Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/b0b8a1ec-1bb5-3e92-af9e-2d2226e1f2b0.roa
File:                     b0b8a1ec-1bb5-3e92-af9e-2d2226e1f2b0.roa (raw, json)
Hash identifier:          fw6SPl4ixSTMFNmgzCzsJHrL8g3HfClpE+uGhIafkeA=
Subject key identifier:   BF:CC:63:58:84:DA:4E:D5:90:62:74:AD:E1:F1:5B:62:93:F2:8D:28
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584CD40799C2F26CAFE9D3F7A4C0
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/b0b8a1ec-1bb5-3e92-af9e-2d2226e1f2b0.roa
Signing time:             Wed 11 Feb 2026 14:00:41 +0000
ROA not before:           Wed 11 Feb 2026 14:00:41 +0000
ROA not after:            Tue 12 May 2026 13:00:41 +0000
asID:                     54113
IP address blocks:        151.101.48.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d4:07:99:c2:f2:6c:af:e9:d3:f7:a4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Feb 11 14:00:41 2026 GMT
            Not After : May 12 13:00:41 2026 GMT
        Subject: CN=bd478717-e2d0-42ed-9e65-8a688a710e9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:50:0b:cd:11:e0:51:61:c0:06:6b:86:31:32:
                    12:c9:0f:05:c0:9f:9c:18:8e:f8:3b:ee:c3:71:ca:
                    c8:f7:e8:f9:e3:11:d3:f9:8d:6e:97:c3:2f:2b:7d:
                    db:ec:f3:e3:e5:b0:2d:15:e0:a8:39:65:12:52:26:
                    70:a0:fc:e1:10:0e:59:c1:e3:80:74:83:77:51:48:
                    8e:34:3f:3f:51:ea:2a:98:37:00:51:89:8d:68:d1:
                    5c:60:1b:8e:34:7c:9f:b4:3a:26:17:b4:c1:a0:ec:
                    01:09:a2:62:a1:47:7b:4a:4e:b6:64:f0:d9:43:97:
                    97:cc:c9:ef:cf:15:ba:e3:6c:f1:b1:dd:e9:a7:4d:
                    1a:cf:3e:22:4e:4f:f6:ca:2d:6b:6b:80:d1:79:60:
                    d9:01:c7:ff:47:f5:a3:97:b2:8a:34:c7:66:cb:a1:
                    4a:8e:ff:1b:a2:3e:9f:b8:e1:10:99:33:d5:f1:f7:
                    67:fa:89:00:66:8c:61:19:cf:fc:ee:ad:5c:87:3c:
                    f1:ed:d8:df:a0:52:6c:d9:67:5c:e2:ea:f5:46:33:
                    d8:cb:8f:81:76:21:7b:75:ce:76:44:b2:ad:71:75:
                    9a:94:35:91:49:7c:a8:21:0e:d7:e4:20:23:74:a3:
                    0a:b1:63:17:e2:00:11:81:43:4f:c9:f2:2a:3d:8b:
                    e1:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:CC:63:58:84:DA:4E:D5:90:62:74:AD:E1:F1:5B:62:93:F2:8D:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/b0b8a1ec-1bb5-3e92-af9e-2d2226e1f2b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.101.48.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:7e:d3:bc:2a:d5:35:bc:f2:17:e0:13:33:ab:21:e7:ed:af:
         bd:87:eb:60:85:30:da:08:d6:95:e7:26:2b:51:85:15:00:17:
         a3:68:a1:6a:4b:8c:90:63:f7:df:ad:12:31:55:5f:de:58:4e:
         0d:87:0f:4c:e0:4e:98:30:36:14:d1:7c:c0:f2:d4:b8:05:12:
         af:6e:36:88:f7:88:39:1e:da:d0:2a:3a:94:bb:8a:24:77:e3:
         b3:80:6a:c4:58:81:73:19:3d:d0:f9:10:4e:1d:22:b1:e8:a2:
         ee:29:07:9e:97:fd:66:41:c5:45:f6:1d:a1:ed:7f:ab:39:09:
         0a:cc:78:91:33:44:f1:5d:42:38:b4:4b:35:26:27:93:43:c8:
         a0:ad:71:9f:63:c8:89:00:99:bc:77:cd:bc:41:c1:d8:4d:e6:
         39:de:5a:98:88:11:f4:e6:c0:6e:f9:7e:a3:23:c8:3f:dd:fd:
         6d:69:e9:71:59:5e:85:e0:2f:0f:62:d6:10:29:11:b5:05:d3:
         cb:d8:90:a2:f0:35:06:b5:35:11:90:48:58:25:f2:e0:c8:c7:
         ac:f1:fa:16:03:5c:bf:59:b9:f6:98:ba:b4:2c:e7:5d:00:d0:
         b3:4b:20:ec:0c:52:d5:0d:a3:22:b9:9e:72:f5:40:67:0f:d4:
         21:a2:77:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:14:45 2026 by rpki-client