Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/5c1ebb2e-cbde-3adf-a724-2a821552bed2.roa
File:                     5c1ebb2e-cbde-3adf-a724-2a821552bed2.roa (raw, json)
Hash identifier:          wCCv6ovz8OvWLfJ0mcqZPRQiULnJsd5G9NtfCPkq5zs=
Subject key identifier:   20:7B:BA:AC:21:87:45:A8:AC:15:B1:20:EB:5F:5A:29:0D:94:B0:1E
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584CB981BF8CFE8E428267B0EEA8
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/5c1ebb2e-cbde-3adf-a724-2a821552bed2.roa
Signing time:             Mon 02 Feb 2026 02:00:32 +0000
ROA not before:           Mon 02 Feb 2026 02:00:32 +0000
ROA not after:            Sun 03 May 2026 01:00:32 +0000
asID:                     62904
IP address blocks:        170.130.156.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b9:81:bf:8c:fe:8e:42:82:67:b0:ee:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Feb  2 02:00:32 2026 GMT
            Not After : May  3 01:00:32 2026 GMT
        Subject: CN=d4868b46-1aa3-4f53-b97d-5d5252f9e4a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:a2:46:3c:2f:32:8f:34:88:1b:98:48:c7:b1:
                    35:2e:71:b2:26:30:c8:55:be:1c:a7:37:1c:9c:7c:
                    dc:aa:e1:fb:51:59:87:c0:4c:40:3f:76:71:4c:f3:
                    36:b2:c5:f2:a1:e0:cd:c0:8f:67:0a:01:7c:de:11:
                    1c:b3:ea:9c:52:3b:f0:b0:2b:a0:43:55:6f:96:d9:
                    aa:96:b7:7f:7a:50:04:ae:4a:71:2f:f1:48:94:3f:
                    03:29:b9:ab:2f:98:f9:48:5e:ae:60:c9:8a:4c:5e:
                    e5:7e:d6:92:b9:75:61:f7:81:65:16:56:95:60:3b:
                    f0:c2:1f:d9:9c:e8:0d:cf:4a:93:db:e3:06:2f:05:
                    e5:52:fe:b1:6b:2a:0f:f5:48:1d:21:0c:09:63:09:
                    58:db:43:8f:92:ae:f9:a6:05:b9:07:fa:e7:07:b2:
                    3e:63:56:c0:3f:3c:29:4a:69:10:e3:a9:8d:ba:af:
                    e1:93:c4:2d:e8:49:8d:61:18:26:fa:69:ef:78:2a:
                    d9:b2:4d:ba:cb:9b:d7:56:43:df:4d:18:58:b3:b7:
                    30:cb:ca:55:cf:a0:0b:1d:9f:8a:9d:83:af:2c:9e:
                    63:e6:6f:6c:fb:26:22:de:a9:9d:c8:b1:0c:44:66:
                    ed:b0:ca:cb:0b:33:3d:04:a7:f8:9d:af:bd:e2:5a:
                    7a:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:7B:BA:AC:21:87:45:A8:AC:15:B1:20:EB:5F:5A:29:0D:94:B0:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/5c1ebb2e-cbde-3adf-a724-2a821552bed2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.130.156.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:b5:3e:82:c3:af:f0:a9:f5:e1:5f:67:79:9e:ab:49:2f:dc:
         5c:36:a7:d5:78:fc:6b:79:22:40:c3:92:d0:ec:1a:d4:a4:d0:
         12:34:fb:8d:16:f2:ee:a1:ff:ed:2e:d8:cb:6b:23:ec:4c:49:
         b8:fb:08:03:55:b0:53:cf:cf:57:d7:ed:b1:17:0b:79:57:69:
         9b:d4:8e:0b:49:2d:a5:50:7f:b6:01:1a:a8:2b:18:10:51:18:
         41:3c:6b:79:f9:28:e8:9c:f7:fe:19:09:ca:09:74:ba:3d:53:
         0b:23:a1:8f:40:58:7c:5c:37:55:2e:0f:05:03:6a:8e:e0:7f:
         5b:25:10:c3:7a:e1:e3:c1:95:7a:a2:ff:4c:3d:e5:bd:59:ef:
         e8:34:d1:1e:6a:71:0a:7b:e0:e3:c8:50:81:7d:b7:d8:9a:fc:
         90:f4:4a:4d:94:10:c5:d3:16:f7:8a:6e:97:2c:b8:d4:4c:4a:
         11:fb:e6:73:b5:3c:84:05:c5:b7:b2:b4:51:22:08:1c:e0:45:
         9f:33:7e:68:09:23:d2:15:cc:ea:e7:b8:86:22:db:f5:1f:37:
         cb:0a:67:37:da:5f:9c:4e:a5:3f:f5:67:3e:75:bf:e6:87:0d:
         6a:96:d0:5f:0c:23:8b:db:a0:e1:b7:08:37:49:aa:f8:b6:35:
         7d:7b:2e:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:17:25 2026 by rpki-client