Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/3af862da-851f-39d9-9db1-d644ee402747.roa
File:                     3af862da-851f-39d9-9db1-d644ee402747.roa (raw, json)
Hash identifier:          MZiGEOk9rFcUHJlL/K/uY37+uqTFp4ok8FjQbNOXB+A=
Subject key identifier:   75:25:4E:8F:7E:65:D0:83:F0:39:E6:F5:46:0E:71:D7:55:CC:31:72
Certificate issuer:       /CN=b1c4f92f-6633-448e-bb44-903f429ea22f
Certificate serial:       010D0C9F4328584CEA5CCA489FC520C113B93E00
Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/3af862da-851f-39d9-9db1-d644ee402747.roa
Signing time:             Thu 19 Feb 2026 14:00:40 +0000
ROA not before:           Thu 19 Feb 2026 14:00:40 +0000
ROA not after:            Wed 20 May 2026 13:00:40 +0000
asID:                     20001
IP address blocks:        198.1.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ea:5c:ca:48:9f:c5:20:c1:13:b9:3e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f
        Validity
            Not Before: Feb 19 14:00:40 2026 GMT
            Not After : May 20 13:00:40 2026 GMT
        Subject: CN=4ab20c40-dffb-4372-8b1a-a77513eefb27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:1a:d1:45:52:ae:ee:14:28:f8:39:21:15:10:
                    2d:b4:d1:94:50:15:c5:c5:9a:98:8f:30:9a:45:b1:
                    78:c8:06:1a:31:a1:dc:d5:ff:ee:27:19:c0:94:1f:
                    ce:7f:da:76:bd:94:e1:a4:22:1d:ca:cc:3d:51:e0:
                    62:66:ca:9f:7c:f1:68:39:68:90:46:f7:11:9a:a9:
                    bd:72:6c:3c:9c:a5:80:33:e7:40:74:22:2d:ba:05:
                    0e:bc:d7:64:89:dc:d1:15:b7:ef:ea:32:27:ec:f3:
                    be:cb:32:4d:38:62:c0:40:56:e6:d4:4a:35:cf:52:
                    88:ee:82:93:fe:90:ce:7a:33:a2:82:fb:45:02:53:
                    53:da:8a:de:ad:30:13:71:0b:d9:f0:e8:bc:fe:fa:
                    8f:72:2f:6e:fc:7a:a1:50:3e:65:c4:1a:d0:33:be:
                    8d:c8:ff:60:fb:a8:98:d3:b8:50:4f:0c:41:d6:55:
                    33:1d:9e:78:9d:b5:03:35:67:96:4a:68:63:f6:69:
                    50:64:33:7e:b8:97:e8:8f:a0:60:8a:78:d6:bb:36:
                    0a:c6:8c:33:30:08:9b:4c:9a:76:c1:8d:d7:c1:bf:
                    7f:89:a9:e2:79:df:95:1d:7a:89:f0:9b:18:5a:8c:
                    e3:ef:0e:30:be:68:0f:e6:7b:df:41:08:9d:46:0b:
                    ff:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:25:4E:8F:7E:65:D0:83:F0:39:E6:F5:46:0E:71:D7:55:CC:31:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/3af862da-851f-39d9-9db1-d644ee402747.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl

            X509v3 Authority Key Identifier:
                keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.1.220.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:44:8a:28:92:1b:92:ae:8e:48:0a:06:cf:04:56:2d:30:56:
         f3:25:6b:30:9d:4d:84:ff:ce:b9:69:f6:23:d0:b8:d2:80:97:
         31:df:e2:cf:61:08:c4:df:94:6e:ac:37:5f:9d:6d:a6:ee:ad:
         76:fc:14:9e:45:18:f0:a2:78:f4:2f:d4:63:24:04:d3:9f:b2:
         7c:27:06:68:ae:c4:bd:44:22:2d:f3:07:13:4a:81:44:66:3d:
         c8:50:9f:b2:65:54:0d:8a:54:af:b3:a2:74:54:e4:a5:f9:8b:
         9c:4a:08:b5:96:7a:a4:42:17:fb:9d:ac:c6:07:08:4d:e2:71:
         87:86:3b:5f:3d:68:32:8e:d1:14:20:6c:ba:45:19:85:eb:48:
         9d:ec:c1:54:e6:c5:20:0d:ed:df:5e:83:4a:e4:da:38:60:00:
         c8:02:0c:d0:d4:1b:d0:9d:d7:a3:3f:97:35:65:66:a1:b7:64:
         66:6f:89:22:04:ca:b3:b0:f9:f6:cb:93:24:80:00:72:a0:c9:
         2e:1a:ca:35:b5:11:87:bc:58:eb:61:8b:9a:32:e9:57:e3:7d:
         ca:28:9a:92:54:fe:c6:a4:cc:0d:34:15:9a:d8:75:ee:6c:bb:
         c4:ad:f8:55:7e:41:46:39:48:fc:9c:1f:91:14:61:ff:ec:f3:
         9f:78:3e:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:37:33 2026 by rpki-client