Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/c9e12a9c-0c3d-3d57-aa5d-64537e907962.roa
File:                     c9e12a9c-0c3d-3d57-aa5d-64537e907962.roa (raw, json)
Hash identifier:          nojvqZd4Qiq9a06ZZtuGU3pIW3svjooAIL0El+euaho=
Subject key identifier:   ED:F2:0A:87:E2:C0:8A:56:42:51:18:B5:55:3F:D7:25:1E:9D:58:01
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584CD4079A180FE67DECAD2E2280
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/c9e12a9c-0c3d-3d57-aa5d-64537e907962.roa
Signing time:             Wed 11 Feb 2026 14:00:41 +0000
ROA not before:           Wed 11 Feb 2026 14:00:41 +0000
ROA not after:            Tue 12 May 2026 13:00:41 +0000
asID:                     54113
IP address blocks:        151.101.68.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d4:07:9a:18:0f:e6:7d:ec:ad:2e:22:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Feb 11 14:00:41 2026 GMT
            Not After : May 12 13:00:41 2026 GMT
        Subject: CN=13fc2595-67e2-485f-b78e-a2db41cc6385
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:14:c2:39:65:10:01:d1:26:35:6a:08:90:db:
                    8e:f2:8e:a5:9c:38:3e:4a:69:e9:0f:a0:b4:31:ec:
                    32:f3:04:15:a0:d4:90:5d:d5:84:7f:8a:e1:68:73:
                    93:40:6f:29:ee:14:73:99:e4:cf:14:ef:9f:12:59:
                    ad:5b:61:71:a7:60:46:79:c8:06:d5:bf:38:58:07:
                    a5:13:c0:03:98:ab:c2:6a:c4:c9:6e:a8:c8:7c:6b:
                    ce:8c:a4:3e:db:91:38:e3:eb:4d:a6:1e:37:c8:c2:
                    f7:ac:6a:53:bd:ad:86:24:24:13:83:90:2b:fc:c3:
                    71:21:bd:28:61:28:3f:a4:ce:54:a7:36:df:10:26:
                    b9:cf:b2:57:a5:ac:d2:84:1c:c1:16:37:83:af:31:
                    ba:c6:dc:c1:ae:fd:1f:cf:3f:ea:73:86:43:88:98:
                    a0:51:cd:eb:77:69:21:39:27:59:07:f9:cf:30:08:
                    c9:58:ce:13:80:63:fa:76:3c:34:a5:81:40:40:b8:
                    17:28:d3:c9:ee:36:a1:c5:76:87:f9:dd:cb:5d:c4:
                    39:a5:5f:31:99:5b:20:f8:c2:f7:b3:fa:ac:63:45:
                    73:05:02:4b:07:eb:6a:eb:e5:63:09:3c:b5:9e:e5:
                    d4:3b:50:13:71:3e:01:af:38:74:e2:82:c0:b7:12:
                    24:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:F2:0A:87:E2:C0:8A:56:42:51:18:B5:55:3F:D7:25:1E:9D:58:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/c9e12a9c-0c3d-3d57-aa5d-64537e907962.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.101.68.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c6:f9:c9:88:a0:69:ea:26:f8:29:41:23:3e:08:40:c1:7d:4e:
         86:9f:92:d7:db:27:c0:6c:0b:92:25:81:4d:51:ea:f6:72:4d:
         70:ae:8e:d8:19:ec:c4:de:18:43:8f:05:a3:31:3d:b3:35:9d:
         cb:9a:e7:66:10:11:8a:f3:51:3d:e2:61:3f:89:19:ec:f5:22:
         e2:b4:22:4a:ea:92:6b:20:8d:67:04:6f:46:75:ed:41:f3:00:
         cd:80:c1:57:d6:fa:1c:ee:66:1d:a9:32:8f:58:52:dd:98:76:
         8e:43:a5:61:4d:46:94:dc:9a:09:b7:07:31:9a:e1:f2:d5:9c:
         77:91:33:12:e1:82:9d:44:77:11:d8:e9:30:90:5c:55:6b:09:
         95:c9:bb:53:04:8b:f0:e8:b5:e6:19:4f:c0:22:6a:05:d4:9d:
         1f:56:ce:7b:5f:65:ed:9e:b3:e0:49:ca:c3:bb:f3:19:c3:10:
         02:c2:99:02:27:87:ec:69:f7:00:dd:a4:d4:fc:06:9e:77:f1:
         90:30:c3:31:5d:88:31:8a:62:32:3a:73:82:18:ae:53:86:d4:
         2a:32:6b:44:ca:4d:8c:9d:8b:41:78:06:8e:11:bc:5d:c2:dd:
         bd:6c:64:3e:a0:11:c6:92:dd:3e:cc:03:53:b7:ed:37:ab:cd:
         d9:3c:3d:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:23:49 2026 by rpki-client