Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/c4c1f54b-0164-33fa-be80-c5e79da03241.roa
File:                     c4c1f54b-0164-33fa-be80-c5e79da03241.roa (raw, json)
Hash identifier:          9eq7NiHdF92Bt11kuyrF1DaKckI/pjecAPj4V/uWfKo=
Subject key identifier:   F8:9F:35:C8:97:79:4A:CA:53:7A:F6:A0:84:C8:77:61:D0:66:68:23
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F4328584CE3620AF9C22FA03B61AE0D60
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/c4c1f54b-0164-33fa-be80-c5e79da03241.roa
Signing time:             Tue 17 Feb 2026 02:00:31 +0000
ROA not before:           Tue 17 Feb 2026 02:00:31 +0000
ROA not after:            Mon 18 May 2026 01:00:31 +0000
asID:                     40411
IP address blocks:        204.195.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e3:62:0a:f9:c2:2f:a0:3b:61:ae:0d:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: Feb 17 02:00:31 2026 GMT
            Not After : May 18 01:00:31 2026 GMT
        Subject: CN=68f047fa-b9d2-461f-9c8b-eff169dc6220
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:81:48:ee:5f:7d:a8:2e:3b:7e:40:f5:80:01:
                    69:bc:da:d5:e8:df:cf:1c:69:40:a9:34:0d:90:9c:
                    6f:5b:ac:fa:6d:07:cf:d7:fd:41:37:00:1d:c9:08:
                    3c:52:6b:46:53:0f:ec:6e:cc:99:f5:49:3d:7f:c2:
                    89:d0:61:3a:12:cd:21:26:c7:9f:a9:80:86:17:36:
                    dd:16:3e:de:11:31:8c:7a:14:47:27:fa:41:a3:8a:
                    8b:a6:ec:d7:5a:d3:85:a7:28:d1:12:a2:d4:cc:47:
                    28:e7:6a:83:ef:22:f8:af:cd:09:4e:c5:67:65:33:
                    95:e3:20:db:89:d7:16:e5:e1:43:8c:d5:2d:65:6d:
                    eb:b6:41:fa:64:79:78:f1:f0:98:0a:fa:3a:2f:f2:
                    d2:56:c8:b3:22:1b:a7:56:b8:3d:9d:7d:c8:6d:db:
                    08:d8:54:e8:7a:50:75:79:8e:cc:b9:d9:f9:60:3e:
                    fd:fb:da:d5:a9:d7:99:87:d6:17:24:e7:6f:1b:4e:
                    34:ba:79:e1:38:8d:d0:13:c2:11:d1:87:03:e9:44:
                    2b:45:64:33:8c:43:0b:fe:a9:e1:19:f7:1f:c2:42:
                    52:27:b0:81:f1:ba:7a:7e:2f:84:12:9e:2b:bc:1c:
                    12:96:c8:0c:5c:df:b9:aa:fe:0e:2d:7a:d1:bf:47:
                    0f:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:9F:35:C8:97:79:4A:CA:53:7A:F6:A0:84:C8:77:61:D0:66:68:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/c4c1f54b-0164-33fa-be80-c5e79da03241.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.195.93.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:a7:95:1a:c3:71:63:58:de:7f:42:b0:e6:57:4a:3f:3a:1f:
         74:3c:31:4d:45:fb:af:ee:b0:7d:46:e1:a3:cf:1d:b7:24:f6:
         df:c8:41:a7:13:24:04:e9:0d:e0:8c:4a:1b:1c:29:4a:54:a1:
         b8:0c:59:5e:ae:93:53:01:89:89:9e:a5:2f:12:97:39:3c:47:
         01:73:e4:e7:6f:02:2e:ea:89:66:9e:d2:fc:3f:71:94:56:e6:
         7e:29:ca:91:df:29:6f:a9:cb:24:11:55:6b:f4:f0:95:d5:f9:
         79:85:05:a3:47:a3:15:a4:5c:60:5d:d2:98:3e:b8:1c:a0:63:
         97:ef:2b:3f:3d:da:02:a2:bf:4a:fc:53:fa:fb:90:21:7e:ba:
         c0:5d:63:93:f4:4a:92:86:d1:48:d9:26:01:fe:6d:ed:a2:38:
         6a:f2:a5:38:88:3c:a7:ec:b3:b2:48:51:54:d9:bd:75:07:9b:
         8b:ca:f8:7c:c0:73:97:3b:ab:a4:cb:83:c8:59:be:15:c2:d5:
         0d:47:02:f3:84:17:8b:68:48:b1:b1:72:15:83:e4:b5:28:4e:
         d4:7a:3c:41:fe:63:27:80:a1:5d:93:e1:70:f1:75:49:1c:0b:
         43:32:31:22:95:27:05:99:07:99:f0:18:e0:87:1a:7f:3e:de:
         36:79:98:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:50:29 2026 by rpki-client