Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fd9e0fc-3a7e-40c8-a935-b58c6b992c3c/b6a532df-da9c-3734-8cc8-975860ee4905.roa
File:                     b6a532df-da9c-3734-8cc8-975860ee4905.roa (raw, json)
Hash identifier:          ky5lFLjQ4DlpyTONvvPpdw7e4DWAvYFKxWp2fWxEHFo=
Subject key identifier:   76:CA:1D:15:7F:6F:75:8A:45:08:76:F0:CF:09:D7:A9:DD:9A:FC:E8
Certificate issuer:       /CN=1fd9e0fc-3a7e-40c8-a935-b58c6b992c3c
Certificate serial:       010D0C9F4328584CDDCCF1166831E0D88CB83E80
Authority key identifier: 8E:1C:1C:D6:58:C0:18:2A:52:14:F0:28:1E:E0:F1:14:42:62:5B:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fd9e0fc-3a7e-40c8-a935-b58c6b992c3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fd9e0fc-3a7e-40c8-a935-b58c6b992c3c/b6a532df-da9c-3734-8cc8-975860ee4905.roa
Signing time:             Sun 15 Feb 2026 02:00:32 +0000
ROA not before:           Sun 15 Feb 2026 02:00:32 +0000
ROA not after:            Sat 16 May 2026 01:00:32 +0000
asID:                     203020
IP address blocks:        142.202.252.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fd9e0fc-3a7e-40c8-a935-b58c6b992c3c/1fd9e0fc-3a7e-40c8-a935-b58c6b992c3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fd9e0fc-3a7e-40c8-a935-b58c6b992c3c/1fd9e0fc-3a7e-40c8-a935-b58c6b992c3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fd9e0fc-3a7e-40c8-a935-b58c6b992c3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:dd:cc:f1:16:68:31:e0:d8:8c:b8:3e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fd9e0fc-3a7e-40c8-a935-b58c6b992c3c
        Validity
            Not Before: Feb 15 02:00:32 2026 GMT
            Not After : May 16 01:00:32 2026 GMT
        Subject: CN=21488c29-17a5-4f04-bff8-babef2bc9c0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c1:f4:b0:a2:33:a7:3a:64:0a:fe:51:60:b1:
                    35:02:fa:f7:e2:95:71:93:de:09:b9:1a:2b:51:13:
                    59:3e:f0:e0:68:91:36:5a:0e:54:27:2b:d6:eb:0d:
                    12:be:39:a8:12:e5:89:40:77:98:3d:2e:73:70:4d:
                    10:97:d1:ca:9a:f4:1d:f4:4d:2d:a5:88:9f:02:58:
                    66:f4:49:23:b3:dc:da:96:b2:4a:7c:a8:eb:b7:cb:
                    2e:46:e8:1e:f1:a1:03:fe:12:c8:41:6c:59:ac:57:
                    71:3f:1a:bc:32:a8:f6:61:96:80:7a:61:a9:b7:b1:
                    7d:cf:3a:80:47:bd:9e:30:f2:ed:96:e5:d8:e2:ba:
                    91:42:4e:74:8d:0d:4b:f8:ec:6e:3a:be:c4:09:b0:
                    8d:bf:06:b0:52:fe:75:4c:24:6d:e5:13:01:4f:95:
                    22:24:c2:89:5b:cc:e1:5e:7a:ff:58:b9:ad:a1:72:
                    ef:8f:46:0b:52:e0:c2:55:32:d2:07:4b:6b:b6:e3:
                    9d:a4:f6:a5:36:b5:06:76:a7:cc:06:5c:33:62:e3:
                    a5:29:4e:1c:f9:d3:e7:d9:75:21:20:80:2f:12:d7:
                    a8:5a:7d:e9:ad:8d:4b:50:1d:ca:51:b9:51:df:22:
                    71:74:38:2e:44:fc:1d:83:09:3a:98:74:9c:06:e8:
                    d7:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:CA:1D:15:7F:6F:75:8A:45:08:76:F0:CF:09:D7:A9:DD:9A:FC:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fd9e0fc-3a7e-40c8-a935-b58c6b992c3c/b6a532df-da9c-3734-8cc8-975860ee4905.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fd9e0fc-3a7e-40c8-a935-b58c6b992c3c/1fd9e0fc-3a7e-40c8-a935-b58c6b992c3c.crl

            X509v3 Authority Key Identifier:
                keyid:8E:1C:1C:D6:58:C0:18:2A:52:14:F0:28:1E:E0:F1:14:42:62:5B:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fd9e0fc-3a7e-40c8-a935-b58c6b992c3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.202.252.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:4e:50:67:0f:93:d5:53:c8:8e:ca:33:1b:a3:17:b6:ef:47:
         16:cb:2e:4a:3f:6f:16:93:f6:93:22:d2:d0:8e:42:3e:7f:2a:
         7c:66:10:3d:e3:86:90:e0:9d:5a:16:58:23:0c:05:af:f3:e0:
         0d:dc:2d:9c:66:e5:18:f7:4e:b0:51:2f:86:7e:f9:50:f0:9d:
         64:fd:59:81:bc:5f:6b:03:10:d7:d6:05:45:9c:7a:ba:cc:a3:
         e3:2e:e3:6b:1f:c8:bf:31:86:f6:d1:fd:e5:d0:30:14:a3:06:
         e1:f1:05:fd:19:28:9f:03:2d:ed:7a:cf:ce:e9:2e:5e:80:11:
         d6:0f:14:20:1d:ff:3f:6f:92:c1:59:5b:45:8c:f0:41:6c:b9:
         17:30:4a:65:ee:87:c7:fe:4c:38:29:37:05:10:fc:46:89:13:
         c2:fc:89:70:19:2f:3d:b3:31:11:55:69:a5:7d:f1:42:e8:00:
         01:bc:4e:5b:7c:17:da:2b:61:0b:42:f3:ef:1e:ba:e0:2e:80:
         23:39:9b:53:57:b6:f9:67:56:b1:fe:47:0a:02:ba:bb:da:4b:
         64:c7:a6:81:51:98:73:ae:6b:5d:78:7f:2d:52:e4:54:9b:50:
         e1:ca:39:04:9c:de:21:cd:64:e1:46:99:26:eb:0b:f3:d6:a9:
         b9:66:c3:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:36:51 2026 by rpki-client