Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b0b207ca-4e0e-3e43-ad4f-98df99120b5a.roa
File:                     b0b207ca-4e0e-3e43-ad4f-98df99120b5a.roa (raw, json)
Hash identifier:          GvX/yVcTnY1EWtSUfTneH9j10JTCEg02lFRzztFUvcQ=
Subject key identifier:   F3:F3:5A:DF:51:32:E5:40:87:DB:97:73:F5:8C:A7:19:FE:DA:FC:F6
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584CF93F46846E2CA911D8DD2F60
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b0b207ca-4e0e-3e43-ad4f-98df99120b5a.roa
Signing time:             Tue 24 Feb 2026 21:58:25 +0000
ROA not before:           Tue 24 Feb 2026 21:58:25 +0000
ROA not after:            Mon 25 May 2026 20:58:25 +0000
asID:                     203099
IP address blocks:        130.117.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f9:3f:46:84:6e:2c:a9:11:d8:dd:2f:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Feb 24 21:58:25 2026 GMT
            Not After : May 25 20:58:25 2026 GMT
        Subject: CN=9c4d38ea-60aa-43e8-b09b-d32071e77af7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:86:03:5b:7c:ed:69:3d:e3:be:78:9c:39:6a:
                    1b:b7:b4:75:f7:2b:76:91:d4:61:d7:c1:21:d0:d0:
                    d2:e8:da:91:bd:0c:62:76:19:1a:d0:ab:74:5d:c5:
                    6b:c6:9d:a0:2b:9e:2a:70:8c:55:f6:8b:9c:20:4f:
                    bc:37:71:b1:8a:03:d6:9f:0e:7e:56:53:d4:a4:78:
                    41:e7:bb:76:37:d0:ea:51:37:a1:8e:a9:cc:45:1e:
                    b5:4b:b5:f1:fb:82:ea:47:dd:9a:dd:e3:07:8e:e3:
                    f8:4d:68:c6:cb:c1:67:36:c7:cd:0f:cb:2f:a9:a9:
                    8e:e6:09:cf:19:9f:ec:3f:03:e2:32:20:c7:94:e3:
                    5c:e7:85:3c:35:a9:c9:f1:f1:36:87:4d:9d:1c:1f:
                    fc:cf:32:19:2e:93:8c:f3:71:2d:64:c5:95:94:c9:
                    09:0f:87:e1:cc:44:60:7c:81:91:d4:b2:d9:73:b0:
                    93:db:60:77:76:3d:85:28:70:34:db:04:59:44:52:
                    b4:c1:54:08:d4:d7:a8:f9:0b:91:16:9b:47:26:00:
                    2d:f9:9d:9f:43:d7:d2:37:a5:25:c2:c0:90:18:36:
                    30:15:d3:73:78:15:56:de:06:49:f7:cf:7b:19:6e:
                    ef:d3:85:c1:4b:1f:0d:94:94:fe:34:8d:74:ac:0a:
                    3d:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:F3:5A:DF:51:32:E5:40:87:DB:97:73:F5:8C:A7:19:FE:DA:FC:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b0b207ca-4e0e-3e43-ad4f-98df99120b5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.117.95.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:9b:80:e5:b8:fe:1d:2e:53:c0:45:79:1b:28:35:bf:a4:3a:
         7a:bc:52:38:f3:cf:e5:7f:e1:ee:f9:40:c3:bd:0c:20:ec:9a:
         76:cb:8c:d1:5d:14:a0:75:73:a1:cf:20:a3:ce:c8:bb:e1:3d:
         25:50:5c:3c:7e:38:58:9a:4b:34:41:2b:7c:d9:32:2b:ab:c2:
         b5:a2:e6:8e:75:09:45:4c:b7:3b:aa:27:b9:b1:7f:c9:85:d6:
         56:06:8b:2e:51:5b:67:0e:dd:35:fa:4f:7c:23:d6:6a:96:5f:
         ef:63:29:58:69:ce:22:f6:c0:9b:7b:79:56:96:0f:9e:f0:33:
         1b:82:c5:43:de:6a:53:31:96:4b:78:eb:ac:db:48:4f:f9:1f:
         db:75:35:2c:bd:4e:c0:59:6c:eb:9d:2f:2c:a1:03:ff:16:68:
         60:5e:9d:a0:0f:30:b8:e0:35:82:10:47:f0:23:2e:e6:68:99:
         86:b2:74:26:e4:0a:b6:9e:87:61:36:00:f0:ce:5d:76:7f:5f:
         17:6a:67:53:53:ca:ef:6f:4c:0d:15:ec:08:1e:78:13:ef:80:
         db:70:53:83:01:37:2c:d0:4d:71:5e:be:b4:d9:ed:b9:ed:3c:
         2c:d0:ee:2b:ed:78:1d:65:b9:34:d2:10:c2:e0:78:4e:78:4e:
         8d:c2:d5:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:33:19 2026 by rpki-client