Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c15b8440-9734-4ec3-ad87-b3e0c47586dc/1ba95d95-6816-3ab3-a550-406badf9fc5a.roa
File:                     1ba95d95-6816-3ab3-a550-406badf9fc5a.roa (raw, json)
Hash identifier:          sKj492w8EoDVtMF6R+8FUQ+1h/RzH5+YJ761q5Szhwo=
Subject key identifier:   24:BE:88:15:E0:6D:D8:36:C1:44:CD:59:35:88:9F:28:86:0A:B4:C3
Certificate issuer:       /CN=c15b8440-9734-4ec3-ad87-b3e0c47586dc
Certificate serial:       010D0C9F4328584CD99D0B85E6EA815FCEE5C900
Authority key identifier: FF:17:0B:AE:47:7C:44:66:95:8F:A1:ED:33:77:5D:AD:D2:67:8B:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c15b8440-9734-4ec3-ad87-b3e0c47586dc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c15b8440-9734-4ec3-ad87-b3e0c47586dc/1ba95d95-6816-3ab3-a550-406badf9fc5a.roa
Signing time:             Fri 13 Feb 2026 14:00:41 +0000
ROA not before:           Fri 13 Feb 2026 14:00:41 +0000
ROA not after:            Thu 14 May 2026 13:00:41 +0000
asID:                     40676
IP address blocks:        207.231.104.0/24 maxlen: 24
                          207.231.105.0/24 maxlen: 24
                          2606:cc0:11::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c15b8440-9734-4ec3-ad87-b3e0c47586dc/c15b8440-9734-4ec3-ad87-b3e0c47586dc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c15b8440-9734-4ec3-ad87-b3e0c47586dc/c15b8440-9734-4ec3-ad87-b3e0c47586dc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c15b8440-9734-4ec3-ad87-b3e0c47586dc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d9:9d:0b:85:e6:ea:81:5f:ce:e5:c9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c15b8440-9734-4ec3-ad87-b3e0c47586dc
        Validity
            Not Before: Feb 13 14:00:41 2026 GMT
            Not After : May 14 13:00:41 2026 GMT
        Subject: CN=b51a40c2-6a50-402e-860a-3b3904dddc73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:a7:6f:26:a4:b9:db:a7:ca:23:65:65:84:26:
                    ef:35:4b:8f:7d:91:83:7e:6f:80:5c:67:16:4c:52:
                    64:3c:4d:1f:7e:2b:25:58:16:72:e7:56:4d:44:51:
                    71:5f:ee:55:1f:05:69:f4:e7:de:42:82:66:24:45:
                    b3:f2:eb:54:1e:09:66:27:15:70:88:a3:d1:b1:a6:
                    f5:b2:e2:55:05:65:20:57:a8:1d:46:ca:55:24:73:
                    69:af:1b:1c:9b:6a:2e:4f:88:52:8c:1a:48:a5:67:
                    8b:04:3d:ab:fc:25:db:56:46:a4:a5:ef:d1:8c:61:
                    a9:ab:9a:1a:9e:09:9d:1c:68:e4:97:6a:8b:cc:a6:
                    65:fd:5c:3e:4a:3b:30:e7:e5:c1:87:e4:22:c9:30:
                    e0:80:8a:5b:5a:b0:93:56:d1:14:90:53:69:08:fd:
                    51:bd:69:a9:dd:23:20:d5:49:54:c2:f4:40:4b:19:
                    ad:ac:42:f0:ef:1b:4d:5b:05:03:4a:8c:49:2a:d9:
                    ed:2e:21:7e:03:5d:f8:f8:09:2c:33:fa:6e:84:97:
                    f8:87:87:4c:92:5a:f8:5c:69:06:cb:5d:46:f9:95:
                    31:60:0f:91:13:3b:4d:f2:96:71:45:6d:d6:72:a4:
                    c9:c5:57:9a:6c:97:11:a0:db:b7:7c:6a:4e:09:cc:
                    af:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:BE:88:15:E0:6D:D8:36:C1:44:CD:59:35:88:9F:28:86:0A:B4:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c15b8440-9734-4ec3-ad87-b3e0c47586dc/1ba95d95-6816-3ab3-a550-406badf9fc5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c15b8440-9734-4ec3-ad87-b3e0c47586dc/c15b8440-9734-4ec3-ad87-b3e0c47586dc.crl

            X509v3 Authority Key Identifier:
                keyid:FF:17:0B:AE:47:7C:44:66:95:8F:A1:ED:33:77:5D:AD:D2:67:8B:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c15b8440-9734-4ec3-ad87-b3e0c47586dc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.231.104.0/23
                IPv6:
                  2606:cc0:11::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:60:ba:b2:63:93:19:fc:e1:3b:33:65:33:a9:ee:01:bf:43:
         2d:af:e3:45:1e:83:b2:f1:04:dd:64:50:08:d6:ab:82:fc:37:
         d1:46:1c:e8:25:fe:19:78:32:6a:8f:23:5c:80:45:d6:4f:60:
         df:47:d5:ba:df:ce:c5:3d:ab:ce:75:b0:6f:9b:92:60:41:8a:
         7f:7c:1a:d7:31:b4:bf:ba:d5:34:f9:b7:4f:4c:de:1c:5f:44:
         f9:ad:9e:18:51:2e:cb:ba:a5:ba:3d:0e:ea:5b:ea:9c:cf:56:
         23:2c:d8:22:2f:62:67:de:a2:f0:21:cf:80:d7:3f:47:a2:de:
         d0:0b:4d:c5:18:3c:ff:3c:fe:43:a6:91:02:ca:de:17:4a:27:
         72:c0:e5:08:9a:51:41:41:ea:e1:a6:ea:af:e7:65:42:84:22:
         23:2a:24:7e:ae:69:d3:95:86:7f:5c:14:05:b6:7d:52:c0:88:
         e9:73:9f:13:c9:9c:a6:7a:fb:63:40:4b:47:ae:59:e2:cf:cc:
         71:35:1a:57:77:6d:bb:02:42:24:f3:4e:4c:c1:3a:79:f3:c5:
         21:38:73:1b:95:87:3d:e1:a3:12:7a:bb:44:ad:5b:48:37:17:
         1e:8f:c7:dd:43:cc:76:8f:70:fb:31:55:55:cf:2a:59:5d:b5:
         11:56:35:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:22:53 2026 by rpki-client