Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/d15071ac-b57a-3446-96d0-ff02e98ebbfd.roa
File:                     d15071ac-b57a-3446-96d0-ff02e98ebbfd.roa (raw, json)
Hash identifier:          //37SS9m4urwPN8EH7S29/PyDd0ZfUPKuKlaH3Rgpc4=
Subject key identifier:   5D:BD:BD:CF:02:27:59:51:9B:B5:65:CB:83:F3:97:C8:BC:48:AF:A1
Certificate issuer:       /CN=4bc604de-ac2b-4921-b601-a2c976ab18e8
Certificate serial:       010D0C9F4328584D00B269C22F6C4EB0DBB55DC0
Authority key identifier: 5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/d15071ac-b57a-3446-96d0-ff02e98ebbfd.roa
Signing time:             Fri 27 Feb 2026 14:00:40 +0000
ROA not before:           Fri 27 Feb 2026 14:00:40 +0000
ROA not after:            Thu 28 May 2026 13:00:40 +0000
asID:                     55195
IP address blocks:        149.112.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:00:b2:69:c2:2f:6c:4e:b0:db:b5:5d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bc604de-ac2b-4921-b601-a2c976ab18e8
        Validity
            Not Before: Feb 27 14:00:40 2026 GMT
            Not After : May 28 13:00:40 2026 GMT
        Subject: CN=2e4c98a4-e03b-4205-9181-ef0d50e5beb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:52:45:31:17:66:61:78:57:3f:03:b2:83:ce:
                    b7:ed:8d:28:fc:2c:04:7d:c1:33:ed:cc:c5:78:f6:
                    34:6d:69:14:6a:a9:02:e6:b5:41:3c:b4:a3:9e:42:
                    62:07:54:0e:07:bb:2f:c4:62:33:10:93:c3:1d:5e:
                    1e:cf:b2:4e:8f:fe:49:65:6b:0b:8e:9a:f7:5e:78:
                    93:0c:ff:fe:51:2a:27:03:22:b2:d3:eb:bc:1f:4f:
                    5d:80:db:1f:50:5f:3a:f5:c6:d4:22:55:a5:54:4b:
                    85:52:70:fb:9f:a0:e7:f7:69:46:b9:24:ed:4c:09:
                    90:6b:1e:e1:27:21:a6:f9:aa:c4:e0:0c:2a:70:c9:
                    33:42:01:eb:ec:d9:47:41:38:37:db:5e:4f:b5:5c:
                    53:a3:ce:86:29:05:41:fa:6a:f2:46:2d:40:a0:93:
                    e7:ab:78:9b:58:58:2e:cd:aa:23:25:93:b9:7e:f8:
                    53:ca:0d:b3:b9:b0:37:8a:f9:08:b5:e7:d1:be:d1:
                    8c:6f:ee:ce:de:6d:9e:c9:d2:e3:f1:f5:85:d3:f7:
                    2c:d2:f9:ef:fa:0a:b3:80:7d:20:44:88:31:2a:5b:
                    9e:56:38:51:d5:3c:4d:c0:f0:5c:50:70:1b:4e:01:
                    0d:f3:a2:13:d3:60:9c:a8:1a:cd:9e:63:06:53:be:
                    1e:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:BD:BD:CF:02:27:59:51:9B:B5:65:CB:83:F3:97:C8:BC:48:AF:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/d15071ac-b57a-3446-96d0-ff02e98ebbfd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.crl

            X509v3 Authority Key Identifier:
                keyid:5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.160.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:1a:73:40:10:05:0b:05:d0:04:c9:91:97:aa:69:9a:b9:eb:
         17:57:e9:e4:ac:ed:a7:35:41:c4:bb:98:02:92:b8:d3:20:c8:
         bd:75:4a:81:db:07:c6:c1:ec:7b:22:a1:30:91:b0:23:5a:ad:
         69:26:6a:89:01:ea:6a:01:32:aa:ff:72:e5:71:09:a6:6a:71:
         7f:0d:4a:80:59:34:f1:a6:47:2f:8f:41:0e:1a:0d:6f:be:a8:
         c9:f0:16:ec:e5:9f:15:41:20:38:ff:c0:6a:95:1e:05:d7:87:
         8c:5d:67:f6:6d:01:f4:11:8e:ba:26:08:2b:de:bd:0e:42:a2:
         b6:81:ce:10:dc:f6:f6:d2:32:b1:7a:8a:3f:9e:27:76:67:06:
         22:1a:b3:3f:b9:2c:b4:d2:f3:47:f0:45:ac:c6:30:13:72:dd:
         14:e1:a1:bc:70:1e:a0:28:ec:af:89:7d:8d:37:fc:7e:63:bc:
         42:cf:0c:81:62:f7:28:f6:f6:ad:e1:5c:ac:61:80:41:bf:b2:
         ab:23:bf:42:12:b8:86:61:8c:6e:37:19:88:15:f6:72:00:f6:
         9c:db:95:bb:5f:95:2e:72:0d:e3:cf:98:9c:d9:db:89:f6:75:
         d4:32:04:08:88:7b:47:f4:4d:20:c2:46:8f:61:5b:f7:11:8c:
         88:1d:dc:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:34:07 2026 by rpki-client