Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/580e739b-bb2f-4e02-9a24-4813328e39cf/09a170e6-b2b8-30b0-adee-975ab184a379.roa
File:                     09a170e6-b2b8-30b0-adee-975ab184a379.roa (raw, json)
Hash identifier:          23BwMewIpSKTz0gX8ug5V55b6QUy/8Z8se5IPo/U/MQ=
Subject key identifier:   84:2C:06:C9:C6:2D:EE:ED:FA:0D:8D:4D:05:D4:53:CA:FC:02:C2:69
Certificate issuer:       /CN=580e739b-bb2f-4e02-9a24-4813328e39cf
Certificate serial:       010D0C9F4328584CF95AE241F78BCE16B0FB3500
Authority key identifier: E7:79:6E:D4:0C:02:40:FD:99:B7:72:46:72:82:E5:A1:D4:89:C8:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/580e739b-bb2f-4e02-9a24-4813328e39cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/580e739b-bb2f-4e02-9a24-4813328e39cf/09a170e6-b2b8-30b0-adee-975ab184a379.roa
Signing time:             Tue 24 Feb 2026 21:04:07 +0000
ROA not before:           Tue 24 Feb 2026 21:04:07 +0000
ROA not after:            Mon 25 May 2026 20:04:07 +0000
asID:                     3736
IP address blocks:        198.180.140.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/580e739b-bb2f-4e02-9a24-4813328e39cf/580e739b-bb2f-4e02-9a24-4813328e39cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/580e739b-bb2f-4e02-9a24-4813328e39cf/580e739b-bb2f-4e02-9a24-4813328e39cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/580e739b-bb2f-4e02-9a24-4813328e39cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f9:5a:e2:41:f7:8b:ce:16:b0:fb:35:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=580e739b-bb2f-4e02-9a24-4813328e39cf
        Validity
            Not Before: Feb 24 21:04:07 2026 GMT
            Not After : May 25 20:04:07 2026 GMT
        Subject: CN=d0a56d68-f89b-4c87-9642-bbe22a095412
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:19:bd:6a:79:0c:8c:23:64:7a:6a:c6:f5:e1:
                    63:d7:a0:66:c4:4d:ca:ec:f2:14:58:61:65:92:fd:
                    7b:b7:dd:04:82:23:21:ad:0d:fa:95:68:ef:11:c1:
                    f5:fb:ca:99:5a:a2:76:c6:88:97:9c:17:d4:36:ad:
                    47:e6:95:56:a0:9b:9f:c8:58:83:f3:07:10:a2:ec:
                    83:05:d4:4e:81:19:0b:15:fa:b9:02:7c:19:c6:5a:
                    ca:b1:df:ed:d4:60:7c:3a:97:35:dd:01:dd:df:68:
                    61:f8:7f:3b:11:97:93:82:ce:79:4f:6d:86:2e:8e:
                    fc:d6:69:c4:2f:14:72:d5:2a:ed:cf:5e:46:b5:8e:
                    d5:7d:98:5a:67:ab:b8:8b:a0:9c:1d:80:cd:e2:18:
                    d9:52:f2:fc:2a:c1:ba:e6:d7:11:05:cb:ea:1d:11:
                    3e:19:47:b5:46:02:57:55:cd:30:70:1b:9d:85:ce:
                    04:3f:a1:6e:b9:52:2a:03:0e:af:87:18:9b:fa:43:
                    7b:67:ea:e9:fe:6e:b5:45:2a:e5:db:f3:2e:cb:7f:
                    80:d9:40:17:d6:c8:9f:95:06:8d:63:09:f1:f8:ed:
                    5b:c5:ab:67:03:30:a4:14:84:fd:5c:34:b5:3c:ef:
                    89:ca:58:9a:7f:7d:fa:43:11:1c:7c:74:d3:35:59:
                    28:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:2C:06:C9:C6:2D:EE:ED:FA:0D:8D:4D:05:D4:53:CA:FC:02:C2:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/580e739b-bb2f-4e02-9a24-4813328e39cf/09a170e6-b2b8-30b0-adee-975ab184a379.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/580e739b-bb2f-4e02-9a24-4813328e39cf/580e739b-bb2f-4e02-9a24-4813328e39cf.crl

            X509v3 Authority Key Identifier:
                keyid:E7:79:6E:D4:0C:02:40:FD:99:B7:72:46:72:82:E5:A1:D4:89:C8:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/580e739b-bb2f-4e02-9a24-4813328e39cf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.180.140.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:b4:fd:25:4e:b9:32:6e:9c:ef:3a:cb:66:8a:f3:76:ee:7d:
         95:2f:5d:61:b9:26:04:31:ae:37:bc:9c:96:45:0e:d5:2c:fc:
         47:6b:71:f4:e6:48:d7:d6:52:5e:c4:d7:3c:4f:13:18:fa:c1:
         21:d6:fe:b9:2e:d0:cc:0e:7d:48:ee:4f:0d:2f:3b:9b:85:18:
         97:99:26:b1:83:ae:e1:de:61:9c:a7:5e:5e:6e:43:57:16:94:
         3c:4f:de:53:98:6d:4e:14:e1:b9:d8:19:7f:30:da:ce:8e:4e:
         54:ea:22:85:c3:be:38:0e:ac:64:7a:61:80:6b:60:05:87:42:
         d3:0c:b4:53:a1:ad:dd:99:53:a3:01:46:c7:e0:05:d3:0f:b8:
         b4:67:bf:33:5c:ed:52:3a:80:6c:59:94:85:7a:51:53:ec:bf:
         4a:c8:d5:fc:cf:a3:1d:41:ba:8c:0b:a5:ee:07:56:b6:d3:42:
         f1:7f:f9:06:2a:f8:05:6f:b9:13:09:ae:98:9a:59:23:0a:f9:
         14:df:4a:aa:0a:d3:c1:3a:9c:e6:c1:5b:22:f1:8b:95:a0:e7:
         1a:d7:82:dd:42:4e:66:55:e6:15:37:65:c6:a8:44:42:f7:9c:
         07:48:06:00:3b:69:fc:a8:cb:77:86:58:1c:d5:86:f2:7b:ad:
         33:a5:70:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:15:27 2026 by rpki-client