Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/41025fc8-e6c8-4422-acea-8126840c20bb/ca810c60-a080-3006-b2cf-3d960b6d9f4a.roa
File:                     ca810c60-a080-3006-b2cf-3d960b6d9f4a.roa (raw, json)
Hash identifier:          Ukzsste421fek3LZz42m7/BXAdXVc7AjwHNIK1k2gkw=
Subject key identifier:   0B:84:3B:BC:6E:41:75:54:8C:F3:E5:4F:2B:95:08:F7:D8:35:5F:A5
Certificate issuer:       /CN=41025fc8-e6c8-4422-acea-8126840c20bb
Certificate serial:       010D0C9F4328584C7D7C48EE09BCED1CCF2E6320
Authority key identifier: C0:34:EA:77:A6:A5:DF:C1:6A:A0:D9:2B:83:12:84:40:E0:38:E7:A4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/41025fc8-e6c8-4422-acea-8126840c20bb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/41025fc8-e6c8-4422-acea-8126840c20bb/ca810c60-a080-3006-b2cf-3d960b6d9f4a.roa
Signing time:             Sun 11 Jan 2026 14:00:39 +0000
ROA not before:           Sun 11 Jan 2026 14:00:39 +0000
ROA not after:            Sat 11 Apr 2026 13:00:39 +0000
asID:                     14574
IP address blocks:        216.176.96.0/19 maxlen: 24
                          2607:a700::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/41025fc8-e6c8-4422-acea-8126840c20bb/41025fc8-e6c8-4422-acea-8126840c20bb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/41025fc8-e6c8-4422-acea-8126840c20bb/41025fc8-e6c8-4422-acea-8126840c20bb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/41025fc8-e6c8-4422-acea-8126840c20bb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:7d:7c:48:ee:09:bc:ed:1c:cf:2e:63:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41025fc8-e6c8-4422-acea-8126840c20bb
        Validity
            Not Before: Jan 11 14:00:39 2026 GMT
            Not After : Apr 11 13:00:39 2026 GMT
        Subject: CN=90337958-d90f-401e-81fd-4f0e62959131
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:e4:9d:57:dd:e2:92:13:31:60:7e:2e:39:8f:
                    5c:1d:87:23:f5:3c:9a:10:cd:4f:6f:0a:b4:10:6c:
                    3f:67:cd:bb:da:e6:2d:2f:33:0c:59:16:d4:4b:3c:
                    59:3c:7e:1b:8d:0a:4f:a5:de:11:fe:f2:57:96:4b:
                    8d:f2:6c:77:18:ec:bc:30:67:04:3e:58:b3:da:56:
                    13:3a:fe:1b:e0:39:a9:75:01:a9:2b:2d:bf:c7:d3:
                    b5:61:ee:98:f5:79:ef:8d:7e:62:8d:4c:ea:e7:b2:
                    7d:d4:e5:cd:d2:e3:57:f6:8e:0d:f2:1d:28:95:ef:
                    ee:dc:17:1b:81:f1:57:eb:6e:05:8f:47:19:d4:db:
                    b6:c9:84:10:0f:9c:83:44:7b:84:62:b4:7f:b5:90:
                    76:38:9c:db:a5:cd:d3:0a:0c:17:37:20:5e:7e:7d:
                    b9:9a:61:42:7b:c1:7c:bd:da:b7:6e:06:d7:04:77:
                    e1:8b:af:dd:7d:23:d3:64:a3:96:58:af:c9:35:c2:
                    c0:5b:5b:b7:7b:28:cf:3b:5f:b1:b1:52:15:89:cd:
                    25:3e:1a:52:92:23:de:f2:a2:be:ab:f7:5d:a4:51:
                    f3:85:f7:11:6b:7f:64:32:9d:04:47:a3:c8:3b:e7:
                    c4:d7:9c:8e:5d:40:b5:81:0b:a6:dc:ce:aa:a7:56:
                    5d:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:84:3B:BC:6E:41:75:54:8C:F3:E5:4F:2B:95:08:F7:D8:35:5F:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/41025fc8-e6c8-4422-acea-8126840c20bb/ca810c60-a080-3006-b2cf-3d960b6d9f4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/41025fc8-e6c8-4422-acea-8126840c20bb/41025fc8-e6c8-4422-acea-8126840c20bb.crl

            X509v3 Authority Key Identifier:
                keyid:C0:34:EA:77:A6:A5:DF:C1:6A:A0:D9:2B:83:12:84:40:E0:38:E7:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/41025fc8-e6c8-4422-acea-8126840c20bb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.176.96.0/19
                IPv6:
                  2607:a700::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:f5:d4:a0:a8:6d:c8:ba:52:eb:43:2b:cc:e2:f2:c9:73:61:
         54:fb:9e:8a:1b:dc:d1:b0:c2:3b:8a:74:4c:37:24:44:e3:4b:
         d4:e5:5b:37:1f:a0:62:b7:88:dd:5c:6a:f8:72:db:4c:3d:b1:
         f3:b6:ad:f6:ea:69:91:fd:a6:28:83:09:a1:e9:b9:71:2c:fc:
         65:b4:24:99:7b:75:80:d1:04:e8:11:d5:f9:83:d4:b7:e0:94:
         51:08:58:1d:52:7a:c1:08:b1:34:b6:f0:dd:6b:2f:c6:ed:fe:
         e3:9a:fe:70:aa:7c:5c:21:b8:d4:b5:7f:48:d1:d3:84:32:c8:
         4e:6b:4c:0c:86:09:45:04:b8:f0:36:10:93:ff:64:2d:5c:e9:
         c6:a0:62:08:cc:46:67:97:57:6c:86:1b:f0:60:78:89:9e:05:
         f6:50:c0:ff:3d:91:47:a8:2b:b0:40:a6:52:09:90:08:13:5d:
         ef:89:02:be:46:59:67:fc:cc:ad:5c:a9:3e:11:43:96:5f:ac:
         3b:cb:28:af:35:a6:a1:b7:92:df:98:a1:7b:15:a4:90:05:62:
         ee:e7:b7:02:89:de:1d:88:f1:9f:6c:1d:dd:52:7c:4d:d9:16:
         ec:a2:c3:6a:2a:69:48:0f:6a:cb:f6:3b:79:b0:f6:bb:13:d8:
         89:9c:ec:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:01:14 2026 by rpki-client