Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/278d45cf-eab7-3a22-9d61-0e6212ee76d5.roa
File:                     278d45cf-eab7-3a22-9d61-0e6212ee76d5.roa (raw, json)
Hash identifier:          emiZTExME0LOwA1EUW2kw+A7SVieQ37dGZllaMtgj4M=
Subject key identifier:   C7:60:EC:9C:10:EE:47:62:98:80:FE:F3:E4:24:2F:2E:DC:5E:A8:38
Certificate issuer:       /CN=c43335db-c55b-443e-b20c-5c74e1c256c9
Certificate serial:       010D0C9F4328584C9ACC5BBFB1A5DB8AE2D9EC00
Authority key identifier: C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/278d45cf-eab7-3a22-9d61-0e6212ee76d5.roa
Signing time:             Thu 22 Jan 2026 02:00:31 +0000
ROA not before:           Thu 22 Jan 2026 02:00:31 +0000
ROA not after:            Wed 22 Apr 2026 01:00:31 +0000
asID:                     54535
IP address blocks:        146.197.27.0/24 maxlen: 24
                          146.197.79.0/24 maxlen: 24
                          146.197.83.0/24 maxlen: 24
                          146.197.120.0/22 maxlen: 22
                          146.197.122.0/24 maxlen: 24
                          146.197.123.0/24 maxlen: 24
                          146.197.242.0/24 maxlen: 24
                          146.197.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:9a:cc:5b:bf:b1:a5:db:8a:e2:d9:ec:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c43335db-c55b-443e-b20c-5c74e1c256c9
        Validity
            Not Before: Jan 22 02:00:31 2026 GMT
            Not After : Apr 22 01:00:31 2026 GMT
        Subject: CN=8ca08927-4e1a-47b9-8ba6-4752f30dd902
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:26:bc:2e:e1:07:c6:d0:96:cf:94:63:1e:db:
                    4a:ad:a7:7e:85:80:3a:0d:62:83:cb:2b:66:c0:b2:
                    1a:ec:40:e4:ae:96:28:45:fc:03:ff:45:ec:ee:ce:
                    c3:52:77:8a:2d:65:34:a6:18:1d:62:6a:7f:54:1a:
                    b4:c7:5a:d5:0d:48:9c:4c:bc:1d:83:2c:96:9a:c4:
                    10:c0:c8:1b:3e:e7:41:59:94:75:38:14:dd:78:47:
                    19:bc:f9:cd:f6:c7:10:e6:55:a1:18:f6:c2:bd:05:
                    ac:b7:df:82:93:26:0a:15:1a:da:de:a1:92:36:b2:
                    0e:f1:52:e9:ad:2a:83:d4:2c:d5:81:64:13:db:80:
                    d8:39:5b:19:96:8f:d3:bd:5f:fd:08:8f:dc:c8:20:
                    e3:a2:bf:15:fb:78:a8:6e:19:c6:1f:c7:1f:23:8e:
                    46:c8:92:32:e8:3a:53:76:10:15:bb:cc:9e:9d:29:
                    ac:d0:95:7b:9d:3c:e0:8c:af:b4:07:48:dd:68:e7:
                    e9:0d:56:8c:74:dc:c2:3c:21:d8:c6:72:65:65:89:
                    36:dc:3d:a6:01:60:52:61:4f:35:6d:f9:36:9d:a3:
                    09:81:a3:e4:b8:9d:fe:09:a8:18:9c:c3:c6:e8:34:
                    c3:3d:35:0f:f1:16:14:94:f2:1c:41:b5:9f:17:27:
                    ee:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:60:EC:9C:10:EE:47:62:98:80:FE:F3:E4:24:2F:2E:DC:5E:A8:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/278d45cf-eab7-3a22-9d61-0e6212ee76d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.crl

            X509v3 Authority Key Identifier:
                keyid:C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.197.27.0/24
                  146.197.79.0/24
                  146.197.83.0/24
                  146.197.120.0/22
                  146.197.242.0/24
                  146.197.246.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:76:74:c5:6f:09:ce:93:a0:38:ad:07:da:ba:64:81:13:92:
         8b:58:05:38:c4:6f:88:44:1d:53:89:2f:3d:72:67:9d:53:91:
         31:53:7d:f1:b4:1d:11:3a:3e:62:7f:07:77:b1:62:b8:cb:23:
         e8:33:b8:1d:ef:78:0e:cb:fb:05:70:ee:52:16:d3:89:77:ec:
         03:58:41:79:a2:e8:a1:3e:d3:b7:6f:c0:53:5f:39:57:e7:3e:
         df:46:30:fe:77:87:81:25:da:fa:e1:a9:29:c4:eb:4b:95:83:
         cd:63:05:a3:a1:92:b2:7c:5f:fc:16:bf:0f:c0:e3:c6:43:d2:
         ff:af:ce:c1:b4:fd:c7:eb:40:d5:1c:5d:bf:56:74:5f:9a:d8:
         4e:00:4a:c4:bd:2c:ad:71:89:6b:7e:ae:ff:91:9a:4a:ab:87:
         60:f3:2c:3a:44:86:1d:1d:5c:ca:53:29:75:81:7a:72:63:7f:
         6f:46:ed:d5:6b:70:9b:b0:3d:8c:fa:11:b5:e3:e4:97:ac:6c:
         8c:31:b7:93:8c:40:95:02:0b:ae:fe:e1:9b:00:64:92:c9:e8:
         ce:07:b4:da:ce:0e:ec:0a:46:30:1f:80:05:58:b4:4e:71:e7:
         f0:fb:86:c1:84:e8:11:aa:6f:a2:2f:88:0c:c2:ea:42:16:14:
         71:e0:44:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:24:06 2026 by rpki-client