Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86/a569e485-6b37-3b02-a56e-74b826b6659a.roa
File:                     a569e485-6b37-3b02-a56e-74b826b6659a.roa (raw, json)
Hash identifier:          p8WiiN69uGHaAEc6KzR7FHTiI60hUUOyu/DcQboSfSw=
Subject key identifier:   FE:CA:0D:A3:BD:B0:7C:DF:6C:3E:3D:00:1F:17:33:38:A8:B3:6D:48
Certificate issuer:       /CN=860b4c38-2ca6-4edd-80ef-1173a8d7ef86
Certificate serial:       010D0C9F4328584CBDB1E3EA117A51A5F62DF480
Authority key identifier: 9C:1A:0A:7B:40:6D:41:FC:4E:99:70:8A:78:C9:86:84:99:7C:78:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86/a569e485-6b37-3b02-a56e-74b826b6659a.roa
Signing time:             Tue 03 Feb 2026 14:00:39 +0000
ROA not before:           Tue 03 Feb 2026 14:00:39 +0000
ROA not after:            Mon 04 May 2026 13:00:39 +0000
asID:                     20326
IP address blocks:        208.91.104.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86/860b4c38-2ca6-4edd-80ef-1173a8d7ef86.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86/860b4c38-2ca6-4edd-80ef-1173a8d7ef86.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:bd:b1:e3:ea:11:7a:51:a5:f6:2d:f4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=860b4c38-2ca6-4edd-80ef-1173a8d7ef86
        Validity
            Not Before: Feb  3 14:00:39 2026 GMT
            Not After : May  4 13:00:39 2026 GMT
        Subject: CN=a171cab6-0857-4d33-ba1f-d07623bda976
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:3a:66:01:93:93:85:fd:1d:a0:e0:e9:6d:6d:
                    71:e5:68:34:82:8a:2c:2c:3d:5a:a2:e7:a6:8e:3e:
                    b6:c9:a5:65:a5:d6:0a:7b:a9:23:9d:2e:b8:af:80:
                    47:05:04:01:7c:85:e7:0e:ac:b9:cb:4c:36:9e:85:
                    ac:01:48:b3:67:1f:8c:5e:eb:62:27:6c:d5:fe:d1:
                    8e:f4:97:15:aa:42:d4:77:73:42:c4:b1:ea:bb:22:
                    7b:26:a5:d9:b7:32:15:da:11:be:4a:bc:35:a5:b7:
                    92:a1:a5:25:1c:84:3b:f3:5f:76:6a:97:04:ee:6b:
                    35:c6:dc:39:a1:9f:1b:5b:66:8b:8e:60:3a:72:ba:
                    3b:aa:a0:8a:75:d1:9d:88:91:1b:1b:1b:cd:e4:60:
                    c0:77:07:fc:f3:8a:65:a3:f0:19:e3:2e:b2:ad:bf:
                    f0:95:26:4f:60:da:8a:d6:03:89:79:d9:a9:57:c7:
                    48:fb:a5:d0:8f:46:7d:61:2d:b4:8e:b5:93:03:c2:
                    91:ef:ae:39:4f:eb:fb:1c:a7:0a:53:52:a5:ce:6c:
                    86:ba:ec:ee:20:eb:23:2f:2b:42:91:5a:91:0c:a9:
                    4e:bc:52:6c:39:03:5d:0e:80:bb:70:0b:da:ef:70:
                    93:a9:39:a1:7a:e5:1f:42:bb:b7:0c:2c:f6:06:18:
                    3d:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:CA:0D:A3:BD:B0:7C:DF:6C:3E:3D:00:1F:17:33:38:A8:B3:6D:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86/a569e485-6b37-3b02-a56e-74b826b6659a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86/860b4c38-2ca6-4edd-80ef-1173a8d7ef86.crl

            X509v3 Authority Key Identifier:
                keyid:9C:1A:0A:7B:40:6D:41:FC:4E:99:70:8A:78:C9:86:84:99:7C:78:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.91.104.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:6b:c1:c7:df:e2:6a:4c:b7:23:71:9f:f0:34:11:03:80:c7:
         f8:76:1a:d3:b3:4e:e3:a8:56:79:7d:67:fb:bb:5c:08:ee:47:
         c2:94:1b:cb:8d:5f:02:61:04:4b:5b:58:f8:91:0d:65:c6:2d:
         d8:b1:58:91:5b:dc:fd:91:b7:30:d9:68:a4:1c:de:fe:4d:0e:
         f4:ce:5f:71:62:8d:30:6f:05:77:86:2d:cc:2a:c9:6a:03:21:
         71:b3:ae:e1:d9:c2:91:27:c6:be:d9:e6:d4:de:44:ae:cf:be:
         96:15:18:75:14:24:de:62:dd:b9:e1:2b:fe:24:23:b3:b1:4d:
         0f:30:f1:d6:a3:99:ce:b2:ca:c3:50:8e:5b:3c:dc:87:77:94:
         ca:fa:6d:c8:84:ef:8f:e8:31:0b:31:a1:41:3b:ae:e1:e4:35:
         52:00:d5:3c:1c:13:eb:19:7e:84:61:7f:03:0b:d5:ba:bb:b7:
         eb:f4:1a:7c:46:09:d0:77:f4:8e:02:33:1b:27:1a:67:64:b7:
         28:95:66:e8:68:57:18:41:72:20:30:3a:c4:52:15:28:be:17:
         e7:57:e1:73:88:ac:c6:91:72:d8:f7:32:71:49:c5:0e:15:db:
         c2:3b:b3:75:f2:af:ca:31:58:7d:ab:c5:36:ac:40:4f:38:d6:
         84:07:4a:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:31:14 2026 by rpki-client