Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/eff8eed6-d466-3c8d-ae03-dc10f6e2a9e6.roa
File:                     eff8eed6-d466-3c8d-ae03-dc10f6e2a9e6.roa (raw, json)
Hash identifier:          jJiPaid711/OWvdoyyw6fzJujCpqP6cPQ/Cv64Qg3tM=
Subject key identifier:   02:9C:6B:54:D9:99:00:23:8C:F7:BC:69:07:A0:34:16:CD:DD:D5:92
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584CC7772429B0B0821E7248FD00
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/eff8eed6-d466-3c8d-ae03-dc10f6e2a9e6.roa
Signing time:             Sat 07 Feb 2026 02:00:31 +0000
ROA not before:           Sat 07 Feb 2026 02:00:31 +0000
ROA not after:            Fri 08 May 2026 01:00:31 +0000
asID:                     17069
IP address blocks:        204.157.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c7:77:24:29:b0:b0:82:1e:72:48:fd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Feb  7 02:00:31 2026 GMT
            Not After : May  8 01:00:31 2026 GMT
        Subject: CN=8175efba-3371-431e-b3e3-43ef52d6e9f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:ec:a6:30:ac:56:7d:0d:a4:79:3f:12:1c:95:
                    cf:2b:5f:e9:34:06:6c:e9:95:0d:08:ae:7a:68:34:
                    55:e0:a4:e5:84:77:00:26:c0:53:14:19:0d:b7:f5:
                    b4:8b:24:b4:11:db:82:c6:52:16:a3:54:ca:81:6d:
                    86:d2:27:46:2b:a9:76:a4:12:bc:f5:4b:3e:cc:f3:
                    ea:e5:5a:0c:ce:63:5f:89:04:5e:ec:ec:f4:15:0e:
                    ca:43:52:3e:c4:4c:1f:9f:3f:72:32:d1:3b:8b:e0:
                    d2:f9:84:73:79:8c:f7:75:00:8f:fd:70:fe:7b:1e:
                    c7:02:06:88:2d:9f:1d:49:50:7d:17:be:78:9c:95:
                    f6:26:06:44:4a:08:59:bb:49:e4:e8:6f:a2:70:a8:
                    d0:e7:cb:07:05:a3:81:1a:71:83:da:9e:c5:7c:a8:
                    35:96:09:64:06:43:f5:42:48:39:34:f9:8c:4c:42:
                    3a:63:06:27:21:d8:7f:89:b8:ca:76:67:fc:cb:6d:
                    eb:01:6e:e4:88:29:89:49:b0:c1:07:0e:55:e4:63:
                    33:d2:b6:18:94:1f:68:42:9b:ad:bd:6d:64:27:26:
                    77:6a:74:2e:89:1f:e3:a1:fe:db:62:79:59:72:e3:
                    56:0f:7b:c3:5f:6f:82:22:2c:5d:e0:db:56:da:8a:
                    d5:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:9C:6B:54:D9:99:00:23:8C:F7:BC:69:07:A0:34:16:CD:DD:D5:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/eff8eed6-d466-3c8d-ae03-dc10f6e2a9e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.157.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:c3:84:27:bd:d6:4b:08:18:7c:d5:3e:b0:bf:3e:eb:9a:fa:
         55:23:8b:05:c4:16:9e:02:30:d9:d0:ab:bf:37:65:74:b2:52:
         1c:3f:b6:3f:8d:b4:27:5e:d9:fc:eb:d4:26:7d:b4:db:7e:35:
         fe:f7:0f:0f:28:d0:bd:78:fc:0d:c7:c0:b1:09:7f:ef:64:cb:
         12:2b:9f:b5:1f:e8:63:f9:45:fd:d5:d4:e9:a6:94:65:66:4c:
         9d:58:57:63:51:7d:92:93:07:38:cf:7b:38:ef:ac:e1:75:5b:
         19:9c:90:41:78:f4:03:2c:a6:6d:71:03:6e:1f:16:8d:dc:ff:
         ad:c9:b9:e3:71:78:05:82:c4:8d:9d:48:af:ab:f9:1f:5f:7c:
         be:d9:31:0b:2a:a8:61:5f:81:63:91:4e:ab:5d:e0:49:5d:d9:
         05:8f:e4:02:44:02:a8:01:95:43:e6:68:26:7b:d6:55:87:9c:
         ad:89:e6:17:72:c3:f6:e9:13:7c:33:79:b9:b8:50:4c:a8:6f:
         d1:12:87:85:7b:8d:7d:75:8f:d0:10:bb:92:27:f7:b6:9a:f2:
         72:08:ad:0a:15:9c:57:f2:f5:a8:98:2b:9f:dd:e6:fa:c9:8c:
         53:8f:77:75:b8:14:ca:e6:4a:86:90:26:6c:53:e3:2f:5e:ce:
         51:ac:90:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:44:00 2026 by rpki-client