Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/6b61834e-2ae2-302a-bbba-2708a06009d9.roa
File:                     6b61834e-2ae2-302a-bbba-2708a06009d9.roa (raw, json)
Hash identifier:          XtR1hRwvI1WWGENh8d8pf85QvV1P90Q9VmsqZKeJlVM=
Subject key identifier:   25:4D:53:0D:AC:BC:98:2C:B5:B4:DB:9F:F5:5E:1F:A8:A2:9D:17:CD
Certificate issuer:       /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
Certificate serial:       010D0C9F4328584CD99CDFE8C7F6E75411035440
Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/6b61834e-2ae2-302a-bbba-2708a06009d9.roa
Signing time:             Fri 13 Feb 2026 14:00:41 +0000
ROA not before:           Fri 13 Feb 2026 14:00:41 +0000
ROA not after:            Thu 14 May 2026 13:00:41 +0000
asID:                     54994
IP address blocks:        138.113.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d9:9c:df:e8:c7:f6:e7:54:11:03:54:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
        Validity
            Not Before: Feb 13 14:00:41 2026 GMT
            Not After : May 14 13:00:41 2026 GMT
        Subject: CN=e5c06422-e0d2-4b99-98b3-df483b7002c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:12:4f:f3:ed:6b:75:7b:1b:81:a1:b9:a2:04:
                    e6:da:6b:66:3e:38:23:7c:35:08:d0:3c:c9:7b:60:
                    8a:f7:0f:7e:d2:bf:9a:69:5d:30:26:65:07:52:92:
                    e1:24:1a:4d:cd:60:8c:d7:73:0e:45:fa:15:85:bb:
                    3e:ef:29:0b:b2:e2:dd:0e:6b:b8:09:69:ec:63:2c:
                    8f:44:f6:ff:1b:40:f4:c9:e8:46:c1:c4:df:ef:6e:
                    14:eb:42:e3:a0:d7:09:3e:48:8e:ac:7c:7f:f9:37:
                    c3:5f:16:aa:92:49:a5:b6:4b:12:5b:5c:63:4c:fe:
                    8e:0d:0d:c2:d5:53:f3:92:d9:03:fb:1c:42:c8:c7:
                    10:f0:f7:c9:0e:e4:9f:22:57:55:6f:fd:42:62:0f:
                    0d:3b:9a:af:f7:3b:71:ee:62:79:c8:c5:e9:95:4d:
                    4b:e6:d9:4c:20:bc:48:8a:f1:66:f5:87:0d:88:b8:
                    2b:05:61:3a:af:74:43:e1:5c:e9:87:90:89:5a:6d:
                    f9:fe:d9:98:62:d7:6a:09:f1:72:64:3e:d8:82:0c:
                    11:86:0c:6f:c2:eb:57:8f:a0:58:f5:74:c4:ee:19:
                    78:39:1b:1c:e5:48:79:5f:21:6a:45:f1:6b:a1:19:
                    5e:59:fd:13:f2:13:fb:07:1d:08:59:fd:b5:5a:68:
                    46:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:4D:53:0D:AC:BC:98:2C:B5:B4:DB:9F:F5:5E:1F:A8:A2:9D:17:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/6b61834e-2ae2-302a-bbba-2708a06009d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl

            X509v3 Authority Key Identifier:
                keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.113.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:73:8e:7b:41:d6:a0:59:8b:f9:fa:ba:cb:2a:06:79:8c:2a:
         5e:e6:fd:1c:89:e6:45:cc:fb:a8:8f:5d:65:e3:96:e8:62:bb:
         73:ce:bb:71:17:3c:b9:8c:70:3f:52:5b:9b:84:69:8b:55:e6:
         49:95:a2:fc:21:bd:c1:77:b0:f6:2e:ed:b9:a4:e8:12:08:fe:
         58:ee:d2:91:13:90:e4:c5:2a:72:d6:81:b7:b2:42:92:1f:97:
         27:43:6a:7f:35:9e:0a:e6:49:0e:95:d2:f5:10:68:c9:07:78:
         69:78:cd:af:6f:c6:b7:27:45:e1:5f:cb:1f:1b:bb:ff:65:ef:
         1b:ff:28:af:b2:77:19:b2:41:bb:2b:c2:bb:3f:1b:bd:71:3c:
         07:91:e3:95:76:a0:6e:34:8a:31:b3:96:a4:63:49:e0:64:33:
         f9:05:67:58:83:55:dc:a5:f1:50:aa:c5:b0:e6:36:cd:ca:11:
         5e:5b:d0:85:1c:7b:76:51:e6:33:8b:72:57:0e:ab:6b:41:8d:
         49:be:1b:45:d3:7e:4d:f5:db:da:52:e6:e0:a7:d3:8d:70:ea:
         76:84:b4:f7:9b:a8:f5:4a:be:ba:f7:90:0f:ce:42:ad:ca:38:
         e8:08:45:f0:bb:b0:58:d0:ce:b7:30:8b:0a:ce:ca:b0:20:cd:
         d3:37:f7:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:38:59 2026 by rpki-client