Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/0bfdd272-99d0-3b36-a869-39240f77b2f6.roa
File:                     0bfdd272-99d0-3b36-a869-39240f77b2f6.roa (raw, json)
Hash identifier:          bMS7Gq40EJc2rTVGbf4VrKeofEIe2z4qYzmPjcoLB2A=
Subject key identifier:   FE:01:83:E9:9B:95:54:5D:44:59:6D:46:B9:A5:FA:92:65:5D:92:9B
Certificate issuer:       /CN=6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c
Certificate serial:       010D0C9F4328584CD99CE328EB58E3F4C74CA600
Authority key identifier: 89:9E:CF:8C:81:61:19:CD:F4:09:E4:64:A0:B8:79:AD:56:57:81:34
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/0bfdd272-99d0-3b36-a869-39240f77b2f6.roa
Signing time:             Fri 13 Feb 2026 14:00:41 +0000
ROA not before:           Fri 13 Feb 2026 14:00:41 +0000
ROA not after:            Thu 14 May 2026 13:00:41 +0000
asID:                     20148
IP address blocks:        205.143.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d9:9c:e3:28:eb:58:e3:f4:c7:4c:a6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c
        Validity
            Not Before: Feb 13 14:00:41 2026 GMT
            Not After : May 14 13:00:41 2026 GMT
        Subject: CN=7303db7f-4409-40b0-a9da-2ffa40026061
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:81:39:a6:1e:5d:2d:8d:02:05:7b:bc:9a:c2:
                    b7:a9:f0:bf:de:db:2c:73:2e:99:a4:59:78:ae:88:
                    31:58:7d:5a:47:21:94:07:cd:9c:b7:12:e8:82:cc:
                    15:bf:e4:1e:13:54:2c:f7:c4:fa:fb:70:22:30:34:
                    5a:ac:cf:03:60:5d:78:0a:2c:a6:bb:85:9e:e0:67:
                    dd:3f:7d:f6:27:88:79:61:b5:64:1a:09:59:79:97:
                    f0:73:28:c9:5f:4f:7c:a6:0c:2f:cb:93:e8:32:ee:
                    41:a9:43:15:da:8b:82:b1:0c:4a:50:8b:c6:98:fa:
                    30:72:4a:41:e3:fa:4d:c1:fd:8e:7d:4e:3e:4e:c7:
                    81:b3:06:ac:73:39:0d:b9:5f:7d:77:94:d3:e2:62:
                    20:1d:69:c6:de:70:5b:34:ce:c9:f1:b4:6b:ee:e3:
                    9b:f6:f4:a2:a7:1e:5a:5d:b4:55:31:f0:e8:5c:0d:
                    06:07:b3:c0:8c:c4:da:b9:c2:5f:f7:97:54:cc:04:
                    ae:23:33:1d:c9:25:2a:75:8b:2f:df:f8:be:d3:d8:
                    ea:bd:c1:2c:d7:f4:a0:73:46:9a:ec:c8:d1:5d:dd:
                    05:44:d7:f1:76:33:86:cc:e8:2f:98:cf:18:3c:87:
                    79:1c:b6:aa:7b:de:8d:ab:4f:17:78:af:2c:cd:d3:
                    a2:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:01:83:E9:9B:95:54:5D:44:59:6D:46:B9:A5:FA:92:65:5D:92:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/0bfdd272-99d0-3b36-a869-39240f77b2f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.crl

            X509v3 Authority Key Identifier:
                keyid:89:9E:CF:8C:81:61:19:CD:F4:09:E4:64:A0:B8:79:AD:56:57:81:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.143.197.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:2d:85:ed:84:ab:9b:02:30:48:93:1a:54:35:1e:75:51:d5:
         20:c9:d2:bc:f5:58:02:99:ec:cf:94:58:ad:dc:80:83:98:82:
         57:98:a3:49:31:81:1d:90:84:a8:86:6b:bb:77:ca:fb:7d:77:
         b0:c1:7b:d2:60:17:f6:dd:46:b9:b2:85:ee:84:12:1f:0a:a0:
         02:58:c5:a5:b7:a1:b0:0b:12:82:dd:4f:21:b4:44:20:87:24:
         83:47:3b:91:31:e4:77:1c:8b:bd:3c:dc:cb:93:00:57:0a:c0:
         a6:26:9b:82:09:3c:7b:43:0d:8a:22:89:3f:13:c7:09:b7:23:
         4d:eb:91:b1:2c:2d:03:67:d8:16:c3:a6:a6:ce:b8:f5:13:e7:
         a3:55:25:68:cb:1a:70:f4:a0:41:b7:ab:6e:77:01:34:67:ac:
         9f:04:25:a5:d9:3f:93:4f:22:60:8a:22:1c:1e:4e:a1:5b:3e:
         90:65:c1:83:03:8e:c3:d3:40:c8:43:ab:50:2b:d4:00:6d:f7:
         b1:07:95:92:8c:92:f2:8f:d5:45:9b:c9:f4:b1:a4:ff:6c:93:
         b7:17:1a:af:4f:30:ba:32:8f:ef:0f:3e:2e:98:64:28:45:5e:
         a1:38:50:e9:83:58:f2:b8:13:53:d7:90:0a:91:5b:3d:41:15:
         2e:ff:cb:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:04:48 2026 by rpki-client