Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2c534f39-df4d-37d8-890d-e94a7ea04638.roa
File:                     2c534f39-df4d-37d8-890d-e94a7ea04638.roa (raw, json)
Hash identifier:          n40RGp6CcaZVvBlgPCukLNEusqRn3QEZJGz2SLxzT1c=
Subject key identifier:   10:FE:64:25:56:73:B9:74:B9:3C:48:1C:9F:56:C4:A0:D5:C7:5B:92
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584CE361F948813801A24681D0C0
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2c534f39-df4d-37d8-890d-e94a7ea04638.roa
Signing time:             Tue 17 Feb 2026 02:00:31 +0000
ROA not before:           Tue 17 Feb 2026 02:00:31 +0000
ROA not after:            Mon 18 May 2026 01:00:31 +0000
asID:                     214176
IP address blocks:        154.43.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e3:61:f9:48:81:38:01:a2:46:81:d0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Feb 17 02:00:31 2026 GMT
            Not After : May 18 01:00:31 2026 GMT
        Subject: CN=3e27aad3-2ee4-4b32-bbeb-e4812c5e8a7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:71:e3:3a:d3:a3:8a:8e:33:b2:2f:73:91:6c:
                    0b:57:78:ef:47:a6:7f:ce:64:b5:e2:a7:3e:ea:f8:
                    7b:6d:9d:2a:23:fc:0a:a9:40:6a:a6:27:4e:96:1f:
                    a2:c9:3d:1c:3c:ac:93:a8:68:ed:5d:41:d2:06:02:
                    92:e7:94:7e:64:7e:c9:f6:83:e1:0f:4f:da:6b:0c:
                    26:b7:99:60:f3:4b:e0:eb:f3:aa:1a:c3:ef:ca:fb:
                    7c:93:33:a2:35:db:6f:a5:7d:cd:38:6b:f8:fd:a7:
                    c2:bf:ee:7d:01:15:43:55:76:4b:e8:e1:fc:39:c3:
                    67:cf:f2:6f:7c:bf:73:a5:c7:e5:08:cd:5b:5a:95:
                    ec:7f:ff:0e:2a:1a:7b:ac:d6:62:86:1f:e6:7b:98:
                    d1:9b:f9:14:0c:e3:35:0e:4b:6b:a6:ca:61:77:a1:
                    08:da:a1:62:37:05:d1:0e:fe:45:82:dc:19:a1:6d:
                    d1:b9:11:35:29:3f:a6:db:d6:9d:85:2d:5f:bc:68:
                    84:d4:97:cf:79:b3:bb:ba:91:ea:59:5c:e0:32:d1:
                    cc:24:86:78:cd:06:a3:44:bf:1c:19:e3:bc:01:ed:
                    e8:65:41:ba:7d:6f:35:6d:98:af:7b:35:19:2b:93:
                    ee:4e:e2:74:a3:52:fa:df:d5:9d:4c:b8:52:b4:28:
                    1a:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:FE:64:25:56:73:B9:74:B9:3C:48:1C:9F:56:C4:A0:D5:C7:5B:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2c534f39-df4d-37d8-890d-e94a7ea04638.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.43.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:57:81:3d:78:84:50:e2:df:eb:1c:04:59:c8:91:d6:ce:ff:
         ec:84:88:c9:14:66:a1:ea:1c:47:34:04:21:b3:fd:66:cd:b5:
         9d:cf:c2:1e:8e:94:f4:7e:da:a8:89:82:55:e1:a1:db:21:51:
         fa:4d:63:ea:53:7e:96:9b:5a:bc:91:a1:e4:9b:22:55:dc:55:
         1b:d2:d2:3a:21:0f:88:60:38:90:7b:49:31:bb:38:b4:f8:d7:
         35:1a:8d:04:97:e8:0c:2a:9f:74:3c:72:f8:fb:c7:67:aa:84:
         32:20:af:c3:ea:c1:bf:ad:23:a6:8d:4a:1f:e3:88:0e:54:97:
         6b:2a:49:24:8b:e1:11:55:77:8b:1c:47:a1:32:94:14:11:24:
         f9:8e:42:76:87:7b:dc:e8:1e:d6:6f:5f:c4:5c:82:ff:f3:cb:
         92:b8:3b:9d:16:ae:7d:a2:0d:86:49:75:f5:9f:41:0f:c4:68:
         1e:5f:41:68:7f:20:c5:ef:64:af:80:98:cc:75:61:51:af:c4:
         c7:3c:9f:f9:08:e2:93:d5:51:0a:26:f9:a0:92:2e:fe:e7:35:
         78:2f:e6:ed:74:3e:71:02:1f:9b:c6:cb:31:8a:ec:18:c6:cc:
         49:80:51:d9:d5:b8:ec:e3:29:fd:76:85:b3:ff:d7:67:6c:19:
         02:54:83:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:27:49 2026 by rpki-client