Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1f479e13-55a1-4a5d-a002-1170a0ff5fd2/3f9b6af5-86ea-33fe-a5b6-49940b201a2e.roa
File:                     3f9b6af5-86ea-33fe-a5b6-49940b201a2e.roa (raw, json)
Hash identifier:          2BQvWHSnFBkFihm9GqX2EAy07Ra04GvFfR9eY//EEn0=
Subject key identifier:   EB:AE:5E:14:2F:8D:01:CB:B8:00:60:4A:86:F0:F7:6D:D4:F0:04:B4
Certificate issuer:       /CN=1f479e13-55a1-4a5d-a002-1170a0ff5fd2
Certificate serial:       010D0C9F4328584CC8DC97F7267674C0D8745780
Authority key identifier: A8:B5:D2:3A:B5:4F:B3:40:2F:32:2E:2C:2C:44:78:63:FA:56:58:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1f479e13-55a1-4a5d-a002-1170a0ff5fd2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1f479e13-55a1-4a5d-a002-1170a0ff5fd2/3f9b6af5-86ea-33fe-a5b6-49940b201a2e.roa
Signing time:             Sat 07 Feb 2026 14:00:41 +0000
ROA not before:           Sat 07 Feb 2026 14:00:41 +0000
ROA not after:            Fri 08 May 2026 13:00:41 +0000
asID:                     4150
IP address blocks:        199.91.248.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1f479e13-55a1-4a5d-a002-1170a0ff5fd2/1f479e13-55a1-4a5d-a002-1170a0ff5fd2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1f479e13-55a1-4a5d-a002-1170a0ff5fd2/1f479e13-55a1-4a5d-a002-1170a0ff5fd2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1f479e13-55a1-4a5d-a002-1170a0ff5fd2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c8:dc:97:f7:26:76:74:c0:d8:74:57:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f479e13-55a1-4a5d-a002-1170a0ff5fd2
        Validity
            Not Before: Feb  7 14:00:41 2026 GMT
            Not After : May  8 13:00:41 2026 GMT
        Subject: CN=6a3d7c12-8793-4b31-aa9d-232c59ee28b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:23:17:2b:52:f9:d3:96:80:9f:12:df:d7:12:
                    f4:3e:c9:4e:71:f7:2c:67:b2:44:6b:df:5a:62:30:
                    85:87:e6:d8:3d:0a:df:7a:b5:d0:35:51:a4:8f:18:
                    17:38:e7:19:16:cd:bb:1f:28:09:9d:94:15:eb:48:
                    d7:62:cc:8e:ca:79:5e:a3:1e:1f:de:cd:c1:b9:0d:
                    24:ef:e6:cf:53:3e:17:69:8b:0c:e0:35:3f:7b:7f:
                    1e:ec:9c:81:12:55:78:ef:16:6f:54:77:73:d0:5f:
                    9a:23:cd:40:b4:85:8d:64:62:65:54:e7:ac:17:2d:
                    5b:7f:84:71:a2:3a:9f:e7:3c:68:f5:78:6c:22:05:
                    00:bb:c0:13:05:94:2f:33:03:4e:5f:2e:cf:91:2e:
                    f5:9e:ec:14:3e:0f:f4:a7:b6:b6:1c:df:9a:90:9b:
                    cc:34:18:8c:8a:b5:65:c0:29:82:9a:ee:85:83:e5:
                    73:fa:be:b1:cf:ab:1d:3c:25:36:94:35:35:f9:68:
                    65:f0:87:2d:58:ff:59:11:41:23:c2:2e:bd:a6:61:
                    96:fb:ce:cc:db:56:65:55:4d:5f:24:63:57:60:3b:
                    e4:6e:eb:4f:19:23:1d:6c:df:5f:b8:a6:c7:ed:9b:
                    78:60:d3:2d:7f:7f:5c:ef:23:7b:8e:9d:01:6f:82:
                    0f:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:AE:5E:14:2F:8D:01:CB:B8:00:60:4A:86:F0:F7:6D:D4:F0:04:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1f479e13-55a1-4a5d-a002-1170a0ff5fd2/3f9b6af5-86ea-33fe-a5b6-49940b201a2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1f479e13-55a1-4a5d-a002-1170a0ff5fd2/1f479e13-55a1-4a5d-a002-1170a0ff5fd2.crl

            X509v3 Authority Key Identifier:
                keyid:A8:B5:D2:3A:B5:4F:B3:40:2F:32:2E:2C:2C:44:78:63:FA:56:58:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1f479e13-55a1-4a5d-a002-1170a0ff5fd2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.91.248.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:17:8d:12:91:cc:1d:62:74:ea:ca:59:e8:47:ee:65:73:58:
         49:a2:c2:ce:0f:68:10:7a:1b:e7:f6:70:11:e8:98:ec:07:8c:
         62:40:cc:2e:60:0f:d5:1b:09:07:6f:b1:d8:3f:f4:ea:fa:62:
         c5:f1:60:37:88:7b:a3:57:50:7b:2f:35:9e:8c:5c:02:a4:50:
         d9:16:7c:05:ab:c6:f8:62:d2:3d:8e:4d:0b:32:9a:28:cb:7c:
         f0:da:6b:77:db:86:a3:af:06:da:45:58:2d:7b:7c:a1:be:b1:
         4d:a7:e3:15:04:52:c8:5a:4f:11:d3:20:0e:a1:cc:c0:f6:e2:
         00:3d:6d:7b:1e:4d:4e:e9:de:11:f5:48:db:7c:33:03:56:c5:
         59:ae:7f:6c:fb:3e:c3:1a:8d:6a:d1:6a:c9:00:27:9c:19:b6:
         fb:16:33:9d:0b:ca:82:1b:1e:4d:3e:c0:71:ab:b5:35:3d:9c:
         dc:3b:9d:2e:8b:36:66:4d:bc:70:61:21:f8:6d:1c:0f:a1:f4:
         f4:85:76:87:b3:0c:f2:24:df:18:db:44:9b:da:f4:86:53:1e:
         c3:46:bc:12:94:3a:7c:ac:f5:cf:c9:a1:92:7b:5f:9f:65:c9:
         52:9f:e4:77:ac:ea:9a:33:b1:89:dc:c2:d4:58:1a:fe:8f:af:
         2b:1a:64:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:15:32 2026 by rpki-client