Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/56181a31-4036-3554-8d18-54cf1d62b78a.roa
File:                     56181a31-4036-3554-8d18-54cf1d62b78a.roa (raw, json)
Hash identifier:          kFAJQP67wIf4e6m8fKH9PswMwHEgnpv4L3LjNFYPYrU=
Subject key identifier:   4C:9C:9D:DE:45:A3:3A:3D:CE:59:8E:1C:FE:1C:67:1D:28:C3:4D:88
Certificate issuer:       /CN=5f1a24bc-718c-4500-ad0b-a29f8b85d774
Certificate serial:       010D0C9F4328584CE8F765A74B5EA352B48578C0
Authority key identifier: 7B:B1:48:2E:6D:78:D7:CB:6A:51:DC:75:C7:EE:CF:C3:29:3A:B3:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/56181a31-4036-3554-8d18-54cf1d62b78a.roa
Signing time:             Thu 19 Feb 2026 02:00:32 +0000
ROA not before:           Thu 19 Feb 2026 02:00:32 +0000
ROA not after:            Wed 20 May 2026 01:00:32 +0000
asID:                     46435
IP address blocks:        129.101.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/5f1a24bc-718c-4500-ad0b-a29f8b85d774.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/5f1a24bc-718c-4500-ad0b-a29f8b85d774.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e8:f7:65:a7:4b:5e:a3:52:b4:85:78:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f1a24bc-718c-4500-ad0b-a29f8b85d774
        Validity
            Not Before: Feb 19 02:00:32 2026 GMT
            Not After : May 20 01:00:32 2026 GMT
        Subject: CN=862ebfd1-4f5d-4ebe-a5ca-5a75af64ff42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:94:20:78:74:ff:79:4f:bb:7b:ef:fe:06:1f:
                    17:ba:fd:21:0a:0e:19:c4:0b:70:f3:00:21:9e:f7:
                    ea:fd:9a:70:2f:38:21:a0:ee:0a:c0:74:2e:d8:f0:
                    05:77:bc:bf:c1:3b:52:2f:22:cc:f8:b3:2b:a2:5a:
                    dd:0c:3e:70:e0:72:dd:c7:85:f9:21:34:6d:c6:d5:
                    e7:22:38:27:76:a5:54:86:0d:97:4e:58:28:f2:1c:
                    f0:87:ff:56:2a:5c:c3:ba:85:52:c9:c6:5b:61:35:
                    e5:a9:9b:4c:58:8c:39:f8:57:c8:3e:53:4d:db:17:
                    2e:43:f7:29:26:01:73:9e:3e:5f:05:92:c9:b5:14:
                    11:2f:73:cd:ef:49:b7:5b:a4:46:fb:40:4d:b1:87:
                    05:da:99:c6:11:18:d7:35:0f:47:ec:58:9e:21:cb:
                    d7:0f:5e:f7:05:9d:13:51:b9:f8:f9:91:94:5b:7d:
                    3c:f8:df:2c:87:67:f6:47:b5:07:1c:54:5d:65:b7:
                    e3:c2:b6:cb:00:23:f8:4e:ac:0f:8d:2e:6e:27:9c:
                    7b:43:9e:bc:82:9e:97:06:1a:86:5a:aa:58:ff:77:
                    4d:46:9f:4b:28:1c:d7:00:72:7c:23:8c:1b:fd:80:
                    b3:f5:75:77:98:a9:83:7c:42:23:9c:0c:02:d4:93:
                    e8:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:9C:9D:DE:45:A3:3A:3D:CE:59:8E:1C:FE:1C:67:1D:28:C3:4D:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/56181a31-4036-3554-8d18-54cf1d62b78a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/5f1a24bc-718c-4500-ad0b-a29f8b85d774.crl

            X509v3 Authority Key Identifier:
                keyid:7B:B1:48:2E:6D:78:D7:CB:6A:51:DC:75:C7:EE:CF:C3:29:3A:B3:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.101.249.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:41:fc:9a:7b:0f:4e:ea:af:fb:fd:e9:47:32:c7:1b:57:d8:
         c4:1f:8b:23:7a:20:4c:fd:03:ce:a5:1e:e9:ae:b8:1c:7d:8e:
         3f:31:de:b4:ab:8b:93:ed:e9:af:26:ae:a0:2b:c2:0d:ca:f8:
         d6:25:12:04:fe:ef:b4:38:49:9e:27:69:b7:3b:fa:8a:5f:34:
         bb:eb:df:d0:e6:8b:1a:b5:33:17:ff:51:5a:32:df:56:4e:27:
         c5:6c:e3:8f:e2:d2:88:26:2b:df:0a:6a:47:a6:84:f0:c5:18:
         06:ea:2b:fc:31:8b:85:f2:e1:db:e3:e6:67:8b:69:9e:1a:1d:
         95:82:72:5f:8a:0c:97:55:0e:07:e2:bf:c6:6e:40:32:e1:28:
         77:f9:30:30:2b:13:f0:b8:bd:28:8c:96:ff:38:5a:db:0a:82:
         a7:8e:f1:f0:c2:16:4a:47:60:73:aa:7a:a1:57:18:c7:a6:f4:
         10:db:29:dd:57:30:03:39:7a:9a:8c:41:31:c3:34:14:95:94:
         3b:58:39:43:2c:41:5b:2b:87:20:80:97:e7:25:f0:e0:5a:9c:
         d3:9d:16:a2:e3:dc:90:a7:78:b2:ef:4c:af:09:10:fb:f5:ac:
         16:62:7b:df:0c:53:b9:8b:a6:8d:93:fe:f1:7f:a8:63:01:95:
         60:04:b4:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:30:42 2026 by rpki-client