Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/d93a20ce-1dae-39c1-be87-74905d73ff1c.roa
File:                     d93a20ce-1dae-39c1-be87-74905d73ff1c.roa (raw, json)
Hash identifier:          9+bbe61WGfc9UUsEaYxoJHdXK++JLQD5xP48KG92JAU=
Subject key identifier:   27:B9:CB:E7:21:93:47:DB:02:E4:4C:23:66:2F:DF:13:31:E4:42:93
Certificate issuer:       /CN=6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2
Certificate serial:       010D0C9F4328584CDB02111F53D8718DBEA8EE60
Authority key identifier: 70:1F:B5:BF:D0:BF:AB:6B:B2:C4:F7:D8:37:1E:EC:A3:59:C1:6E:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/d93a20ce-1dae-39c1-be87-74905d73ff1c.roa
Signing time:             Sat 14 Feb 2026 02:00:32 +0000
ROA not before:           Sat 14 Feb 2026 02:00:32 +0000
ROA not after:            Fri 15 May 2026 01:00:32 +0000
asID:                     6253
IP address blocks:        48.0.0.0/11 maxlen: 24
                          48.36.0.0/14 maxlen: 24
                          48.40.0.0/14 maxlen: 24
                          48.48.0.0/12 maxlen: 24
                          48.64.0.0/12 maxlen: 24
                          48.96.0.0/14 maxlen: 24
                          48.104.0.0/13 maxlen: 24
                          48.112.0.0/13 maxlen: 24
                          48.120.0.0/14 maxlen: 24
                          48.128.0.0/11 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:db:02:11:1f:53:d8:71:8d:be:a8:ee:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2
        Validity
            Not Before: Feb 14 02:00:32 2026 GMT
            Not After : May 15 01:00:32 2026 GMT
        Subject: CN=67f8cda4-25e9-42fa-8383-51692bb02412
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:0f:c2:c6:e3:b3:a6:ae:a4:c1:18:c5:37:cb:
                    54:96:ee:41:1d:a6:bc:a8:2c:70:df:b5:e2:58:1b:
                    5f:f9:71:00:e4:a9:11:b2:78:88:c8:ec:fb:89:3b:
                    1c:dd:ca:47:2c:3a:6f:e9:b3:f2:9e:4f:0b:5f:b7:
                    ec:50:62:4e:4d:f0:7f:80:ff:52:d0:13:98:d6:8e:
                    11:0f:be:79:43:c1:ea:cc:48:54:68:85:7d:a7:df:
                    37:ac:1e:54:75:70:c9:1d:aa:3e:86:42:f1:a1:43:
                    34:42:ce:77:5f:65:6b:af:c7:04:1f:ee:ec:e6:db:
                    88:60:43:28:86:3d:45:62:50:36:30:08:1d:5b:1e:
                    8c:3f:67:a4:70:cf:c0:2b:b1:b5:e3:98:77:c8:cd:
                    ac:5a:d6:80:93:9b:57:a7:d2:7c:eb:15:75:15:c6:
                    9b:28:66:6a:c2:93:11:b4:04:ff:96:b8:07:1f:c1:
                    e2:78:47:14:d9:8a:32:48:3b:c5:18:8d:ca:75:1d:
                    de:ce:e7:10:ee:7d:a4:c1:7f:b9:0d:73:77:ca:cb:
                    3a:02:a2:07:41:98:57:9a:4c:87:af:2c:64:53:5e:
                    e9:f2:e9:0a:d0:3b:88:89:06:59:d1:de:3b:01:e2:
                    35:30:a8:c9:d9:98:a5:af:5d:41:99:cb:60:66:0f:
                    ad:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:B9:CB:E7:21:93:47:DB:02:E4:4C:23:66:2F:DF:13:31:E4:42:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/d93a20ce-1dae-39c1-be87-74905d73ff1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.crl

            X509v3 Authority Key Identifier:
                keyid:70:1F:B5:BF:D0:BF:AB:6B:B2:C4:F7:D8:37:1E:EC:A3:59:C1:6E:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  48.0.0.0/11
                  48.36.0.0-48.43.255.255
                  48.48.0.0-48.79.255.255
                  48.96.0.0/14
                  48.104.0.0-48.123.255.255
                  48.128.0.0/11

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:01:e9:d5:31:ce:08:67:8e:79:9a:7d:71:8e:26:8d:08:1e:
         ec:38:cc:15:3d:7f:f8:43:f2:45:69:86:27:78:8e:bb:95:73:
         64:00:05:35:13:4e:68:65:ac:42:b8:82:95:a8:25:14:8f:ae:
         a6:32:f9:ac:3d:f0:f6:a4:82:eb:60:73:c7:c9:8b:32:b9:0d:
         6d:05:bb:c9:f2:61:78:f5:53:de:9b:64:f6:85:95:85:93:4b:
         d0:b4:31:b1:f9:d1:74:3d:6a:ad:f2:23:02:f7:68:84:f6:9c:
         00:b1:42:12:a6:ad:f7:86:6c:f8:10:f8:91:e9:a5:0e:23:c1:
         ae:28:c6:6e:d9:a8:63:86:97:3e:5c:66:88:76:22:3f:9e:7e:
         0c:33:81:10:bd:d5:d8:30:4c:e9:a5:14:09:cb:27:8e:a8:7d:
         31:34:62:ea:dc:de:44:42:3c:c3:68:f9:6e:8d:d3:ca:11:53:
         ad:0f:4d:81:fa:03:f7:f8:42:01:da:a4:7e:21:d8:c6:4c:c2:
         35:30:17:cf:22:8b:62:2d:2c:45:a0:9f:5a:fa:aa:d6:38:56:
         f1:3f:4b:75:24:f3:da:36:06:c6:ca:f8:95:f7:0e:f9:7b:d8:
         3a:3b:a8:84:6d:23:e6:dc:11:ff:22:4f:20:79:9c:9b:42:b3:
         34:17:27:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:02:16 2026 by rpki-client