Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec/f9011729-91cf-3473-9047-72a9ca7dbc45.roa
File:                     f9011729-91cf-3473-9047-72a9ca7dbc45.roa (raw, json)
Hash identifier:          p7V8IBv8bqUg2UAD60jDDvQBneE/9ZjDKlgib4LheU8=
Subject key identifier:   AC:68:86:1A:76:5C:EE:00:46:AC:7E:EC:6A:CF:CA:A8:05:B1:C8:9C
Certificate issuer:       /CN=8ae91928-35cf-46ed-bf87-92d9bfd629ec
Certificate serial:       010D0C9F4328584CAB8C53E5D96786198A77BCF0
Authority key identifier: D9:34:11:C0:B3:C5:A4:40:65:64:01:E3:04:98:DC:8B:32:D7:97:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec/f9011729-91cf-3473-9047-72a9ca7dbc45.roa
Signing time:             Wed 28 Jan 2026 02:00:29 +0000
ROA not before:           Wed 28 Jan 2026 02:00:29 +0000
ROA not after:            Tue 28 Apr 2026 01:00:29 +0000
asID:                     6079
IP address blocks:        141.195.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec/8ae91928-35cf-46ed-bf87-92d9bfd629ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec/8ae91928-35cf-46ed-bf87-92d9bfd629ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ab:8c:53:e5:d9:67:86:19:8a:77:bc:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ae91928-35cf-46ed-bf87-92d9bfd629ec
        Validity
            Not Before: Jan 28 02:00:29 2026 GMT
            Not After : Apr 28 01:00:29 2026 GMT
        Subject: CN=1b13d2a9-0550-4402-a0af-c4eb7140943a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:f0:fd:91:6d:c0:7e:3c:f0:5e:27:34:a4:71:
                    b2:a6:7e:ff:d9:c9:0b:23:3b:30:b9:d6:34:4d:ad:
                    28:37:1e:6a:65:6e:5f:e8:eb:f9:78:02:8f:a2:ab:
                    f3:86:a0:13:57:35:eb:48:e0:d1:36:c4:39:f3:86:
                    be:a1:ec:39:60:cf:5c:28:f7:f5:a0:e7:ce:c1:16:
                    f3:4d:1c:99:5a:98:90:f8:ec:f6:10:2c:54:29:b7:
                    bf:a3:07:f3:09:d4:ca:78:bc:92:e2:d8:ba:82:0c:
                    4c:86:e5:54:ca:f4:de:2f:fa:32:ae:85:ce:1f:ad:
                    9a:0d:46:30:13:4f:e4:49:ce:47:5b:12:c4:ff:96:
                    42:f8:41:b4:44:3a:19:5c:75:3f:aa:d6:a0:8c:2e:
                    74:ea:a1:c2:19:df:e3:5f:f0:16:55:a2:b0:04:98:
                    29:6e:fe:9e:d2:7c:79:dd:f4:aa:e1:e0:1f:88:d1:
                    42:bd:bd:6b:a4:f0:f4:86:c6:af:9a:ea:88:8c:b3:
                    83:f7:d1:c3:99:de:4f:80:be:76:dd:10:6b:e0:f0:
                    e8:3f:8a:79:b6:c9:e0:68:65:c7:c5:cc:bb:30:82:
                    33:26:c1:2e:0f:0c:99:79:dc:5b:62:74:95:23:cf:
                    26:a9:21:dc:0c:8e:ca:f1:92:52:c7:61:b6:f1:92:
                    1b:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:68:86:1A:76:5C:EE:00:46:AC:7E:EC:6A:CF:CA:A8:05:B1:C8:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec/f9011729-91cf-3473-9047-72a9ca7dbc45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec/8ae91928-35cf-46ed-bf87-92d9bfd629ec.crl

            X509v3 Authority Key Identifier:
                keyid:D9:34:11:C0:B3:C5:A4:40:65:64:01:E3:04:98:DC:8B:32:D7:97:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.195.115.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:88:8a:3c:21:68:2e:ee:8d:96:d9:e9:e0:ca:3b:16:8f:f6:
         5d:62:53:a7:26:67:9c:bc:29:3b:03:f8:09:64:28:69:86:9d:
         d0:19:39:d2:10:2e:24:e2:3e:fd:a6:88:cd:0c:ba:7b:39:d8:
         90:e8:45:74:40:60:98:ba:1b:f3:28:45:2d:a2:15:19:86:ef:
         dd:84:0e:b3:dd:db:87:a9:04:59:ef:d8:ad:2c:8c:a3:0c:e8:
         68:63:9f:44:c0:28:3d:ec:bf:05:61:eb:35:86:28:0b:eb:98:
         97:0c:ee:8c:1f:b7:f9:02:df:15:73:7a:9e:40:fa:97:e3:a5:
         b2:91:77:c5:80:63:36:69:37:12:15:a2:5a:62:f8:29:22:3d:
         b5:01:d6:5f:50:aa:7f:5c:1a:1e:0a:81:b4:d5:03:8f:64:a2:
         f2:14:90:c7:bc:8f:0d:7d:db:b1:74:bb:6d:a5:86:8e:7f:b8:
         49:ee:91:8a:a8:11:6b:d9:34:41:7d:b0:1e:0b:b3:27:51:a4:
         56:4e:32:01:6b:85:a5:4e:c4:be:c2:ff:b0:f5:de:2d:c7:50:
         63:9b:f0:6f:83:7c:50:c0:80:c1:f4:53:fb:90:41:93:02:f7:
         ff:98:ee:fc:58:e0:ec:c9:a3:6f:34:13:91:8e:63:c0:b2:a0:
         52:df:9d:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:34:17 2026 by rpki-client