Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6c81d7c0-8217-43f2-9047-5e6c0b85a8e3/eb71a70a-24f1-3abd-8225-b45fd87b3249.roa
File:                     eb71a70a-24f1-3abd-8225-b45fd87b3249.roa (raw, json)
Hash identifier:          HejPnb1+WAfSix6Vx6bheAk2xmCRW0U1Kc0h2jcu0UQ=
Subject key identifier:   C2:A7:C4:FF:85:5A:93:60:3A:28:13:94:39:05:37:38:4C:7B:9E:78
Certificate issuer:       /CN=6c81d7c0-8217-43f2-9047-5e6c0b85a8e3
Certificate serial:       010D0C9F4328584CAA27182A2BE9A85717C78C80
Authority key identifier: 2D:6B:BC:FC:B9:38:B9:2C:D4:BA:07:0C:1B:C1:B9:D2:DD:F1:A1:A3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6c81d7c0-8217-43f2-9047-5e6c0b85a8e3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6c81d7c0-8217-43f2-9047-5e6c0b85a8e3/eb71a70a-24f1-3abd-8225-b45fd87b3249.roa
Signing time:             Tue 27 Jan 2026 14:00:36 +0000
ROA not before:           Tue 27 Jan 2026 14:00:36 +0000
ROA not after:            Mon 27 Apr 2026 13:00:36 +0000
asID:                     54060
IP address blocks:        164.104.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6c81d7c0-8217-43f2-9047-5e6c0b85a8e3/6c81d7c0-8217-43f2-9047-5e6c0b85a8e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6c81d7c0-8217-43f2-9047-5e6c0b85a8e3/6c81d7c0-8217-43f2-9047-5e6c0b85a8e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6c81d7c0-8217-43f2-9047-5e6c0b85a8e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:aa:27:18:2a:2b:e9:a8:57:17:c7:8c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c81d7c0-8217-43f2-9047-5e6c0b85a8e3
        Validity
            Not Before: Jan 27 14:00:36 2026 GMT
            Not After : Apr 27 13:00:36 2026 GMT
        Subject: CN=ccb3ed22-6ff0-4a63-86c8-335e7ddb26eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:db:fd:68:74:2a:e1:f4:8f:71:6f:74:60:d7:
                    2b:73:f4:d6:2b:27:49:73:0f:b4:d2:23:fd:b1:93:
                    4f:dd:4e:5b:59:4f:ca:33:36:68:5b:cd:92:90:33:
                    4a:31:59:c3:ca:c1:d7:4b:99:45:71:d6:19:44:ee:
                    ad:ba:46:c8:d8:04:75:e5:56:fb:eb:b4:38:bf:37:
                    2e:fd:d2:97:b2:b7:9c:78:35:44:27:fd:b4:aa:3d:
                    af:c9:fc:17:02:dc:34:a5:e4:38:2a:d2:e3:3b:5f:
                    2c:13:b1:5a:06:f2:4a:39:76:9c:21:97:50:55:b0:
                    31:3a:cc:a8:9f:c1:c0:ab:d5:32:f0:97:41:d0:9d:
                    a2:ed:74:8b:e0:6c:6e:c1:bd:e4:8a:83:86:7d:8f:
                    fc:82:39:37:52:b9:1b:0f:8c:16:84:f5:c6:0e:66:
                    56:3c:b1:95:8d:33:c8:4e:6f:b9:4e:79:3e:1a:37:
                    e1:fe:46:ae:ad:40:bd:ab:ce:eb:7e:73:72:6a:73:
                    31:51:ce:37:da:d0:8e:b6:fd:a9:ff:ed:ef:26:b0:
                    bd:f1:56:7b:4e:65:69:89:de:77:31:12:c0:98:4e:
                    d0:7e:3f:87:df:bd:91:a7:08:5b:7e:5b:4b:01:cd:
                    ac:09:14:c6:28:35:86:59:f7:dc:61:8e:17:16:31:
                    72:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:A7:C4:FF:85:5A:93:60:3A:28:13:94:39:05:37:38:4C:7B:9E:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6c81d7c0-8217-43f2-9047-5e6c0b85a8e3/eb71a70a-24f1-3abd-8225-b45fd87b3249.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6c81d7c0-8217-43f2-9047-5e6c0b85a8e3/6c81d7c0-8217-43f2-9047-5e6c0b85a8e3.crl

            X509v3 Authority Key Identifier:
                keyid:2D:6B:BC:FC:B9:38:B9:2C:D4:BA:07:0C:1B:C1:B9:D2:DD:F1:A1:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6c81d7c0-8217-43f2-9047-5e6c0b85a8e3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.104.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:85:16:fd:82:24:c6:d1:20:42:a6:a5:a1:91:72:35:79:43:
         f5:c5:fb:74:97:1a:b8:36:23:3f:73:0b:31:1c:cc:c0:2c:39:
         1f:1a:95:25:90:b0:6a:84:71:5c:ef:c3:f0:b2:90:ce:22:cd:
         a8:ed:17:d5:dc:cf:b1:30:95:85:f4:77:74:91:ed:a6:7e:98:
         6f:c6:64:50:21:38:34:57:ef:18:51:dc:5c:34:07:c8:32:d8:
         47:df:ae:a3:ae:2d:19:db:43:10:ec:f3:ea:80:3a:3c:04:5b:
         23:25:cf:2c:ed:54:ec:07:fc:19:38:93:75:ee:c3:aa:2a:3f:
         c0:74:01:7c:ad:74:09:67:3e:95:e0:8a:b8:8f:db:f5:9c:3c:
         aa:bf:28:e8:8d:65:d5:4a:6d:e2:7a:27:e4:4f:32:28:93:5e:
         07:5d:97:07:2d:3c:91:fd:13:30:15:c6:88:cf:67:50:f5:77:
         28:e7:78:77:8c:65:47:69:8f:26:4a:40:50:09:ab:8e:a0:39:
         68:5f:90:b3:37:50:9f:b8:b9:06:fc:b4:5c:33:f7:47:7c:36:
         e3:4c:e6:60:2b:9b:26:75:b0:86:b0:7c:6f:fa:aa:a8:e6:94:
         57:6d:90:ac:44:55:45:78:6b:64:7d:e7:93:12:9a:f0:b2:a1:
         fb:54:a9:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:17:19 2026 by rpki-client