Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/944eee81-281a-3f40-b323-855b3dbc8000.roa
File:                     944eee81-281a-3f40-b323-855b3dbc8000.roa (raw, json)
Hash identifier:          XvkO26e9281uyeawgQolQV42gIwDPcJObYjoJUW5UF8=
Subject key identifier:   A8:B4:64:34:FE:F6:BE:F7:D0:75:D6:49:C2:0F:EB:9A:3A:53:AF:A2
Certificate issuer:       /CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00
Certificate serial:       010D0C9F4328584CD4DD8E534F0D044E82C14AC0
Authority key identifier: 87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/944eee81-281a-3f40-b323-855b3dbc8000.roa
Signing time:             Wed 11 Feb 2026 21:12:25 +0000
ROA not before:           Wed 11 Feb 2026 21:12:25 +0000
ROA not after:            Tue 12 May 2026 20:12:25 +0000
asID:                     3738
IP address blocks:        192.250.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d4:dd:8e:53:4f:0d:04:4e:82:c1:4a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00
        Validity
            Not Before: Feb 11 21:12:25 2026 GMT
            Not After : May 12 20:12:25 2026 GMT
        Subject: CN=284ace2a-3584-4979-96f4-5acd3fd407fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:83:dc:e4:be:59:4f:2f:6f:3a:ac:d8:8e:28:
                    a6:0f:b6:11:4d:12:b0:2a:7a:b7:45:b9:e1:7c:45:
                    86:c5:16:41:60:00:6f:a1:7a:6f:3c:54:c7:9f:46:
                    77:c9:cb:f5:16:f9:30:a4:3d:85:4e:cd:82:66:44:
                    cb:27:a8:de:16:b2:e7:40:27:d7:46:e1:0e:75:21:
                    80:fb:cd:37:b3:81:8e:3e:5a:af:d4:04:aa:c7:ff:
                    8c:8d:ca:b2:86:03:1f:3d:a1:a3:79:32:06:ba:2a:
                    53:7e:12:d8:d9:f3:2a:5f:9c:89:a5:7f:83:d5:01:
                    31:f9:e3:31:3d:e9:c0:dc:b4:4d:72:89:91:ae:23:
                    7c:4e:23:79:e7:5b:f0:65:82:14:ca:1e:6b:c0:07:
                    61:89:de:a2:30:04:6e:b7:ae:be:fd:6b:97:8d:c6:
                    56:7d:cd:6f:be:9f:a6:25:51:aa:7a:78:4d:6e:3e:
                    b7:27:93:18:70:5b:73:a2:c6:4b:01:91:31:4e:25:
                    69:af:4d:4c:e9:5e:2c:d9:e6:5f:9b:66:eb:a1:ec:
                    69:69:ee:b1:b5:a4:ee:91:35:3c:4f:07:fb:35:19:
                    06:1a:db:05:17:02:85:be:3a:d0:6a:54:15:0a:08:
                    cf:bd:eb:ee:1e:36:ee:79:76:b4:d0:15:79:9c:4a:
                    b5:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:B4:64:34:FE:F6:BE:F7:D0:75:D6:49:C2:0F:EB:9A:3A:53:AF:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/944eee81-281a-3f40-b323-855b3dbc8000.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl

            X509v3 Authority Key Identifier:
                keyid:87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.250.49.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:7c:33:e1:6a:24:3d:23:d0:cf:0a:2d:15:d4:ab:cf:60:70:
         95:a5:b3:25:e7:65:e7:4e:9f:ea:e9:0b:eb:bb:dd:da:be:ce:
         77:83:c8:e3:ab:af:7a:04:e4:3a:3b:82:47:67:02:66:0c:ed:
         26:17:5d:b6:4f:04:e8:05:c3:d8:ca:7f:27:21:f7:5e:a4:a8:
         58:0e:59:a1:1e:19:c8:1b:3c:d2:57:cc:69:a0:b2:98:c5:3b:
         e5:19:cb:27:18:1a:3d:93:97:ab:77:33:08:cd:46:b7:ca:60:
         1a:71:43:98:f3:71:de:35:f9:ab:cf:84:fa:80:2d:2d:be:2c:
         67:f6:c8:10:36:78:72:a0:6c:b0:58:a4:71:29:f9:82:53:82:
         e1:99:e3:e9:7b:d9:8e:9a:b1:95:5c:d6:00:44:80:84:5d:bd:
         df:b6:9b:1c:c8:a6:f7:6c:85:f2:e3:8b:6c:75:46:d0:de:d3:
         b2:e7:64:d1:7d:77:d8:cb:b2:29:65:f3:c8:07:a6:41:58:7d:
         23:fb:e8:34:2f:94:1a:71:b7:05:98:a6:fb:8c:04:71:e7:54:
         89:77:85:44:52:d2:4d:80:16:4a:a7:d3:ca:d7:af:07:b2:8a:
         8d:29:3c:13:52:c0:c1:16:68:77:6c:24:99:f2:aa:72:60:cb:
         09:88:b8:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:17:09 2026 by rpki-client