Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/cc1c214d-cb35-33c3-8005-7ba2117e619b.roa
File:                     cc1c214d-cb35-33c3-8005-7ba2117e619b.roa (raw, json)
Hash identifier:          ePtW06d9rUKckN5yz7n5jV5Uz4v8CMP2w7KjBNocinI=
Subject key identifier:   13:7A:DC:39:0B:88:C5:3F:42:65:73:19:7F:23:3C:33:99:8E:7A:A1
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584CB981BFC2AA5677F97CA145E0
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/cc1c214d-cb35-33c3-8005-7ba2117e619b.roa
Signing time:             Mon 02 Feb 2026 02:00:32 +0000
ROA not before:           Mon 02 Feb 2026 02:00:32 +0000
ROA not after:            Sun 03 May 2026 01:00:32 +0000
asID:                     62904
IP address blocks:        170.130.92.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b9:81:bf:c2:aa:56:77:f9:7c:a1:45:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Feb  2 02:00:32 2026 GMT
            Not After : May  3 01:00:32 2026 GMT
        Subject: CN=e1e77a46-c212-472f-bed6-77821996b111
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:72:27:8d:f3:57:cd:c9:e7:79:21:76:af:d7:
                    fb:21:78:35:2a:53:d2:2b:88:e6:6a:c7:c6:ed:d8:
                    43:0f:67:b2:77:56:19:e4:e0:21:fb:e6:72:21:0f:
                    6d:da:68:33:a9:45:2c:2b:7a:58:19:da:86:ff:67:
                    1c:c3:a2:45:54:9d:28:67:6d:37:75:0e:4e:6f:71:
                    5a:df:9e:8f:e1:97:84:7a:41:ae:54:07:b6:95:94:
                    5c:ea:ee:8e:68:90:da:d2:8a:6d:5b:fe:7b:f9:64:
                    b8:ce:47:5f:82:78:ee:4d:02:9c:0e:81:15:46:78:
                    d9:bb:6c:5a:80:7a:b2:e8:4d:5d:b5:84:83:d4:fd:
                    c3:22:92:79:95:b7:18:36:7f:6c:b9:94:14:d8:68:
                    f9:7f:07:b3:fc:27:4f:4a:8a:da:1a:4f:02:6c:1b:
                    f8:41:df:d2:c1:cb:53:f6:0a:02:67:ee:71:fd:3e:
                    d5:08:ec:62:5c:8f:10:43:c3:66:75:c8:29:96:c7:
                    09:54:fb:14:88:22:10:6d:ae:23:1f:1f:ed:cb:9a:
                    f1:91:1d:f5:c8:ed:a9:72:e2:1d:60:7c:c7:95:c0:
                    b7:65:2c:f4:cc:7f:d1:48:9d:10:1d:d5:55:84:73:
                    23:43:0b:e0:7c:a0:84:fa:c1:24:80:59:0a:e7:65:
                    08:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:7A:DC:39:0B:88:C5:3F:42:65:73:19:7F:23:3C:33:99:8E:7A:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/cc1c214d-cb35-33c3-8005-7ba2117e619b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.130.92.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:65:b0:68:e4:56:fb:f9:61:6f:b8:c0:f1:8c:d2:e2:87:9e:
         f3:34:4f:2b:a9:54:94:48:49:ac:76:63:b5:93:1f:00:81:f9:
         fb:19:c6:46:27:c4:3a:45:cc:e7:15:fb:1e:a4:64:a7:6d:e7:
         05:c3:27:86:41:59:da:a3:51:ba:26:89:2c:1f:2f:78:f1:70:
         38:4a:19:47:e7:9d:2c:34:87:55:b2:87:6f:65:55:89:c7:16:
         85:c7:12:d2:94:50:8b:01:f8:14:a1:e8:19:08:c2:31:38:98:
         d3:cf:1b:9c:8c:19:34:18:c9:05:51:b6:41:83:77:3b:85:58:
         bb:3f:11:33:dd:9b:d6:ba:d5:17:ad:6e:52:6f:c0:38:14:9a:
         91:35:78:57:7c:67:f1:28:75:45:44:ac:b8:80:ba:20:f9:57:
         c0:c6:cf:e4:58:9f:2e:52:9c:78:7e:2c:5b:d6:1b:a0:4a:40:
         33:28:db:d9:f6:c0:a2:d0:14:bc:ff:65:7e:6a:a7:67:34:d5:
         1a:e6:bf:07:76:a8:7b:cd:d7:9a:9e:3f:6d:0f:60:29:f9:49:
         43:87:fc:4d:fb:13:b6:3c:fc:1c:2f:9c:36:68:04:2c:4b:c9:
         58:ac:b8:c0:22:d9:2f:a8:c8:f5:21:8b:f7:b0:50:c2:17:09:
         df:24:ca:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:10:23 2026 by rpki-client