Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cdd5c578-2612-4b1a-8c4a-c12bc7c3a1e3/e8528204-a3c2-3176-ac99-05dfd193aaa1.roa
File:                     e8528204-a3c2-3176-ac99-05dfd193aaa1.roa (raw, json)
Hash identifier:          iWWu0a/x0v+Ps+cpDiuDB4rVWOpCUOq5fvuypzrwYtA=
Subject key identifier:   4F:40:3E:75:FF:8F:6B:1A:40:21:F2:E6:63:0C:4B:66:2C:4D:25:D1
Certificate issuer:       /CN=cdd5c578-2612-4b1a-8c4a-c12bc7c3a1e3
Certificate serial:       010D0C9F4328584CC6121D34C49E5629A30B3D00
Authority key identifier: 85:EC:6D:C5:EB:8F:FD:22:C3:A2:35:E4:1A:A6:19:F2:0B:6F:3D:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cdd5c578-2612-4b1a-8c4a-c12bc7c3a1e3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cdd5c578-2612-4b1a-8c4a-c12bc7c3a1e3/e8528204-a3c2-3176-ac99-05dfd193aaa1.roa
Signing time:             Fri 06 Feb 2026 14:00:40 +0000
ROA not before:           Fri 06 Feb 2026 14:00:40 +0000
ROA not after:            Thu 07 May 2026 13:00:40 +0000
asID:                     14618
IP address blocks:        207.241.144.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cdd5c578-2612-4b1a-8c4a-c12bc7c3a1e3/cdd5c578-2612-4b1a-8c4a-c12bc7c3a1e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cdd5c578-2612-4b1a-8c4a-c12bc7c3a1e3/cdd5c578-2612-4b1a-8c4a-c12bc7c3a1e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cdd5c578-2612-4b1a-8c4a-c12bc7c3a1e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c6:12:1d:34:c4:9e:56:29:a3:0b:3d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cdd5c578-2612-4b1a-8c4a-c12bc7c3a1e3
        Validity
            Not Before: Feb  6 14:00:40 2026 GMT
            Not After : May  7 13:00:40 2026 GMT
        Subject: CN=1c5201dd-a438-4451-a03b-38d5dd98ee57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:b7:27:e8:b3:2e:1e:55:1e:f2:e4:59:bb:8b:
                    b6:79:8e:53:fb:bf:09:8c:c4:94:1d:6c:26:e2:43:
                    53:83:35:3e:54:4f:09:8b:30:62:9f:e7:75:28:e9:
                    31:72:ed:91:6b:a2:76:ce:9f:84:e8:db:d5:7d:0d:
                    59:3a:06:b4:87:82:2e:b9:b3:94:7f:76:7d:7f:17:
                    31:41:b6:3b:e6:d7:b7:8c:03:5e:ec:56:4b:0a:62:
                    13:fb:18:c0:ae:c7:df:dd:65:10:19:6c:62:45:6f:
                    c4:e9:95:85:04:7c:b8:8e:6d:a7:e5:05:3b:3b:9c:
                    af:f2:b2:8d:58:41:16:e8:60:5e:c1:de:af:be:a3:
                    5e:57:a1:93:20:3d:93:16:11:34:5c:8d:92:6d:71:
                    18:34:00:ab:2c:06:e2:f2:19:29:38:1d:ea:ce:b8:
                    15:fd:be:9b:f5:13:f5:54:03:b2:07:14:3a:da:83:
                    16:0c:01:e4:d6:ee:b5:14:49:55:bb:0b:50:6e:14:
                    86:1e:bb:aa:fa:a9:d9:0d:b5:16:e1:e7:30:2e:35:
                    a1:b4:83:35:4b:af:c1:ef:7f:ff:82:90:57:34:4b:
                    8a:3c:e9:a6:91:95:2d:3b:6b:6a:f2:cf:d2:09:ec:
                    c3:5d:e6:c2:5b:d7:32:13:67:35:51:94:18:e0:1c:
                    3d:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:40:3E:75:FF:8F:6B:1A:40:21:F2:E6:63:0C:4B:66:2C:4D:25:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cdd5c578-2612-4b1a-8c4a-c12bc7c3a1e3/e8528204-a3c2-3176-ac99-05dfd193aaa1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cdd5c578-2612-4b1a-8c4a-c12bc7c3a1e3/cdd5c578-2612-4b1a-8c4a-c12bc7c3a1e3.crl

            X509v3 Authority Key Identifier:
                keyid:85:EC:6D:C5:EB:8F:FD:22:C3:A2:35:E4:1A:A6:19:F2:0B:6F:3D:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cdd5c578-2612-4b1a-8c4a-c12bc7c3a1e3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.241.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:4d:ae:80:f5:42:b2:ee:2e:37:3c:e6:3c:74:17:34:3d:b5:
         29:d8:cf:42:4c:f1:51:9d:4d:af:9e:d8:e4:2b:4a:aa:c7:18:
         b4:41:70:c8:21:24:3b:1f:9c:70:1b:d6:7d:24:4b:74:13:28:
         4a:6d:b7:08:e5:c7:92:1f:2a:96:d2:7b:86:1b:04:7c:5f:d0:
         6e:27:84:eb:f5:20:f7:e4:63:32:80:dc:d1:43:ba:87:c8:ac:
         34:78:c0:15:5e:81:2e:35:c7:62:40:1a:47:e0:fa:a2:af:8f:
         88:7b:92:0e:28:f3:5c:8c:21:24:6b:65:99:ba:fe:1b:12:91:
         ce:aa:87:7c:f7:3e:17:6b:93:44:a0:28:2a:7f:0a:fb:bd:f7:
         d3:53:bb:05:da:42:f0:fe:7d:29:de:be:26:81:07:54:2a:ac:
         e2:ed:dc:dc:7e:99:77:ac:5b:5e:b8:4f:17:38:ac:ae:fa:60:
         27:4c:e8:67:12:81:95:fa:32:48:df:aa:a7:b5:a1:e8:69:8a:
         90:da:ef:f5:66:31:f7:91:e0:9a:b8:9f:cc:a2:29:9e:ad:f2:
         91:26:50:f9:09:02:c4:35:27:fd:f4:9a:c5:70:2c:1a:e2:c0:
         a9:20:0e:77:20:df:97:60:64:0f:de:d9:0f:fc:18:cf:96:15:
         a1:1d:84:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:51:08 2026 by rpki-client