Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/e5b6c141-496d-3b0d-8a5d-6a72dd40bd82.roa
File:                     e5b6c141-496d-3b0d-8a5d-6a72dd40bd82.roa (raw, json)
Hash identifier:          Q/jjBxlMDlNAZHfzciXur5ZrEtb/V+0Ysdc3tv8jPpM=
Subject key identifier:   94:98:0D:0C:24:CD:AC:1C:F3:C0:06:63:0E:E5:1B:D2:FF:D1:AA:72
Certificate issuer:       /CN=f3281a82-6c17-4658-80f7-ee1327b4779a
Certificate serial:       010D0C9F4328584CC8DC941C8C340B6557E94700
Authority key identifier: 9C:00:C9:04:FC:22:91:1C:43:F4:C7:03:B8:E3:17:BE:F5:6B:D5:88
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/e5b6c141-496d-3b0d-8a5d-6a72dd40bd82.roa
Signing time:             Sat 07 Feb 2026 14:00:41 +0000
ROA not before:           Sat 07 Feb 2026 14:00:41 +0000
ROA not after:            Fri 08 May 2026 13:00:41 +0000
asID:                     395383
IP address blocks:        192.157.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/f3281a82-6c17-4658-80f7-ee1327b4779a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/f3281a82-6c17-4658-80f7-ee1327b4779a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c8:dc:94:1c:8c:34:0b:65:57:e9:47:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3281a82-6c17-4658-80f7-ee1327b4779a
        Validity
            Not Before: Feb  7 14:00:41 2026 GMT
            Not After : May  8 13:00:41 2026 GMT
        Subject: CN=1c96fefe-c5d6-4fe2-91b9-93487fc89dcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:df:5b:81:81:6e:72:d8:85:6d:8e:70:f4:63:
                    1c:82:5e:ce:71:88:05:d1:e6:75:ab:ba:3a:5c:26:
                    2c:3b:28:6b:dd:06:55:17:6e:60:32:e3:6e:b7:64:
                    ad:c5:d9:8f:bc:11:c8:43:8d:85:5a:a3:bf:6a:aa:
                    c8:a2:97:67:5a:f8:46:b2:5e:14:36:36:e8:94:f2:
                    16:0c:69:ec:82:eb:a6:5d:35:52:9a:32:7a:f7:5e:
                    09:e9:c0:f1:3c:56:c9:44:17:25:b3:70:77:84:c0:
                    b0:c3:1d:bc:c1:d2:aa:d1:ab:2b:32:c0:bd:92:fc:
                    b7:72:e9:6b:e5:3e:dd:01:92:87:44:d5:ac:64:32:
                    3d:db:ad:73:e1:59:a1:8f:bf:f7:c3:ea:53:6c:09:
                    7d:b3:b1:68:b2:d0:9d:b9:3f:46:d0:93:ac:4e:d4:
                    10:5d:9b:a8:05:eb:45:d6:86:78:57:a3:f4:55:23:
                    3a:2c:e2:cd:5b:71:78:88:6d:8f:c7:25:d1:86:9d:
                    6f:bc:a6:1a:51:5f:8d:9f:6e:cc:0e:98:1a:8d:31:
                    1b:a6:93:00:ae:bc:12:c4:f9:85:d3:ca:45:07:e6:
                    1f:ed:82:ac:b5:f1:0f:b5:cc:59:03:53:3b:3e:ae:
                    12:c0:ba:9e:11:b3:7c:cb:7e:0b:fe:46:56:2c:0b:
                    5e:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:98:0D:0C:24:CD:AC:1C:F3:C0:06:63:0E:E5:1B:D2:FF:D1:AA:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/e5b6c141-496d-3b0d-8a5d-6a72dd40bd82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/f3281a82-6c17-4658-80f7-ee1327b4779a.crl

            X509v3 Authority Key Identifier:
                keyid:9C:00:C9:04:FC:22:91:1C:43:F4:C7:03:B8:E3:17:BE:F5:6B:D5:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.157.86.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cd:89:e6:72:54:5b:ed:7d:bf:a2:42:44:a1:b1:a5:ca:cf:d9:
         18:f9:3f:db:3b:23:db:74:f6:13:41:da:07:f6:6e:72:49:67:
         21:56:3b:6f:51:64:b0:89:e1:0d:48:00:db:34:83:f6:28:cc:
         3a:ac:b9:6e:62:52:99:2f:79:7b:b0:d0:82:f7:7e:aa:5c:01:
         0f:36:4f:e9:c4:de:3b:9e:b0:02:57:e0:b8:d9:3d:ed:11:a9:
         15:0a:75:e1:11:00:51:cd:cc:51:2d:cf:a0:68:c2:9d:00:91:
         b9:2d:dd:f4:14:51:9e:0a:4b:f9:f1:89:b1:3e:a7:53:77:31:
         48:3f:9e:5e:39:31:30:c4:a2:71:de:06:b3:d6:e2:55:35:46:
         84:78:76:18:8e:ac:1d:5f:c4:eb:3b:87:b0:5d:b4:88:c9:f1:
         84:64:32:89:72:9f:aa:ed:be:86:79:dd:53:dc:ac:da:96:c9:
         2e:b2:ee:de:b5:b3:01:3f:03:37:a3:a1:e4:14:19:f9:c3:a0:
         01:9c:da:ce:ee:ce:0f:ed:38:ae:83:2d:69:95:77:e8:14:32:
         7a:c1:0d:0c:2f:6c:00:e9:9b:ae:c6:1b:9d:eb:e2:59:80:0a:
         9e:0c:2e:d1:0d:9b:c2:4c:ae:6c:02:d0:e3:3e:a3:86:32:e4:
         f0:cf:54:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:16:06 2026 by rpki-client