Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61/ce268d52-bc78-36a5-a64e-f76a492c0e21.roa
File:                     ce268d52-bc78-36a5-a64e-f76a492c0e21.roa (raw, json)
Hash identifier:          Lw4H1X+kVcLUEa2M85BFevnJOUpnzSz89fWp1q6QWyQ=
Subject key identifier:   CA:0E:F9:15:4A:2A:B2:0E:AD:05:EA:C9:6C:14:C6:BB:A7:C5:8C:FB
Certificate issuer:       /CN=9f9f5021-d780-4759-ac0f-1865ab8d5a61
Certificate serial:       010D0C9F4328584CC7774815DD4181DAF933C600
Authority key identifier: A7:F5:60:C1:80:EC:25:8A:8F:F9:A2:A8:4D:ED:D1:BB:D5:C7:07:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61/ce268d52-bc78-36a5-a64e-f76a492c0e21.roa
Signing time:             Sat 07 Feb 2026 02:00:31 +0000
ROA not before:           Sat 07 Feb 2026 02:00:31 +0000
ROA not after:            Fri 08 May 2026 01:00:31 +0000
asID:                     6954
IP address blocks:        69.4.40.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61/9f9f5021-d780-4759-ac0f-1865ab8d5a61.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61/9f9f5021-d780-4759-ac0f-1865ab8d5a61.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c7:77:48:15:dd:41:81:da:f9:33:c6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f9f5021-d780-4759-ac0f-1865ab8d5a61
        Validity
            Not Before: Feb  7 02:00:31 2026 GMT
            Not After : May  8 01:00:31 2026 GMT
        Subject: CN=7d2de2a0-8cdb-4606-8614-7fce2313f0c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:32:2e:07:89:29:65:77:0b:56:41:2b:37:05:
                    bd:5e:62:db:00:0b:b5:d0:d3:58:3a:c7:70:c1:63:
                    ed:43:0d:91:52:fd:50:b3:45:e3:71:9b:1f:a1:c6:
                    cc:23:29:0a:4a:c6:f1:a6:9c:31:3d:5e:65:53:50:
                    04:11:f0:d1:61:f9:30:f3:ad:57:68:ad:3b:59:7e:
                    ef:20:b9:55:f9:50:ca:df:76:b6:86:96:e9:f2:a3:
                    c9:7b:88:1c:cc:61:d8:ad:c6:e8:5f:a2:d4:61:66:
                    c8:34:00:19:6a:6b:d5:f7:09:12:89:0f:e7:a7:ac:
                    92:fd:47:15:eb:05:83:2e:63:ec:b7:45:4a:0e:49:
                    26:77:bf:06:03:7a:f8:08:7d:41:6c:70:35:b7:34:
                    be:4d:fc:06:5e:0c:ec:54:e3:f7:f9:b4:8e:da:ff:
                    47:71:50:92:50:2a:a0:f0:3d:6b:50:08:c6:9c:f9:
                    cb:60:ce:a9:75:e9:7d:1a:7b:a6:99:22:e8:42:de:
                    38:da:4b:73:b7:8d:4d:90:22:b8:ac:78:be:c0:b7:
                    09:d5:7d:f1:b6:bd:fe:2c:e8:ed:38:5f:5b:bf:fe:
                    87:88:a4:7e:cf:08:0c:06:3c:fa:ca:29:a4:da:27:
                    75:af:8e:8a:a3:ae:41:a9:7b:a8:c1:23:96:76:1f:
                    e6:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:0E:F9:15:4A:2A:B2:0E:AD:05:EA:C9:6C:14:C6:BB:A7:C5:8C:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61/ce268d52-bc78-36a5-a64e-f76a492c0e21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61/9f9f5021-d780-4759-ac0f-1865ab8d5a61.crl

            X509v3 Authority Key Identifier:
                keyid:A7:F5:60:C1:80:EC:25:8A:8F:F9:A2:A8:4D:ED:D1:BB:D5:C7:07:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.4.40.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:3b:be:04:fa:ab:07:05:10:23:2f:82:1a:bc:68:8e:4a:c7:
         1e:fc:85:f9:89:51:aa:ba:3a:ab:80:b0:23:eb:de:04:ae:99:
         56:ee:01:bd:86:ec:5d:f1:5b:24:56:dc:1e:d0:10:a9:33:91:
         1f:32:02:26:ab:52:42:2c:11:44:09:1a:70:c0:20:8e:c8:70:
         73:d2:d2:80:50:bc:9c:df:2e:d1:dc:c0:93:2d:dd:9c:ab:46:
         32:21:08:c9:11:a9:8c:a7:77:b2:c3:ef:44:d5:95:d3:90:4b:
         04:0f:b7:4b:26:81:08:cf:d5:b4:48:a1:1c:1f:60:57:b7:b9:
         5b:24:03:ea:c8:3a:42:62:24:40:56:4b:42:24:7f:cd:3a:30:
         c2:48:90:1f:32:44:5c:71:2b:30:3a:cd:22:ef:e4:5d:c9:00:
         fc:1f:36:90:cd:dd:44:be:7c:1c:f6:ba:d1:b9:01:84:a9:4e:
         6c:93:50:20:0c:1d:82:aa:6b:42:1d:bd:db:90:f0:80:86:45:
         03:90:0a:6b:a6:cc:5e:ca:33:18:7c:3d:51:71:ae:c5:df:5c:
         46:ed:a6:68:eb:08:9c:a0:91:cd:7e:5f:06:50:8c:65:b5:f2:
         f9:e0:ba:f7:fe:d2:cf:25:dd:70:11:74:b3:15:8b:0e:a0:be:
         82:40:2d:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:51:08 2026 by rpki-client