Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/b0271ad2-a6bb-35cd-a80d-2a438833d55b.roa
File:                     b0271ad2-a6bb-35cd-a80d-2a438833d55b.roa (raw, json)
Hash identifier:          dVZi9C3hnsSco41D4/Nc0z9/slwxGIw3yTujtPrrpnM=
Subject key identifier:   30:40:0A:5C:36:61:9D:2A:75:D5:95:6A:A2:62:4D:34:C5:08:74:10
Certificate issuer:       /CN=c7a240a6-7109-4cea-b4c6-82f627a534d6
Certificate serial:       010D0C9F4328584CCD0CA11FD0556711DEB70300
Authority key identifier: 63:B0:53:A7:E5:00:E1:A7:5E:E6:10:16:EA:3B:F1:3C:9E:CF:88:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/b0271ad2-a6bb-35cd-a80d-2a438833d55b.roa
Signing time:             Mon 09 Feb 2026 02:00:31 +0000
ROA not before:           Mon 09 Feb 2026 02:00:31 +0000
ROA not after:            Sun 10 May 2026 01:00:31 +0000
asID:                     19740
IP address blocks:        172.84.64.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/c7a240a6-7109-4cea-b4c6-82f627a534d6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/c7a240a6-7109-4cea-b4c6-82f627a534d6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:cd:0c:a1:1f:d0:55:67:11:de:b7:03:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7a240a6-7109-4cea-b4c6-82f627a534d6
        Validity
            Not Before: Feb  9 02:00:31 2026 GMT
            Not After : May 10 01:00:31 2026 GMT
        Subject: CN=65c2bf41-a9d9-4291-a657-51d7d34b28cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:1c:42:41:fa:40:a7:58:c8:d1:56:ea:7f:18:
                    50:c5:b0:0f:8e:be:0a:01:f9:92:46:11:64:73:10:
                    b5:19:86:a2:f0:17:8d:87:a4:75:bf:3b:ff:64:28:
                    e2:d4:ff:6f:fb:98:0c:1f:36:5c:df:25:35:02:62:
                    0e:fc:2c:60:f7:fa:16:d5:15:3e:1c:ee:af:0c:a4:
                    c1:f4:67:a5:e2:32:ef:e1:50:68:58:30:38:e9:53:
                    27:fb:4d:d4:41:ec:09:7f:33:6e:1f:d4:92:79:9e:
                    5b:ee:6a:66:43:1c:cf:53:f6:bd:b2:62:21:c0:c9:
                    da:43:9d:56:c9:ee:52:fa:e6:96:c8:e5:32:c0:9e:
                    e2:56:5a:2f:54:57:a5:b1:92:e1:d0:dd:5b:4f:e9:
                    28:83:9b:1a:d1:64:94:4d:81:e0:e9:0f:ab:8a:63:
                    37:e3:aa:0f:b0:be:a9:59:d5:18:3f:45:aa:32:5d:
                    19:48:11:15:57:a3:0c:b1:b9:bf:5d:49:08:d0:db:
                    93:ba:19:cc:3f:e5:f7:3b:ec:ff:b4:1c:53:37:23:
                    22:99:92:22:00:f3:22:77:2b:49:21:65:63:69:07:
                    89:64:fc:9a:d9:0d:31:0a:e5:7a:bb:aa:42:9d:b5:
                    be:88:23:e0:da:65:0f:81:df:e2:21:df:d7:57:e7:
                    c5:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:40:0A:5C:36:61:9D:2A:75:D5:95:6A:A2:62:4D:34:C5:08:74:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/b0271ad2-a6bb-35cd-a80d-2a438833d55b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/c7a240a6-7109-4cea-b4c6-82f627a534d6.crl

            X509v3 Authority Key Identifier:
                keyid:63:B0:53:A7:E5:00:E1:A7:5E:E6:10:16:EA:3B:F1:3C:9E:CF:88:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.84.64.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:dc:25:c5:e2:fd:df:a8:47:95:94:12:16:b6:9c:53:52:f9:
         52:ff:c8:fa:d4:fc:b9:4b:56:b5:0c:bc:26:52:eb:06:87:27:
         ed:a7:00:81:3a:a3:66:db:a6:26:e6:2d:79:96:43:6f:98:db:
         1f:22:b2:87:b0:4d:7a:40:12:96:8e:4f:45:de:6c:7a:91:0d:
         21:98:e7:f8:9a:fd:ed:c5:77:e1:c8:c4:f6:03:08:39:ff:d4:
         fd:df:b1:15:e1:eb:3c:34:bd:fb:ef:c9:7e:8d:39:0f:31:01:
         55:41:48:6d:03:40:c6:76:45:97:19:55:78:04:bf:c9:2e:c6:
         33:3d:60:bf:bc:13:a3:9a:bc:d1:8d:1e:8f:72:5a:89:c5:5c:
         6d:51:e2:1e:34:2f:70:8a:a6:29:f9:58:90:7a:28:d2:a2:e0:
         c5:7a:1a:56:89:bf:54:96:eb:a4:b6:cd:1a:8b:f8:6b:75:8d:
         a9:5c:62:64:c4:4c:e0:89:55:80:2f:7e:48:81:26:1c:7c:b5:
         ad:91:de:dc:70:53:24:58:55:52:09:50:12:e8:a4:36:ba:c3:
         b8:a0:2b:ed:35:e7:2c:18:f3:9e:3f:16:50:aa:72:6a:85:e6:
         bd:31:18:32:66:4b:97:bd:4b:f1:3b:18:a7:fe:0b:aa:2c:0e:
         46:82:30:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:00:47 2026 by rpki-client