089-3ace-488d-8f52-6b375c813ba2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ca:41:e8:74:05:c4:a7:34:7f:e1:46:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d1af089-3ace-488d-8f52-6b375c813ba2
        Validity
            Not Before: Feb  8 02:00:32 2026 GMT
            Not After : May  9 01:00:32 2026 GMT
        Subject: CN=4d4e71fc-a17e-43b3-a244-1cc4959ce20a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:56:a9:91:6c:fe:79:62:d2:93:10:64:45:b9:
                    94:e3:eb:69:90:8b:e3:18:71:15:d5:9f:e3:7c:cf:
                    bb:91:7a:05:c2:07:75:5c:f7:86:78:13:2a:3b:7c:
                    c6:f9:41:33:f6:d9:ea:de:3f:d7:a6:6b:5e:d7:f6:
                    f8:cc:db:31:bb:82:6f:53:44:5f:4d:e3:50:84:6e:
                    da:9e:9e:ad:fe:7f:42:d4:5e:f8:d1:e9:94:44:91:
                    2f:48:a1:5a:66:70:ab:44:f2:34:9b:97:98:4a:18:
                    eb:2c:ad:5d:40:c2:d9:4f:06:55:dd:72:33:2b:cf:
                    63:43:22:7f:c0:8f:5e:8c:2f:40:b3:da:e5:51:3a:
                    2f:d2:22:ab:36:ea:44:ba:28:c4:2a:d8:2f:c3:fa:
                    08:9e:a4:43:68:27:c1:de:b4:ca:ee:92:24:c5:32:
                    33:06:bb:35:9d:3a:2d:6e:aa:1f:6f:c3:39:55:cc:
                    7a:8a:5e:3b:a0:71:ef:d3:b0:ad:e7:92:9d:83:6d:
                    5e:ed:1d:65:27:ec:61:64:86:aa:55:9c:3d:ae:d1:
                    e7:fe:64:91:61:4e:8a:16:60:17:8d:96:a0:b0:5f:
                    83:0e:14:33:fd:ed:9a:24:03:89:ed:73:97:66:53:
                    36:41:33:d8:29:78:a9:bf:7f:42:4a:2e:39:d4:88:
                    f6:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:68:B1:CA:E3:42:A2:71:07:3C:48:AA:41:45:65:90:47:2D:1B:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2/66006420-1af3-3ecd-8691-f4c4740fbadc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2/0d1af089-3ace-488d-8f52-6b375c813ba2.crl

            X509v3 Authority Key Identifier:
                keyid:A6:9C:CE:F2:D7:BC:3F:8C:EE:2F:16:34:59:64:85:BD:CE:1E:2E:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.149.248.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:17:d6:01:58:20:06:2e:74:44:ea:75:61:85:b1:93:14:f2:
         78:df:94:fe:f3:75:1b:95:f9:df:73:ff:13:d1:4e:fa:f4:9c:
         4f:e5:98:05:37:cd:b2:b0:12:f7:55:d7:92:71:e1:e7:73:6e:
         2e:cd:9d:cc:b4:cc:cc:a9:55:c1:ca:5c:83:50:ab:09:6f:4c:
         a2:4c:a4:d8:d5:0a:4e:f1:b6:40:32:1a:fa:03:73:a8:60:5d:
         bd:ce:36:a9:fa:fb:c6:1d:a9:2f:a4:15:5a:d5:28:3f:2c:1a:
         04:7f:25:2d:bd:74:c0:60:16:5b:23:23:75:f9:e8:7e:80:92:
         2e:13:c9:0e:a3:83:ba:b4:0b:be:77:dc:15:f1:c4:5b:8a:34:
         f5:0a:19:68:78:8a:ad:0e:cd:ee:b5:1f:ff:f0:e3:af:7b:19:
         05:67:c8:b3:cf:97:4a:f1:03:bd:49:fb:ad:bf:8c:df:63:77:
         c7:f0:39:72:4e:49:b2:a6:21:cc:76:f8:ba:97:f8:94:d8:3f:
         60:12:70:be:aa:86:f4:23:18:bb:c1:97:be:5f:04:eb:ac:01:
         20:a0:68:12:9f:50:93:eb:da:be:11:71:bb:5e:7b:ea:12:77:
         90:9b:da:f4:84:63:ff:4d:90:08:be:48:47:6e:80:6b:90:b8:
         26:06:6a:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:44:02 2026 by rpki-client