Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fb0c6bb6-abf6-474d-8547-2975efaf35e7/f2f1e06f-1f8d-37cf-8e52-a5ceaae5c728.roa
File:                     f2f1e06f-1f8d-37cf-8e52-a5ceaae5c728.roa (raw, json)
Hash identifier:          N9Agy5d6Oprm3fiSPmLZljsB2WF/ZioqiiqwyNOa1QA=
Subject key identifier:   FC:6A:5D:A5:29:E5:36:62:FF:A9:9D:6E:5B:EE:73:B0:B9:A0:0A:C8
Certificate issuer:       /CN=fb0c6bb6-abf6-474d-8547-2975efaf35e7
Certificate serial:       010D0C9F4328584CB5520F5DD41E7A774747B500
Authority key identifier: 60:50:24:B0:BD:17:09:65:AD:37:4D:D2:A1:91:1A:BB:4A:7C:63:8A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fb0c6bb6-abf6-474d-8547-2975efaf35e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fb0c6bb6-abf6-474d-8547-2975efaf35e7/f2f1e06f-1f8d-37cf-8e52-a5ceaae5c728.roa
Signing time:             Sat 31 Jan 2026 14:00:39 +0000
ROA not before:           Sat 31 Jan 2026 14:00:39 +0000
ROA not after:            Fri 01 May 2026 13:00:39 +0000
asID:                     16509
IP address blocks:        198.202.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fb0c6bb6-abf6-474d-8547-2975efaf35e7/fb0c6bb6-abf6-474d-8547-2975efaf35e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fb0c6bb6-abf6-474d-8547-2975efaf35e7/fb0c6bb6-abf6-474d-8547-2975efaf35e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fb0c6bb6-abf6-474d-8547-2975efaf35e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b5:52:0f:5d:d4:1e:7a:77:47:47:b5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb0c6bb6-abf6-474d-8547-2975efaf35e7
        Validity
            Not Before: Jan 31 14:00:39 2026 GMT
            Not After : May  1 13:00:39 2026 GMT
        Subject: CN=751eba50-3305-4519-8ad8-b02366b4dbb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:3e:4c:d0:40:1d:43:08:43:e6:0c:e4:65:55:
                    2b:55:11:4f:10:06:bc:36:72:f8:b5:4e:8c:54:75:
                    8b:e6:d8:dc:dd:9b:b1:08:66:87:02:e8:92:05:cf:
                    cb:10:5a:47:f3:e2:14:9d:58:69:7b:ef:ec:f5:f0:
                    5e:0b:ef:23:da:07:36:f8:ef:fd:31:49:77:be:83:
                    b3:2b:e0:cb:e4:7d:55:2d:fe:9f:42:ea:ce:8e:cd:
                    7b:79:d3:ca:14:82:5c:73:ae:1b:d6:4a:60:ba:4d:
                    e0:69:cb:16:95:c5:2a:6f:87:2b:8c:44:b1:0b:af:
                    69:07:53:2f:36:6d:97:70:70:4a:be:c2:cf:04:80:
                    87:0d:e2:26:70:6d:29:ed:d2:eb:58:8f:cf:9e:41:
                    0a:07:0a:ce:ef:ce:fd:73:59:9a:c8:cb:1b:2c:72:
                    73:fe:d1:f1:e5:48:ee:10:1e:0d:ce:44:91:5e:62:
                    5f:7f:a3:1e:ca:51:45:7c:7b:3a:59:bd:a0:04:fc:
                    81:29:42:d4:99:1c:a0:f2:4b:3c:c3:ae:d9:b0:3d:
                    72:ee:ff:80:ea:fc:f8:0c:23:c5:37:64:7a:53:ab:
                    11:7c:c9:55:81:60:de:31:99:ad:db:54:41:f6:65:
                    40:9c:ac:56:02:4a:21:18:29:66:93:21:82:70:9e:
                    25:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:6A:5D:A5:29:E5:36:62:FF:A9:9D:6E:5B:EE:73:B0:B9:A0:0A:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fb0c6bb6-abf6-474d-8547-2975efaf35e7/f2f1e06f-1f8d-37cf-8e52-a5ceaae5c728.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fb0c6bb6-abf6-474d-8547-2975efaf35e7/fb0c6bb6-abf6-474d-8547-2975efaf35e7.crl

            X509v3 Authority Key Identifier:
                keyid:60:50:24:B0:BD:17:09:65:AD:37:4D:D2:A1:91:1A:BB:4A:7C:63:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fb0c6bb6-abf6-474d-8547-2975efaf35e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.202.18.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:1f:20:da:3f:8d:5c:72:17:07:80:7a:83:78:20:6d:08:32:
         10:41:d0:87:52:d0:1d:3b:d8:9c:2e:a4:0f:b1:47:86:73:22:
         42:0f:85:8e:80:d0:38:70:98:d5:db:df:fb:37:17:6d:6a:3e:
         54:19:7c:32:ca:a6:ca:19:0c:54:3b:53:6f:6a:2c:92:07:ad:
         a3:62:08:e2:1a:cf:ef:2f:4e:b3:2a:e0:ee:79:42:e5:14:d6:
         b9:bc:ea:3a:69:77:bb:71:a3:49:2c:3b:21:7c:9d:5b:7c:d6:
         26:79:3c:45:d5:75:a6:fc:bd:fe:47:f2:0c:30:c2:be:6d:58:
         ee:e1:cb:fe:38:ff:83:44:6f:6c:2b:e2:c1:d7:ab:47:65:e1:
         c0:97:2b:57:b0:7e:e9:e7:f9:57:89:60:11:50:82:8f:e5:98:
         b7:40:62:96:77:0a:b0:03:8b:3b:b3:47:68:6a:d4:51:74:af:
         1c:a2:2e:b6:c1:e4:93:0f:db:f7:2c:d1:09:01:7e:07:cd:81:
         f9:f6:7c:09:e5:ba:15:8f:b9:e8:35:2a:3e:2e:df:4d:71:b1:
         09:a0:f6:bc:65:08:46:49:9a:2b:d6:8e:1e:46:e0:7f:27:94:
         57:c9:0f:91:6f:e3:e1:c3:57:a9:35:a1:b0:a5:6b:65:22:8a:
         96:3c:5b:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:08:00 2026 by rpki-client