Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae6e260c-421d-48c3-b47d-d76ac074fbba/8a9eb713-161d-3028-8382-e60a2ef1c07d.roa
File:                     8a9eb713-161d-3028-8382-e60a2ef1c07d.roa (raw, json)
Hash identifier:          Qiew31WplzlKSpWAG8SdGNgL4Fx4tzxK+cynabv0suQ=
Subject key identifier:   92:B1:4C:9A:90:EE:19:46:E8:57:F0:28:A3:19:2A:CA:6D:A6:7B:4A
Certificate issuer:       /CN=ae6e260c-421d-48c3-b47d-d76ac074fbba
Certificate serial:       010D0C9F4328584CCBA755FCD3A15B46E2B436D8
Authority key identifier: 74:93:60:5C:AC:A5:72:63:1A:BA:B7:95:2E:DD:67:02:83:DE:3C:E3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae6e260c-421d-48c3-b47d-d76ac074fbba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae6e260c-421d-48c3-b47d-d76ac074fbba/8a9eb713-161d-3028-8382-e60a2ef1c07d.roa
Signing time:             Sun 08 Feb 2026 14:00:41 +0000
ROA not before:           Sun 08 Feb 2026 14:00:41 +0000
ROA not after:            Sat 09 May 2026 13:00:41 +0000
asID:                     17
IP address blocks:        205.215.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae6e260c-421d-48c3-b47d-d76ac074fbba/ae6e260c-421d-48c3-b47d-d76ac074fbba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae6e260c-421d-48c3-b47d-d76ac074fbba/ae6e260c-421d-48c3-b47d-d76ac074fbba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae6e260c-421d-48c3-b47d-d76ac074fbba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:cb:a7:55:fc:d3:a1:5b:46:e2:b4:36:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae6e260c-421d-48c3-b47d-d76ac074fbba
        Validity
            Not Before: Feb  8 14:00:41 2026 GMT
            Not After : May  9 13:00:41 2026 GMT
        Subject: CN=5d27e717-39f6-4218-8fea-c25554e9be81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:9d:c7:9c:03:73:f8:13:05:51:ef:44:a4:43:
                    aa:9e:e5:3c:7b:6a:cf:dc:d7:22:5d:47:a1:49:c8:
                    20:80:d4:a0:e6:a2:4f:7a:e3:37:ce:b8:9e:6d:61:
                    38:6b:7e:70:a1:29:81:d3:26:f0:2e:59:43:49:64:
                    f0:ef:7a:c6:57:71:33:24:4c:c9:36:93:b5:bc:22:
                    53:dd:c3:e9:7c:cb:26:70:aa:ef:0b:5f:bd:a2:cb:
                    d0:6b:69:34:05:54:3d:d9:5e:98:94:05:55:9c:e6:
                    19:50:70:2c:c6:d1:17:e6:4f:5a:9a:75:24:40:fb:
                    6d:7e:ac:05:dc:75:76:1d:41:82:25:dd:7f:b4:eb:
                    94:06:3e:0f:a3:69:60:2e:88:e0:6a:80:f5:81:3b:
                    d5:95:2a:61:88:34:4a:11:e4:db:62:48:a8:11:d1:
                    12:4b:60:7d:b0:d5:24:5b:a9:1e:7b:e4:bb:f0:a3:
                    f2:72:a8:3c:4a:8d:b7:08:08:80:85:6b:91:d7:2e:
                    7a:b9:c3:10:07:23:0d:8b:e2:1f:55:ac:fb:9c:b0:
                    c9:e6:e2:83:c1:6d:2e:5a:cf:07:72:07:b4:f7:4a:
                    60:13:57:f1:75:e9:27:03:bd:92:83:ef:ed:20:c2:
                    e2:86:eb:03:4c:91:54:87:5f:96:71:a4:81:18:f9:
                    f6:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:B1:4C:9A:90:EE:19:46:E8:57:F0:28:A3:19:2A:CA:6D:A6:7B:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae6e260c-421d-48c3-b47d-d76ac074fbba/8a9eb713-161d-3028-8382-e60a2ef1c07d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae6e260c-421d-48c3-b47d-d76ac074fbba/ae6e260c-421d-48c3-b47d-d76ac074fbba.crl

            X509v3 Authority Key Identifier:
                keyid:74:93:60:5C:AC:A5:72:63:1A:BA:B7:95:2E:DD:67:02:83:DE:3C:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae6e260c-421d-48c3-b47d-d76ac074fbba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.215.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:7c:5d:a2:87:61:b7:59:a8:22:3f:03:77:f4:2d:bc:b9:a8:
         09:fb:fa:33:da:b0:19:f1:ad:6b:d0:80:17:ef:fa:8f:dd:94:
         d6:be:41:92:c9:e0:e6:d3:5c:0b:5c:ad:c7:f8:07:83:fb:ae:
         60:83:f9:ad:96:17:6e:da:3d:16:1d:6a:61:b0:e2:6f:e5:73:
         93:18:49:3c:15:63:48:b8:35:c9:0f:b6:c2:8d:d8:18:19:2c:
         9a:85:10:c4:39:43:4c:37:dd:b3:87:55:67:cd:1c:4a:ff:df:
         a9:31:c0:88:96:77:ce:81:66:52:38:9e:49:2d:30:6f:1a:fe:
         c7:4b:3a:3a:50:08:cf:df:40:d1:94:bc:4b:3c:64:08:6c:89:
         ea:51:25:5f:fa:38:9e:e7:5c:28:2a:6e:f3:fa:ab:3e:09:eb:
         28:12:23:96:0d:a3:81:33:94:66:d9:10:1c:b1:99:fe:e7:87:
         bc:dc:b5:82:7c:8a:86:08:a0:9c:62:1f:6a:c6:f0:70:9d:00:
         3c:fe:7e:a3:9b:cd:88:40:f5:1d:ce:b9:ae:04:43:db:3c:a0:
         49:52:20:38:f8:1d:94:77:2e:1d:c8:7c:c0:f6:3b:a0:dd:e1:
         db:be:93:a4:45:13:8d:44:97:40:38:2f:07:35:ec:39:8f:0a:
         dc:15:3c:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:46:31 2026 by rpki-client