Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/ef3d78f0-951a-3848-82d7-3fe3ba3c9d08.roa
File:                     ef3d78f0-951a-3848-82d7-3fe3ba3c9d08.roa (raw, json)
Hash identifier:          q4fpLxrl8sjkWo7NK9vxn+fTdSaAn3FSya2hDWmMk8M=
Subject key identifier:   5C:69:BC:BA:21:74:E1:F3:6A:01:C9:AD:00:E2:BF:1B:6F:5E:CD:FE
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584CD6D2145B990CCC3F0A053140
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/ef3d78f0-951a-3848-82d7-3fe3ba3c9d08.roa
Signing time:             Thu 12 Feb 2026 14:00:40 +0000
ROA not before:           Thu 12 Feb 2026 14:00:40 +0000
ROA not after:            Wed 13 May 2026 13:00:40 +0000
asID:                     30058
IP address blocks:        216.227.170.0/23 maxlen: 24
                          216.227.172.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d6:d2:14:5b:99:0c:cc:3f:0a:05:31:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Feb 12 14:00:40 2026 GMT
            Not After : May 13 13:00:40 2026 GMT
        Subject: CN=99f99d1c-dce9-4953-8551-fbce2cd0e563
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:cc:aa:1c:f2:03:7b:05:5e:ab:be:9f:e4:13:
                    69:1a:4c:33:72:c8:58:0d:e9:4a:09:e7:ea:f1:e7:
                    6a:63:6b:20:ea:e5:2a:e0:5b:6f:2f:55:14:df:24:
                    56:15:02:1f:ef:5a:1c:46:63:80:59:34:88:04:06:
                    65:49:ab:a5:d8:a5:59:fd:e7:33:8e:93:b2:e7:3f:
                    b5:e1:b4:b6:1f:17:a7:e4:84:24:02:8f:83:db:59:
                    98:47:7e:49:e1:13:1a:b5:aa:c4:2f:19:ed:4f:47:
                    81:6c:b7:5f:7d:3f:5e:e6:a8:c1:31:72:1a:a4:31:
                    43:94:f9:00:f4:f1:ed:59:3d:b2:f2:ee:e2:b0:32:
                    49:ad:47:ad:ef:de:1b:8f:8d:25:3c:c5:12:1d:88:
                    d5:7c:4f:09:83:98:9c:c2:0c:78:b3:82:da:3b:c0:
                    f6:22:0c:41:ac:ae:ce:f7:e9:e9:bf:62:68:02:d8:
                    ea:83:a6:ec:a3:ee:d3:4e:5f:57:87:c0:b3:dd:29:
                    f4:7d:71:ea:72:07:4e:36:ec:d7:d0:fa:10:d8:e6:
                    28:2f:d9:8d:f8:38:ff:0c:bb:d3:11:b0:7c:80:9d:
                    d3:d5:b1:3b:ea:87:4c:e6:44:39:23:01:e7:d7:0f:
                    98:a0:71:41:2d:7b:6b:a6:5a:bb:15:f4:aa:3e:eb:
                    ce:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:69:BC:BA:21:74:E1:F3:6A:01:C9:AD:00:E2:BF:1B:6F:5E:CD:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/ef3d78f0-951a-3848-82d7-3fe3ba3c9d08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.227.170.0-216.227.173.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:08:ad:26:1c:c5:73:a5:54:60:4f:42:fa:de:1c:aa:91:06:
         3c:48:53:61:91:c9:6a:dc:35:1c:ce:a5:4f:da:19:2d:99:5e:
         b6:f2:62:a2:3f:3c:11:59:d0:9d:ad:1e:d4:ca:ec:d9:3a:e7:
         5a:2e:10:85:45:30:50:19:ef:b1:48:46:5a:5e:e6:0f:f2:16:
         46:52:99:3b:11:e2:35:25:bb:f2:21:f1:98:4d:3a:7f:88:07:
         af:b3:7b:47:d4:ad:09:42:cb:6b:58:ac:2e:ad:f5:49:63:2b:
         59:7a:83:ef:38:88:78:b9:32:2a:5f:2c:0a:3b:23:39:d6:76:
         0d:e1:50:8a:a7:ad:ef:23:02:93:40:a4:ca:0d:cc:a5:2e:f7:
         c6:43:ac:c2:a4:ce:a1:9e:e4:b8:df:9e:08:4b:c3:53:a9:0b:
         91:fe:0f:f4:92:f8:fe:9c:f8:c1:cb:1b:40:5a:60:6e:b8:66:
         39:41:f6:37:2c:65:51:2f:90:33:70:b2:49:96:bd:38:f5:ba:
         99:bf:d1:21:9a:2c:5c:58:67:3e:ad:12:88:7b:6b:0d:2a:19:
         97:be:5f:8c:9a:a8:74:55:74:13:13:00:fc:05:80:bc:48:db:
         ce:5e:2c:aa:3b:a8:98:e3:81:3a:9d:72:ae:7a:5a:85:56:14:
         9c:d3:d0:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:27:47 2026 by rpki-client