Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6f77d9a3-eb03-3e5d-92e2-877a3def054f.roa
File:                     6f77d9a3-eb03-3e5d-92e2-877a3def054f.roa (raw, json)
Hash identifier:          aULwbk98aUgZgv3yG1EHIoavrOf7x91yd1YJLBs0GVk=
Subject key identifier:   75:B8:29:E8:CA:7A:CE:D6:8E:3C:80:F9:6B:88:54:3C:BE:5A:8D:00
Certificate issuer:       /CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00
Certificate serial:       010D0C9F4328584CFC8233BDA959E78D9FCAC380
Authority key identifier: 87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6f77d9a3-eb03-3e5d-92e2-877a3def054f.roa
Signing time:             Thu 26 Feb 2026 02:00:32 +0000
ROA not before:           Thu 26 Feb 2026 02:00:32 +0000
ROA not after:            Wed 27 May 2026 01:00:32 +0000
asID:                     3738
IP address blocks:        192.250.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fc:82:33:bd:a9:59:e7:8d:9f:ca:c3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00
        Validity
            Not Before: Feb 26 02:00:32 2026 GMT
            Not After : May 27 01:00:32 2026 GMT
        Subject: CN=5e45dbe5-2446-4330-9c14-f45cbb34dd80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:94:ed:99:02:0e:28:71:44:c1:81:4a:68:07:
                    48:8f:c8:ac:aa:e7:ee:ca:d6:83:44:f7:33:23:f1:
                    29:98:dd:e5:7d:d6:5d:b9:29:96:c3:fc:e3:8f:70:
                    16:19:11:3b:52:43:63:27:5e:fa:2e:1b:0b:2c:ea:
                    c6:fa:93:d9:75:7f:38:f4:82:cb:cc:25:04:52:a4:
                    f2:96:43:1e:d1:d7:dd:4d:9d:7f:c8:4d:38:02:7f:
                    1c:a8:00:55:c8:7e:0f:6e:a1:8f:f7:e7:0f:a8:88:
                    b4:cd:99:2a:71:b2:44:98:ce:3b:fb:8a:7a:2f:46:
                    da:94:aa:3c:e7:6e:23:e0:ea:2b:57:81:8c:3e:54:
                    63:40:71:70:90:f7:06:86:5f:39:67:bf:10:b9:e1:
                    cc:67:b6:83:03:ef:e5:f4:7a:9c:cd:e8:a0:ec:d5:
                    72:f6:7a:8a:49:01:d2:ba:2b:0a:a1:ea:35:78:a4:
                    ef:5b:63:c0:65:c4:bc:9c:da:7d:9a:87:dc:46:e6:
                    e8:3e:ff:67:56:65:2f:08:67:bb:88:0d:89:9b:72:
                    cd:0f:a4:fa:f7:e2:af:f4:6b:16:ef:22:38:04:69:
                    01:eb:d4:ac:49:e6:9f:17:26:7e:d2:1c:fc:31:3c:
                    80:8f:66:13:cb:5b:e4:24:69:58:79:c7:89:f8:06:
                    6c:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:B8:29:E8:CA:7A:CE:D6:8E:3C:80:F9:6B:88:54:3C:BE:5A:8D:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6f77d9a3-eb03-3e5d-92e2-877a3def054f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl

            X509v3 Authority Key Identifier:
                keyid:87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.250.145.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:5d:79:29:2d:f4:c9:03:1b:1b:4e:bd:bf:73:fa:f9:ce:82:
         8a:69:f2:31:ac:fe:d1:2a:4c:39:ef:e1:0d:08:81:bd:90:9d:
         a4:64:a3:90:d4:ab:59:1d:95:82:ec:9d:04:09:bb:f1:be:56:
         d7:94:42:71:f5:bd:3d:c9:fd:37:6b:85:4a:0a:6e:07:23:18:
         78:c5:62:86:e0:81:45:d4:b6:f4:1f:70:6a:8d:1d:98:83:00:
         b2:12:37:a1:33:6d:8b:8b:6d:bd:09:b3:c1:fd:1f:5d:14:50:
         f6:3b:7d:78:55:6a:57:e2:98:58:ba:85:99:68:72:47:c2:5e:
         2a:40:e7:a1:6f:3e:12:2c:41:c5:76:07:65:94:91:ca:eb:da:
         00:96:94:ef:dc:26:b4:18:12:a8:d6:7c:f9:0a:d6:b6:04:92:
         99:d9:e1:58:11:11:14:e6:0e:e0:47:e8:da:59:36:ca:dc:5d:
         2f:d3:75:10:4d:23:c1:80:0e:45:20:9f:6b:6c:78:08:c7:91:
         48:2c:0f:27:db:26:3f:7b:a8:ab:df:86:2d:40:2d:c0:9c:7a:
         bb:80:26:97:0b:99:10:0b:eb:83:58:d9:72:dc:b6:f6:cb:88:
         18:18:d5:4d:26:4b:e1:f9:d0:2c:ef:f2:75:dd:7d:b4:4e:23:
         7f:36:57:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:37:49 2026 by rpki-client