Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/50554af3-8108-491d-84e4-240f4874833a/3b814e80-2553-336b-aea8-39b271d80908.roa
File:                     3b814e80-2553-336b-aea8-39b271d80908.roa (raw, json)
Hash identifier:          2Ioziq2QRrGVLr5OiFLl4aMXMgUQ5U04Gh+LLoapAuk=
Subject key identifier:   65:E8:5B:9C:4F:98:64:8D:53:CB:D3:52:59:8E:02:94:D5:4D:60:19
Certificate issuer:       /CN=50554af3-8108-491d-84e4-240f4874833a
Certificate serial:       010D0C9F4328584CED2788307C5E5DC4CFBD0180
Authority key identifier: 62:F9:9E:4B:84:14:A7:D4:AD:22:12:4C:DB:E3:59:77:91:6F:BA:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/50554af3-8108-491d-84e4-240f4874833a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/50554af3-8108-491d-84e4-240f4874833a/3b814e80-2553-336b-aea8-39b271d80908.roa
Signing time:             Fri 20 Feb 2026 14:00:41 +0000
ROA not before:           Fri 20 Feb 2026 14:00:41 +0000
ROA not after:            Thu 21 May 2026 13:00:41 +0000
asID:                     1239
IP address blocks:        185.113.180.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/50554af3-8108-491d-84e4-240f4874833a/50554af3-8108-491d-84e4-240f4874833a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/50554af3-8108-491d-84e4-240f4874833a/50554af3-8108-491d-84e4-240f4874833a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/50554af3-8108-491d-84e4-240f4874833a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ed:27:88:30:7c:5e:5d:c4:cf:bd:01:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50554af3-8108-491d-84e4-240f4874833a
        Validity
            Not Before: Feb 20 14:00:41 2026 GMT
            Not After : May 21 13:00:41 2026 GMT
        Subject: CN=a2da456a-878b-4a06-a20d-0a4c65a3e407
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:86:8a:15:fa:48:c3:74:e2:d3:82:51:c3:4c:
                    d2:b7:f5:6e:b5:5f:21:61:c4:c3:2a:2b:4a:ae:b2:
                    51:00:dd:ea:a8:ae:ba:77:b3:68:22:62:47:24:0e:
                    4b:ba:31:cb:c2:a0:19:77:42:aa:bb:14:6e:a3:bd:
                    d9:4f:db:ad:f8:de:da:36:46:e2:97:a4:71:e6:f6:
                    60:18:5d:01:99:b3:f7:eb:88:b5:62:d5:a9:9f:3d:
                    96:d2:22:f0:4a:3c:48:68:c0:7f:f9:2b:2a:8a:d0:
                    91:78:19:2e:16:96:f8:c7:57:11:fe:04:7d:ed:e5:
                    e9:89:87:a6:b6:58:ff:47:77:a0:5c:64:eb:36:94:
                    12:65:c5:eb:c5:75:7b:86:08:ad:f3:38:01:e3:06:
                    c3:d6:f2:d1:cc:aa:b5:61:cc:1a:23:67:b4:15:ad:
                    3a:81:0a:ec:53:a8:ae:76:2f:92:00:ab:6c:db:27:
                    77:6e:71:be:ca:ca:cd:fd:d6:1b:18:0a:38:ed:a7:
                    5e:f7:c2:04:a3:88:2e:4b:16:e5:12:5e:b7:b0:f5:
                    00:59:fb:f7:5d:6f:73:1f:de:4d:75:43:a6:ac:91:
                    2c:94:23:18:1a:2c:55:0f:6e:7d:ca:85:37:f4:35:
                    40:92:0e:a4:8a:41:18:b7:15:45:48:4b:e3:c4:81:
                    11:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:E8:5B:9C:4F:98:64:8D:53:CB:D3:52:59:8E:02:94:D5:4D:60:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/50554af3-8108-491d-84e4-240f4874833a/3b814e80-2553-336b-aea8-39b271d80908.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/50554af3-8108-491d-84e4-240f4874833a/50554af3-8108-491d-84e4-240f4874833a.crl

            X509v3 Authority Key Identifier:
                keyid:62:F9:9E:4B:84:14:A7:D4:AD:22:12:4C:DB:E3:59:77:91:6F:BA:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/50554af3-8108-491d-84e4-240f4874833a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.113.180.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:39:f4:a3:98:fa:ea:9c:e1:b9:44:52:d6:14:bc:79:88:69:
         f8:b8:58:99:e8:3f:ff:42:03:43:11:07:83:cc:44:4f:f3:f0:
         9e:76:36:de:5e:d6:04:15:44:1d:cc:93:fa:05:e7:b7:db:7e:
         78:da:ab:ca:7e:b8:31:f6:11:67:31:ce:e0:b0:2f:c4:78:d6:
         ba:5b:87:80:81:6a:d3:cf:ac:cb:18:a4:b6:99:ff:44:18:ce:
         3c:7e:5b:b4:00:4b:69:60:6e:e5:fc:57:61:d6:e1:cf:b7:ad:
         9a:7e:79:c7:cb:39:4e:ac:50:80:14:f8:45:0e:c8:ba:75:5c:
         a1:1a:46:c8:66:14:0c:03:d7:ba:92:11:c7:03:bc:ce:3a:07:
         95:77:75:43:9c:aa:af:7d:99:62:4d:cf:4f:dd:97:3d:58:84:
         03:63:58:2e:13:77:6b:7d:4c:2e:54:5f:85:f4:20:62:c1:63:
         33:ae:09:3d:bf:d4:78:cb:7d:24:96:36:be:3f:b9:c0:95:50:
         bc:6d:22:71:ee:77:32:30:87:44:59:d4:b2:a6:2b:9b:36:72:
         7c:47:9e:a9:67:1c:27:68:b1:a9:71:3e:60:a1:74:b6:9d:a9:
         90:3b:06:7d:2d:1c:78:46:c6:cd:3d:fc:ce:11:4c:5c:4d:8a:
         4d:a6:74:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:32:53 2026 by rpki-client