Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7094fef3-a44f-4e12-98ee-72cf53d9de83/36966a71-40f4-3f7e-8c29-cc0683e1cb7b.roa
File:                     36966a71-40f4-3f7e-8c29-cc0683e1cb7b.roa (raw, json)
Hash identifier:          4ULk3xZHcUVCgKmaFrz80y6eMtNFMW6WL/ZiLtVZlrY=
Subject key identifier:   40:AB:B9:E7:06:70:45:5F:C9:E8:DB:ED:6D:04:AA:79:1A:E2:2E:D0
Certificate issuer:       /CN=7094fef3-a44f-4e12-98ee-72cf53d9de83
Certificate serial:       010D0C9F4328584CCE720D942C2772ADAA887220
Authority key identifier: 3F:12:DC:25:73:1D:7D:0E:FD:5B:88:B0:07:F2:DE:87:12:16:CC:9B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7094fef3-a44f-4e12-98ee-72cf53d9de83.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7094fef3-a44f-4e12-98ee-72cf53d9de83/36966a71-40f4-3f7e-8c29-cc0683e1cb7b.roa
Signing time:             Mon 09 Feb 2026 14:00:39 +0000
ROA not before:           Mon 09 Feb 2026 14:00:39 +0000
ROA not after:            Sun 10 May 2026 13:00:39 +0000
asID:                     210
IP address blocks:        134.250.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7094fef3-a44f-4e12-98ee-72cf53d9de83/7094fef3-a44f-4e12-98ee-72cf53d9de83.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7094fef3-a44f-4e12-98ee-72cf53d9de83/7094fef3-a44f-4e12-98ee-72cf53d9de83.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7094fef3-a44f-4e12-98ee-72cf53d9de83.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ce:72:0d:94:2c:27:72:ad:aa:88:72:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7094fef3-a44f-4e12-98ee-72cf53d9de83
        Validity
            Not Before: Feb  9 14:00:39 2026 GMT
            Not After : May 10 13:00:39 2026 GMT
        Subject: CN=c8d0e279-c1d4-43af-a530-aa29df69c5f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:1d:a3:20:bb:f0:c2:ff:73:de:89:71:75:d3:
                    c7:1e:1c:5f:8e:48:a0:0e:39:7b:72:5d:9d:0a:ce:
                    32:3b:0a:51:5b:21:3c:24:01:ab:7c:05:fa:ff:b7:
                    85:57:02:b3:74:a4:b0:a8:47:63:6f:e8:d8:7c:75:
                    d8:9c:f6:7b:90:b2:1d:c1:b3:c2:55:01:8c:2d:03:
                    fb:e1:13:a9:5f:2c:45:a0:cf:3e:3d:51:fb:ed:20:
                    9f:f7:33:d9:9f:da:d4:df:e3:04:95:da:c2:7b:e8:
                    ae:c8:1b:dd:68:08:dc:f5:cb:3c:5a:30:86:ff:42:
                    be:9a:40:8a:cc:a6:28:3e:61:1e:cf:aa:df:b0:96:
                    90:49:6e:c5:f9:2f:11:47:d5:bc:34:92:88:43:c2:
                    3b:0e:21:fe:cc:7b:d2:c0:bf:fa:3a:94:12:8f:2e:
                    bb:b5:8f:39:6a:2d:2f:16:84:80:8f:11:5a:50:41:
                    6e:ac:d7:27:47:64:e5:8c:3b:ab:85:a3:fb:64:34:
                    1d:f5:14:bf:04:81:69:80:a9:7c:6e:c3:22:74:b9:
                    fa:d1:8c:94:95:8b:86:18:a4:3e:a1:a0:27:8f:65:
                    d5:1f:59:5b:75:d2:bc:8a:06:e6:46:eb:5a:28:63:
                    f4:ae:d7:83:90:3b:b6:73:cf:b5:4a:11:cd:7b:79:
                    dd:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:AB:B9:E7:06:70:45:5F:C9:E8:DB:ED:6D:04:AA:79:1A:E2:2E:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7094fef3-a44f-4e12-98ee-72cf53d9de83/36966a71-40f4-3f7e-8c29-cc0683e1cb7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7094fef3-a44f-4e12-98ee-72cf53d9de83/7094fef3-a44f-4e12-98ee-72cf53d9de83.crl

            X509v3 Authority Key Identifier:
                keyid:3F:12:DC:25:73:1D:7D:0E:FD:5B:88:B0:07:F2:DE:87:12:16:CC:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7094fef3-a44f-4e12-98ee-72cf53d9de83.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.250.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:95:46:fa:f3:52:d8:a8:f9:44:44:ea:12:de:e5:b5:3e:9c:
         0e:d3:3a:57:3f:ef:ab:3e:a7:83:80:db:c7:96:bf:4c:35:5c:
         d0:95:7e:d7:f4:4f:d0:df:ef:8a:05:00:dd:1e:1d:f9:bb:a9:
         9f:c3:b9:8c:c6:8e:e6:40:f8:1a:e0:14:d4:27:3a:4e:8a:7c:
         36:7c:e8:f7:97:ff:e9:ef:af:02:10:bd:21:4d:06:e2:69:d6:
         4c:b9:72:62:e8:2d:c6:c9:39:8b:37:87:4a:83:06:69:12:fe:
         2a:49:94:3b:b3:99:26:e5:19:d4:34:c3:8f:65:59:3b:ed:e0:
         7b:c6:28:9a:f3:ff:97:a0:07:d8:b8:b8:21:e6:50:dc:46:61:
         3e:42:d8:73:87:03:c2:15:a0:d6:83:59:5a:74:12:de:e4:98:
         1b:63:a9:03:c8:a3:6b:58:b9:88:04:e8:91:8f:c5:93:c2:99:
         4c:bd:f3:94:6b:98:70:c4:27:42:b7:88:99:5c:96:03:cc:86:
         d3:6d:cd:b7:e0:3a:c7:fe:9b:44:cd:87:9b:56:64:d4:27:0a:
         38:3d:32:c8:e2:ca:bf:df:52:f2:de:ec:1f:b4:6b:c4:04:7c:
         28:44:eb:08:b3:97:76:fe:38:c4:e2:f7:03:f9:c6:e1:a6:11:
         db:ed:c0:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:13:30 2026 by rpki-client