Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/c061cd57-fe01-36dd-8676-2a34049427d6.roa
File:                     c061cd57-fe01-36dd-8676-2a34049427d6.roa (raw, json)
Hash identifier:          OW+J9suu7/19yqVtJxPjjXe8ShtDZmEB+lYfXCMzmYk=
Subject key identifier:   54:75:51:1C:7E:AB:75:BF:34:80:14:A5:91:16:B1:40:C0:48:51:37
Certificate issuer:       /CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00
Certificate serial:       010D0C9F4328584CDA3BBC5CCF2571392FE63480
Authority key identifier: 87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/c061cd57-fe01-36dd-8676-2a34049427d6.roa
Signing time:             Fri 13 Feb 2026 19:21:13 +0000
ROA not before:           Fri 13 Feb 2026 19:21:13 +0000
ROA not after:            Thu 14 May 2026 18:21:13 +0000
asID:                     3738
IP address blocks:        192.250.80.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:da:3b:bc:5c:cf:25:71:39:2f:e6:34:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00
        Validity
            Not Before: Feb 13 19:21:13 2026 GMT
            Not After : May 14 18:21:13 2026 GMT
        Subject: CN=b5912420-5072-4d17-aa8a-df3367349642
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:6f:f8:74:c2:7b:5d:de:05:64:d7:4a:ff:fe:
                    a7:7e:dd:1e:68:21:ec:25:5a:ce:c2:96:14:9a:ad:
                    bf:50:92:46:2e:ee:4c:70:5e:11:b6:b2:f2:4c:b8:
                    e1:1e:f9:39:6c:75:df:c9:57:23:4d:cc:0a:d9:d1:
                    dd:00:a6:f9:64:e8:be:83:ae:09:b0:a5:82:0a:46:
                    5d:d7:45:b1:5a:54:52:04:63:4a:fa:de:be:ea:e9:
                    76:c2:e2:e7:45:5e:61:9a:8b:e1:c4:f3:b7:0e:99:
                    c3:01:02:e5:6d:aa:97:fa:47:a1:01:b9:fe:25:e2:
                    01:36:50:40:cb:b5:df:8d:33:ef:19:f3:8a:c0:b8:
                    b6:dd:f0:80:96:e6:65:86:0a:57:0a:2a:2e:0a:7e:
                    c2:07:c2:54:03:74:81:14:7f:96:ed:40:52:36:f1:
                    f8:7b:2a:f9:a2:7e:06:64:db:db:ec:b4:a9:2b:a2:
                    d2:0c:88:51:de:99:45:d6:17:1f:5c:09:5b:9c:16:
                    fb:d1:b8:5d:6d:b3:b4:70:23:72:7c:73:16:32:26:
                    93:71:96:56:0d:0f:ff:36:6a:bb:45:1c:72:c6:e5:
                    eb:07:fd:5e:8e:d1:21:5c:f2:47:03:d5:64:a0:49:
                    68:61:d9:20:30:2b:d9:70:59:02:04:41:75:a8:50:
                    76:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:75:51:1C:7E:AB:75:BF:34:80:14:A5:91:16:B1:40:C0:48:51:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/c061cd57-fe01-36dd-8676-2a34049427d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl

            X509v3 Authority Key Identifier:
                keyid:87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.250.80.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:89:b6:18:34:17:b5:54:b6:66:9c:61:11:82:12:d9:f3:9f:
         9d:a8:2c:4b:e3:ba:58:c7:16:59:d5:6d:a0:89:f1:29:80:bf:
         61:5e:96:24:f6:9a:9e:02:60:f8:fd:a2:d4:8b:c9:b1:f2:bf:
         72:f5:17:db:f4:50:67:88:01:14:6e:a5:dc:27:58:11:38:59:
         82:81:9c:07:f8:e7:94:dd:36:72:4c:29:46:ba:08:46:8e:f7:
         e9:f8:57:f4:68:40:fd:c2:a9:d4:12:f0:6c:48:65:b1:03:67:
         0f:c6:28:bf:f7:6c:04:cb:b8:e7:6a:9d:61:1d:7f:96:f7:81:
         c8:8c:78:c1:44:ca:62:06:e0:7c:66:b3:93:31:a9:e1:f5:7d:
         0a:7d:ee:0b:3c:c1:b8:18:e8:0a:af:fa:a0:85:62:68:a8:40:
         f7:8b:33:82:cf:f5:02:c0:a4:35:05:c9:cf:81:7d:b8:2f:11:
         9e:1b:12:42:7f:f1:c6:db:2e:91:aa:4e:d0:9c:c4:c4:c0:f1:
         eb:08:a8:68:be:f7:ea:22:c9:59:2c:d3:eb:ab:54:6a:4b:8f:
         bd:d0:03:86:5d:79:f5:f9:0d:e6:b9:69:44:2e:e8:2f:7c:41:
         ba:71:79:21:9d:23:f9:7a:f4:59:cd:73:41:ba:5c:40:d7:d9:
         2d:d3:fc:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:12:26 2026 by rpki-client