Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/08a0624f-edb4-329f-bf8a-ea652593f0a7.roa
File:                     08a0624f-edb4-329f-bf8a-ea652593f0a7.roa (raw, json)
Hash identifier:          XWe8MHLKt0erekxZuTP/E2ep5PzXb99WeCVfubeafnM=
Subject key identifier:   0C:E4:DB:99:E7:C7:50:B4:CF:98:84:0F:2B:13:85:8C:37:9E:6B:58
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584CEC899BFEBCD06878660EB740
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/08a0624f-edb4-329f-bf8a-ea652593f0a7.roa
Signing time:             Fri 20 Feb 2026 08:42:40 +0000
ROA not before:           Fri 20 Feb 2026 08:42:40 +0000
ROA not after:            Thu 21 May 2026 07:42:40 +0000
asID:                     15169
IP address blocks:        172.217.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ec:89:9b:fe:bc:d0:68:78:66:0e:b7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Feb 20 08:42:40 2026 GMT
            Not After : May 21 07:42:40 2026 GMT
        Subject: CN=fd798367-13ed-4b9e-85cb-e4b9a05cad2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:20:58:92:a5:d2:3f:86:0d:d7:42:73:a0:5d:
                    2e:1f:4c:76:16:38:58:31:f2:4b:52:e2:a0:63:91:
                    95:52:11:68:f6:c1:0e:94:54:45:59:23:70:2a:71:
                    5b:f0:89:29:6d:b9:ae:a1:3f:56:bd:4c:c0:91:08:
                    29:85:cf:6a:b6:45:28:99:c6:81:6e:26:e9:f9:cd:
                    b6:ea:3f:4e:89:d6:a2:48:f1:0c:5d:69:0b:c5:a2:
                    5e:3e:dd:ad:a2:83:c5:50:0c:1a:4a:36:cf:f4:f6:
                    2f:2b:54:18:27:db:1f:e4:d7:88:ea:24:03:dc:ef:
                    65:09:b1:e6:1e:61:cf:20:98:07:d2:7c:c7:08:ea:
                    55:04:a2:40:14:18:bc:a5:ca:cf:19:f1:e1:14:d9:
                    49:a0:3f:f0:4f:39:91:7d:92:c0:f0:81:a4:94:7a:
                    5d:cf:c7:7d:b8:5d:67:5a:5b:1c:6a:09:a3:8b:cb:
                    80:80:7f:42:69:ff:cf:f7:ba:03:29:59:91:7d:15:
                    14:d9:74:7d:5f:32:e0:55:bc:0b:55:dd:92:90:a0:
                    69:ff:00:a8:f5:8e:f5:ce:7d:1a:34:44:fa:a3:26:
                    7f:c1:5c:46:a0:bf:c2:74:51:92:3f:a9:1f:7f:33:
                    d2:6b:6d:d0:80:a0:8d:ea:a2:48:b1:06:2a:49:a9:
                    bd:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:E4:DB:99:E7:C7:50:B4:CF:98:84:0F:2B:13:85:8C:37:9E:6B:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/08a0624f-edb4-329f-bf8a-ea652593f0a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.217.113.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:80:a2:53:1a:ac:9c:20:3b:0c:92:c9:ef:2b:ef:3b:3e:2a:
         f1:b4:1f:f9:9a:9c:b6:3d:0f:c1:21:40:af:6f:fa:bf:69:e0:
         70:b5:0a:6e:61:b2:99:a0:1b:07:76:92:4e:9d:95:2d:31:c9:
         a0:b0:d9:fc:00:0c:61:74:71:bc:ea:1b:2a:28:4c:ca:db:63:
         f7:cd:27:8b:29:3d:f5:c3:75:e9:8a:97:45:f0:78:f7:42:8f:
         be:d7:cc:a8:c1:13:52:6d:f7:fe:62:17:60:bf:a5:20:a9:ff:
         64:20:01:3e:32:b9:46:94:39:f5:10:9c:ca:72:e5:01:dc:f8:
         dd:eb:31:13:ec:c6:13:6e:b8:5f:d2:a0:25:26:06:01:77:d9:
         76:dd:bd:00:27:50:70:ac:3d:dc:6b:b8:69:e0:e5:ed:7f:ba:
         6f:b1:3c:50:01:f6:9a:f5:5e:8b:58:b5:6e:4b:1f:57:55:cb:
         c9:70:42:83:03:17:a9:90:d3:21:b0:18:e8:ec:27:2d:9d:42:
         40:45:69:65:57:39:78:16:98:3c:cb:f9:47:4d:48:0c:07:d5:
         ef:e1:19:45:4f:91:4f:01:7f:c3:f3:6b:a0:49:21:eb:43:4a:
         3f:62:ec:30:e6:cc:32:06:70:55:59:8a:cb:67:b7:11:f4:02:
         1f:22:c2:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:58:40 2026 by rpki-client