Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/f851c4bc-a18d-3492-9e35-2d61175cac7b.roa
File:                     f851c4bc-a18d-3492-9e35-2d61175cac7b.roa (raw, json)
Hash identifier:          gP9B4CIUhqBPPa4kHN7036wiUq0L4e4rG5u/F3PcYbM=
Subject key identifier:   67:8B:E6:1F:97:C0:F7:22:E9:2C:14:56:FC:6A:53:4D:79:78:AB:BB
Certificate issuer:       /CN=b0c43b75-106f-49e7-bf3a-4aeb94566e90
Certificate serial:       010D0C9F4328584D00B26C58AB7E3C5CA45F8580
Authority key identifier: BB:44:94:5F:01:72:4D:EE:B9:22:B8:EA:D0:2E:A2:07:6E:4E:23:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/f851c4bc-a18d-3492-9e35-2d61175cac7b.roa
Signing time:             Fri 27 Feb 2026 14:00:40 +0000
ROA not before:           Fri 27 Feb 2026 14:00:40 +0000
ROA not after:            Thu 28 May 2026 13:00:40 +0000
asID:                     29909
IP address blocks:        216.157.152.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/b0c43b75-106f-49e7-bf3a-4aeb94566e90.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/b0c43b75-106f-49e7-bf3a-4aeb94566e90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:00:b2:6c:58:ab:7e:3c:5c:a4:5f:85:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0c43b75-106f-49e7-bf3a-4aeb94566e90
        Validity
            Not Before: Feb 27 14:00:40 2026 GMT
            Not After : May 28 13:00:40 2026 GMT
        Subject: CN=619d7908-d791-4f53-9b51-51787bcec243
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ec:aa:85:b4:42:f0:d5:83:24:a6:a4:bb:03:
                    d3:9d:e9:43:d0:c5:0f:5a:3e:59:1a:17:b7:40:3e:
                    0a:75:c3:30:57:0a:b6:e0:9f:33:85:8e:8a:4d:57:
                    ff:b7:49:d9:48:8c:c6:e5:eb:d5:b9:2b:56:1b:17:
                    ff:20:e4:17:20:81:5e:ea:68:54:d6:61:5f:fe:d0:
                    82:4f:b4:86:65:a6:6b:fd:c6:1a:9b:2d:68:e2:da:
                    f6:65:ba:44:90:e9:10:2c:f7:e6:16:46:14:27:ed:
                    20:08:9d:40:e7:5c:fd:a0:b7:6b:6c:4c:c5:f1:64:
                    51:52:b4:21:cd:12:70:1b:f5:53:8b:31:bd:03:b6:
                    71:e2:64:19:57:4f:b7:d4:ad:3e:de:27:37:9b:63:
                    c2:5f:cb:59:03:69:0f:f6:9f:d2:ff:88:ff:5d:72:
                    ee:0b:73:c0:ba:5a:8a:8c:32:22:24:08:24:b5:fe:
                    b4:a1:21:4e:46:93:88:ee:33:07:63:d5:2d:d5:d0:
                    5a:84:0b:89:95:51:5e:5d:55:be:3a:34:a6:bb:4b:
                    5e:f3:3a:17:48:58:d1:c2:62:8f:cd:04:70:3d:89:
                    aa:dd:44:45:b1:54:e0:9b:38:db:e1:73:23:b7:46:
                    cd:2b:ae:92:a6:95:66:fc:21:96:b4:e0:bd:58:61:
                    59:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:8B:E6:1F:97:C0:F7:22:E9:2C:14:56:FC:6A:53:4D:79:78:AB:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/f851c4bc-a18d-3492-9e35-2d61175cac7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/b0c43b75-106f-49e7-bf3a-4aeb94566e90.crl

            X509v3 Authority Key Identifier:
                keyid:BB:44:94:5F:01:72:4D:EE:B9:22:B8:EA:D0:2E:A2:07:6E:4E:23:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.157.152.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:a0:03:ac:f4:25:e9:1b:11:59:7f:c8:96:e1:90:77:e6:c2:
         d3:56:52:c8:18:dc:ac:58:f8:35:98:a6:0a:67:22:c6:62:54:
         df:a5:3a:d3:6d:6b:94:13:f5:a0:12:f1:3e:6f:d1:e4:a2:fc:
         08:6d:22:3c:00:5d:8d:8f:5e:2e:d0:d9:54:09:97:b2:bc:f8:
         8c:e9:68:3a:b7:91:69:cb:ec:65:9c:c8:58:10:38:68:a8:a7:
         0c:5f:fb:9b:39:b7:bd:40:eb:3c:90:91:f8:f3:40:d6:7d:0a:
         25:96:55:1b:1c:78:df:62:6f:5f:7c:1c:22:ef:5f:b6:55:53:
         ae:9a:a8:ad:2c:28:8a:49:00:6c:3a:f4:ca:0d:cb:29:db:12:
         32:29:20:11:d0:3a:11:a4:41:5a:96:06:fe:e9:8f:3d:f3:38:
         02:8b:28:d3:36:09:40:77:28:0f:50:ad:df:d0:25:90:5e:47:
         42:b5:51:72:7c:12:b0:62:a7:23:02:31:c2:10:f1:d3:db:1a:
         76:f9:2e:01:bb:b8:b8:4f:32:8a:de:92:e4:46:57:02:f0:d0:
         54:80:21:92:0b:e5:d5:4c:51:07:33:1c:eb:6a:8e:50:07:3c:
         8a:25:5b:32:0b:a6:03:20:d4:99:5d:90:a4:b4:80:a3:17:95:
         b7:2a:81:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:38:05 2026 by rpki-client