Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b6b9b5c0-549d-3e8f-91fa-5fb0e0e4cc3b.roa
File:                     b6b9b5c0-549d-3e8f-91fa-5fb0e0e4cc3b.roa (raw, json)
Hash identifier:          qnUFzbDm/po3O+jqoQa2lO5b/9ylZSCziGVtqBRp2Ts=
Subject key identifier:   FB:BE:2C:7D:BC:EE:23:67:92:62:3A:59:5F:07:02:F6:D0:E0:98:C7
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584C6E2193914D0763908E543600
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b6b9b5c0-549d-3e8f-91fa-5fb0e0e4cc3b.roa
Signing time:             Tue 06 Jan 2026 02:00:31 +0000
ROA not before:           Tue 06 Jan 2026 02:00:31 +0000
ROA not after:            Mon 06 Apr 2026 01:00:31 +0000
asID:                     36183
IP address blocks:        172.226.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:6e:21:93:91:4d:07:63:90:8e:54:36:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jan  6 02:00:31 2026 GMT
            Not After : Apr  6 01:00:31 2026 GMT
        Subject: CN=7a958994-eaee-4119-9a4a-9722f4d4e12e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:40:78:2d:0c:69:bc:2f:0e:8f:08:66:b0:04:
                    78:a2:57:7c:8e:12:58:d6:ce:f5:78:08:08:d2:0f:
                    60:1d:25:d2:37:fb:e4:5a:54:e2:4e:3b:fb:67:7a:
                    3b:d4:36:b4:d3:4f:d1:51:16:9e:5d:3c:b6:c8:7d:
                    b2:97:78:8b:cd:63:a6:60:5f:40:ab:07:e4:f8:7d:
                    d1:a8:ae:79:30:45:64:49:27:68:6d:4b:35:84:28:
                    96:8b:15:18:87:07:d6:e6:c3:e9:38:64:2c:ba:5e:
                    4c:d6:66:c4:69:a2:65:0c:4d:aa:ea:ff:8e:e4:56:
                    73:9d:08:df:88:40:ef:03:dd:3a:b7:c9:e6:b2:d7:
                    de:de:37:20:f9:9c:e0:c8:02:12:61:e7:62:a3:8e:
                    f5:2c:0e:25:49:7e:aa:95:4c:26:7c:7d:4c:95:53:
                    3a:13:b3:19:16:c0:fd:26:b2:55:0a:d2:ca:ef:7e:
                    46:6c:76:98:e9:0c:68:d9:a9:31:c5:52:0c:c6:63:
                    71:fc:e7:33:01:73:a6:99:8f:f0:54:e2:bf:0a:0d:
                    6e:7e:49:ab:3a:0f:bc:fb:5a:52:b6:9b:39:bb:18:
                    3c:71:92:1d:f6:f7:17:30:ba:42:47:01:e6:f4:fb:
                    7a:cc:ba:be:00:02:d2:16:56:b9:fa:9e:d4:48:7b:
                    60:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:BE:2C:7D:BC:EE:23:67:92:62:3A:59:5F:07:02:F6:D0:E0:98:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b6b9b5c0-549d-3e8f-91fa-5fb0e0e4cc3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.226.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:d7:2f:d5:07:bd:16:ea:4a:8b:3b:29:24:7c:5e:c6:b6:54:
         c8:a9:db:66:19:96:66:40:f4:29:38:c5:9b:cf:a0:b0:25:a5:
         17:8e:08:84:ae:2e:96:de:1b:f6:0b:b8:f2:26:3a:2c:7e:75:
         77:bc:f4:3a:c9:88:c5:03:7a:8d:3c:a2:63:a4:5f:95:1a:ca:
         f6:9e:72:bf:c1:b4:d3:49:cd:0c:7b:49:70:5c:ab:15:e1:14:
         7f:46:b4:d9:c6:82:0e:b3:32:8a:e2:ea:19:6f:16:11:bb:c1:
         b8:c4:b6:78:59:6b:19:ee:fc:a7:38:9b:c6:c7:13:aa:9e:bb:
         ea:09:73:eb:a0:35:c8:ef:49:ec:1b:58:3a:86:3a:c9:37:2c:
         b0:0a:5d:d1:a3:70:8e:64:78:8b:47:90:fb:c5:40:03:2d:19:
         b1:35:10:fd:c9:24:07:40:00:92:1f:1b:48:72:55:55:13:a0:
         09:cc:42:39:47:a1:c1:c6:f5:b8:f8:3f:ac:8a:1e:2b:24:1f:
         26:0f:31:b7:f0:ee:04:a5:63:b8:4f:42:84:3e:3a:e7:a5:eb:
         ad:dd:fe:04:a1:9f:2d:2b:5d:53:3d:43:ff:c3:d3:ba:64:cf:
         83:4e:12:a8:c8:06:9e:ee:46:87:92:b2:f4:b0:2d:62:28:28:
         b7:89:b9:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:44:21 2026 by rpki-client