Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/be04d40d-2f3d-3e09-8694-dd22a7f18446.roa
File:                     be04d40d-2f3d-3e09-8694-dd22a7f18446.roa (raw, json)
Hash identifier:          vfVh96p0caCwFsbJp1WUoJZMbfUCUJVE80KPsyIYzqw=
Subject key identifier:   BC:A2:FC:42:E2:C8:71:FC:6F:ED:F9:0F:16:CF:70:1C:56:00:FE:63
Certificate issuer:       /CN=f3281a82-6c17-4658-80f7-ee1327b4779a
Certificate serial:       010D0C9F4328584CC8DC933ECD21DD8660431540
Authority key identifier: 9C:00:C9:04:FC:22:91:1C:43:F4:C7:03:B8:E3:17:BE:F5:6B:D5:88
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/be04d40d-2f3d-3e09-8694-dd22a7f18446.roa
Signing time:             Sat 07 Feb 2026 14:00:41 +0000
ROA not before:           Sat 07 Feb 2026 14:00:41 +0000
ROA not after:            Fri 08 May 2026 13:00:41 +0000
asID:                     395383
IP address blocks:        192.157.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/f3281a82-6c17-4658-80f7-ee1327b4779a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/f3281a82-6c17-4658-80f7-ee1327b4779a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c8:dc:93:3e:cd:21:dd:86:60:43:15:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3281a82-6c17-4658-80f7-ee1327b4779a
        Validity
            Not Before: Feb  7 14:00:41 2026 GMT
            Not After : May  8 13:00:41 2026 GMT
        Subject: CN=fe1cdb8b-5207-41c8-8e95-a211a708ffb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:5f:a6:f0:80:73:c9:9d:fc:c0:bb:5f:00:ee:
                    20:39:f9:39:65:cd:7c:85:85:2a:97:5d:d2:b5:0f:
                    97:4c:8c:91:82:85:0f:09:ca:ae:de:f1:03:b6:dd:
                    da:b9:4b:c8:88:9a:a0:32:50:ee:00:21:21:da:12:
                    7f:24:87:69:7a:59:da:c3:bf:77:c6:70:1e:ad:f7:
                    e6:fe:e4:b6:98:cb:d0:62:48:05:a7:1b:fb:0b:fb:
                    9e:76:37:a8:53:5e:9a:1a:27:05:53:79:ca:c9:db:
                    f3:c8:bc:ba:75:a1:62:cc:36:42:ee:02:6b:24:55:
                    db:3f:61:ca:fd:00:bb:88:14:c2:58:d0:7f:5e:11:
                    ca:27:50:d9:55:7b:57:25:87:d7:69:0d:f6:f4:9f:
                    25:bc:2d:78:bf:36:2c:7b:63:67:7f:c6:ec:dc:16:
                    86:21:f6:49:eb:25:66:34:5c:ae:87:ab:65:25:e1:
                    0e:89:f2:77:5b:b3:5f:05:60:26:ec:01:e8:28:54:
                    13:e9:95:85:65:98:fa:a2:4d:ab:78:ff:3e:f1:57:
                    58:cb:d1:b2:f1:b3:d9:0d:9c:89:b3:b2:1e:b9:19:
                    06:4e:67:30:b5:f0:4d:72:b2:2c:03:05:1d:03:da:
                    f9:70:06:28:eb:ec:72:2a:47:e2:f7:71:6f:87:a2:
                    d5:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:A2:FC:42:E2:C8:71:FC:6F:ED:F9:0F:16:CF:70:1C:56:00:FE:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/be04d40d-2f3d-3e09-8694-dd22a7f18446.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/f3281a82-6c17-4658-80f7-ee1327b4779a.crl

            X509v3 Authority Key Identifier:
                keyid:9C:00:C9:04:FC:22:91:1C:43:F4:C7:03:B8:E3:17:BE:F5:6B:D5:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.157.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:d4:c5:64:05:1d:bc:4a:5f:07:52:f8:00:67:87:c6:9f:83:
         de:40:95:13:a5:2f:74:aa:ae:7b:e0:4d:f7:b0:69:77:0e:af:
         3f:19:fe:ae:29:c7:30:3b:37:53:a4:b2:56:35:aa:06:b2:70:
         fd:a8:82:c2:64:09:27:f2:c7:d3:fd:84:71:79:73:70:0b:cf:
         49:eb:3f:51:69:4e:e9:67:7f:65:6f:f1:b5:e1:a1:b6:bf:20:
         23:1d:3a:21:68:0d:4c:94:e8:e7:a1:b2:64:69:c6:92:c2:3c:
         1a:2f:ee:65:1c:f7:ec:1f:9b:bf:99:9b:44:8b:2c:a0:31:bb:
         11:03:1a:52:bf:e3:ba:7e:73:2e:22:6d:b7:51:89:d1:b5:42:
         b5:af:ee:18:d5:6b:c7:b4:d6:a2:85:9a:65:ab:09:c8:d4:82:
         e4:c1:8e:77:4a:1b:33:e0:76:93:64:1b:48:16:36:2f:88:31:
         03:6e:fe:32:7c:92:5f:6b:31:34:53:56:af:22:62:40:61:fa:
         fe:45:67:7d:5c:a1:3a:4b:6e:2c:c2:80:32:a4:84:15:e7:a3:
         a8:85:b7:cf:37:94:4c:d6:7e:0c:59:84:bd:cf:dd:67:27:d2:
         4c:27:97:f4:01:ed:57:43:e9:39:88:b2:8f:f5:11:21:ae:18:
         a1:60:12:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:13:50 2026 by rpki-client