Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/d6a9afa9-9645-3a6e-a248-d5a101df55e7.roa
File:                     d6a9afa9-9645-3a6e-a248-d5a101df55e7.roa (raw, json)
Hash identifier:          xXWNL/c6aWL7RcqGKyJXIOwNA0JPY8mh+4BZGzlWxd8=
Subject key identifier:   CC:CC:30:E8:B1:85:CB:E3:52:0D:47:0B:6D:F9:05:73:70:46:14:0E
Certificate issuer:       /CN=f3281a82-6c17-4658-80f7-ee1327b4779a
Certificate serial:       010D0C9F4328584CC8DC937EC83ACD24F1C84A00
Authority key identifier: 9C:00:C9:04:FC:22:91:1C:43:F4:C7:03:B8:E3:17:BE:F5:6B:D5:88
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/d6a9afa9-9645-3a6e-a248-d5a101df55e7.roa
Signing time:             Sat 07 Feb 2026 14:00:41 +0000
ROA not before:           Sat 07 Feb 2026 14:00:41 +0000
ROA not after:            Fri 08 May 2026 13:00:41 +0000
asID:                     395383
IP address blocks:        192.157.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/f3281a82-6c17-4658-80f7-ee1327b4779a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/f3281a82-6c17-4658-80f7-ee1327b4779a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c8:dc:93:7e:c8:3a:cd:24:f1:c8:4a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3281a82-6c17-4658-80f7-ee1327b4779a
        Validity
            Not Before: Feb  7 14:00:41 2026 GMT
            Not After : May  8 13:00:41 2026 GMT
        Subject: CN=e3246da1-3153-4ae1-a2d5-776974d1ad7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:93:0d:00:97:cb:41:08:95:14:4f:cb:e5:ef:
                    c6:99:ce:27:1d:13:b6:d0:e2:17:5a:5a:56:1f:48:
                    4b:41:e6:65:7b:40:52:63:b2:3a:fd:9c:c9:c8:df:
                    4a:26:8a:50:94:65:eb:3e:3d:73:6c:23:0d:71:8a:
                    4b:45:07:56:a1:1f:5d:8c:93:b4:5d:66:32:96:e2:
                    3e:44:8a:56:22:f0:8d:a1:df:39:46:3e:5b:62:e8:
                    6e:90:3b:36:91:11:9e:6b:98:0b:3c:2f:a7:b5:0c:
                    3d:62:33:91:17:bb:c9:5a:a8:1a:6b:72:ae:50:b9:
                    5d:d2:03:67:30:50:fb:2b:84:c9:2f:a3:aa:28:89:
                    b6:67:f8:fc:52:cc:9a:42:d0:5f:1d:4e:b1:c5:d8:
                    a8:0d:f0:3d:d8:b0:7c:c1:99:76:44:93:33:18:af:
                    87:d5:b0:70:b0:05:07:c1:7e:97:d8:1e:26:86:9e:
                    17:2e:7d:d8:65:31:f0:c3:78:a7:7c:ae:ce:01:43:
                    79:09:75:34:f4:19:fb:93:cc:56:99:db:d7:c2:15:
                    c9:94:17:18:8f:ec:86:35:b6:ce:23:ee:de:a2:25:
                    36:b1:dc:f8:e1:3e:10:6f:63:5a:6a:92:50:3f:98:
                    0b:59:1d:5a:05:4c:6d:a2:4e:1e:ca:c2:a5:53:30:
                    e3:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:CC:30:E8:B1:85:CB:E3:52:0D:47:0B:6D:F9:05:73:70:46:14:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/d6a9afa9-9645-3a6e-a248-d5a101df55e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/f3281a82-6c17-4658-80f7-ee1327b4779a.crl

            X509v3 Authority Key Identifier:
                keyid:9C:00:C9:04:FC:22:91:1C:43:F4:C7:03:B8:E3:17:BE:F5:6B:D5:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.157.81.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:0c:5f:11:ab:4e:30:7b:c0:9f:94:29:7a:9b:f3:e9:de:83:
         6b:cb:1a:a9:79:10:d7:94:72:da:6d:50:fb:ba:86:38:3e:59:
         88:d1:04:00:6a:e9:f3:d0:9b:84:49:e9:3f:05:81:8c:00:12:
         b0:08:8c:65:0b:11:7c:82:e6:07:7d:ea:8a:51:61:af:27:ff:
         03:08:3b:8e:54:2c:2a:32:b9:78:fc:cb:2d:9d:73:3b:19:b6:
         e7:ac:9d:e2:58:72:b0:5f:5a:bd:62:56:93:08:83:34:f1:73:
         9c:10:f7:7b:d4:b3:d9:db:30:e0:09:9b:7a:b3:aa:35:ee:82:
         39:fa:7b:0b:a1:35:18:11:81:e3:62:c5:02:16:f7:f2:8b:65:
         1d:74:8e:d9:f6:6e:27:ad:4f:32:26:43:e8:b4:43:f7:d6:3d:
         47:8b:4c:41:12:cb:70:9c:dc:3d:70:9a:f7:98:09:ff:8a:f5:
         61:32:13:c3:0e:6a:ec:fc:08:45:91:4f:40:95:9c:60:a5:1c:
         f5:0f:fb:cf:84:37:78:af:6f:9f:af:4d:e5:04:e6:92:7d:45:
         92:38:4e:12:55:1c:b9:f4:7f:90:bc:11:f0:66:e1:14:24:83:
         79:d2:d3:ba:83:77:13:61:e4:df:61:26:5a:cb:76:0f:f2:db:
         4b:52:91:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:32:17 2026 by rpki-client