Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/f84d48a7-f7c4-33e0-92ec-0eba6caff7e0.roa
File:                     f84d48a7-f7c4-33e0-92ec-0eba6caff7e0.roa (raw, json)
Hash identifier:          K4YzC2MjKSxBNy47ZsPxz7Is4qhQFOFWcfD5gUMQuDc=
Subject key identifier:   60:1D:41:F3:13:16:56:F0:1F:A0:63:5E:98:98:07:45:58:F9:EA:78
Certificate issuer:       /CN=fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8
Certificate serial:       010D0C9F4328584CC8DC98312A7CC47D22E76D00
Authority key identifier: 6C:AB:4A:B2:F5:58:3B:F4:55:04:FD:C5:F1:8B:9E:DE:6E:49:01:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/f84d48a7-f7c4-33e0-92ec-0eba6caff7e0.roa
Signing time:             Sat 07 Feb 2026 14:00:41 +0000
ROA not before:           Sat 07 Feb 2026 14:00:41 +0000
ROA not after:            Fri 08 May 2026 13:00:41 +0000
asID:                     18825
IP address blocks:        209.92.80.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c8:dc:98:31:2a:7c:c4:7d:22:e7:6d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8
        Validity
            Not Before: Feb  7 14:00:41 2026 GMT
            Not After : May  8 13:00:41 2026 GMT
        Subject: CN=5ae987c2-f7ac-42e5-bfef-7abf3fd6ecde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f5:af:ef:88:68:cf:da:fb:b7:12:33:19:2e:
                    c5:87:db:5f:45:55:f5:82:97:65:3b:aa:40:29:09:
                    40:40:0e:b8:b9:9d:8f:d8:65:ff:75:15:de:55:78:
                    e9:c6:f8:3a:8c:b8:a0:91:ca:ed:41:d6:f3:d8:6c:
                    dc:89:7e:2e:d0:7d:83:d8:74:83:da:35:81:b8:a8:
                    40:8f:b5:12:b8:ae:1e:e2:9d:c8:8a:6f:e5:f3:6c:
                    00:23:63:30:4e:e6:1c:62:e9:6c:4e:fa:0f:21:b3:
                    63:46:bb:ec:e7:e4:65:c3:7c:d9:a1:a8:c0:58:11:
                    d3:5e:2a:08:7b:5d:56:03:0f:2b:d3:66:6e:e4:db:
                    26:1f:5a:50:27:74:d7:ec:7f:c2:fb:1f:7c:38:24:
                    f4:c9:c6:84:07:47:e1:16:2a:c5:53:8f:c8:ac:d3:
                    6d:e6:c6:48:a7:53:f5:6f:2d:d4:a6:5f:12:dd:a6:
                    a8:3e:51:94:b7:88:1f:f4:1c:be:5a:d6:af:e5:51:
                    f4:ae:3e:1b:c2:9a:73:23:a1:49:e2:e7:ec:1d:0d:
                    f9:47:cd:e1:7c:48:dd:b9:55:3f:26:27:2f:2b:76:
                    60:ec:e3:af:31:9b:be:af:e6:83:35:57:85:e8:91:
                    3f:a6:60:a6:d0:2e:53:68:c0:4b:26:91:d4:aa:25:
                    d6:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:1D:41:F3:13:16:56:F0:1F:A0:63:5E:98:98:07:45:58:F9:EA:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/f84d48a7-f7c4-33e0-92ec-0eba6caff7e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.crl

            X509v3 Authority Key Identifier:
                keyid:6C:AB:4A:B2:F5:58:3B:F4:55:04:FD:C5:F1:8B:9E:DE:6E:49:01:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.92.80.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:19:f7:86:5d:fc:4e:1d:58:d8:55:0f:45:1b:47:b6:dd:95:
         ca:d9:03:9c:87:2e:95:02:09:ad:41:c6:63:05:ef:2f:e9:49:
         ac:e2:77:e9:f1:3b:93:7e:a9:78:3d:db:a6:21:08:10:cf:80:
         1a:16:59:b8:61:db:78:44:c2:4e:23:88:6b:3a:7e:86:e1:cc:
         6d:23:51:e4:f3:14:1e:07:da:d3:38:49:20:92:3d:f0:a0:cb:
         ef:b7:cc:3b:87:33:d4:fc:bf:7a:e5:33:17:c7:b0:a3:fa:83:
         9a:ad:d7:3c:ca:c8:7e:35:9b:38:32:79:24:ae:d3:e9:96:d1:
         77:eb:44:9d:0e:bf:e9:89:fd:76:e2:af:b9:15:75:70:a7:4e:
         8d:a4:f2:fa:71:8d:b3:bd:76:96:22:be:ae:25:3d:50:9a:a9:
         a6:90:67:ff:38:32:65:7d:db:8a:79:60:da:fb:f5:06:87:44:
         0e:c1:c1:ca:d0:e6:0f:3b:b7:54:64:26:8d:62:55:9d:a9:1f:
         f0:8a:38:9c:ff:fc:42:01:a7:8f:6c:3c:8b:f1:0c:7e:60:c3:
         aa:36:91:5f:86:45:24:c9:a1:94:de:d7:5d:35:13:7f:ce:96:
         45:ce:9a:4a:eb:d9:84:64:6e:8c:7a:45:c7:1e:aa:67:d7:f3:
         aa:cd:03:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:27:00 2026 by rpki-client