Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b09eeed3-3c84-4892-89ae-0ce139a9ca4a/b3ae037a-93d7-379e-94a3-ef8de4f644db.roa
File:                     b3ae037a-93d7-379e-94a3-ef8de4f644db.roa (raw, json)
Hash identifier:          8vujn6bYqHgxAoejBmaxbVFa4wwPNEVxehKuW21MFVY=
Subject key identifier:   2E:6D:48:F8:75:FC:61:37:1E:53:77:0C:9C:56:BF:EB:89:59:16:DA
Certificate issuer:       /CN=b09eeed3-3c84-4892-89ae-0ce139a9ca4a
Certificate serial:       010D0C9F4328584CF4221F484E48B84779A80D00
Authority key identifier: 65:6D:DC:8C:64:FE:51:A7:CF:6F:01:44:7E:5D:6B:44:20:DE:B2:FA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b09eeed3-3c84-4892-89ae-0ce139a9ca4a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b09eeed3-3c84-4892-89ae-0ce139a9ca4a/b3ae037a-93d7-379e-94a3-ef8de4f644db.roa
Signing time:             Mon 23 Feb 2026 02:00:31 +0000
ROA not before:           Mon 23 Feb 2026 02:00:31 +0000
ROA not after:            Sun 24 May 2026 01:00:31 +0000
asID:                     14325
IP address blocks:        104.249.184.0/22 maxlen: 24
                          170.39.220.0/22 maxlen: 24
                          192.107.120.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b09eeed3-3c84-4892-89ae-0ce139a9ca4a/b09eeed3-3c84-4892-89ae-0ce139a9ca4a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b09eeed3-3c84-4892-89ae-0ce139a9ca4a/b09eeed3-3c84-4892-89ae-0ce139a9ca4a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b09eeed3-3c84-4892-89ae-0ce139a9ca4a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f4:22:1f:48:4e:48:b8:47:79:a8:0d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b09eeed3-3c84-4892-89ae-0ce139a9ca4a
        Validity
            Not Before: Feb 23 02:00:31 2026 GMT
            Not After : May 24 01:00:31 2026 GMT
        Subject: CN=35ad1985-a943-4de9-b56c-2f69304a5d0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c4:58:cb:dc:7a:ef:ec:8e:12:fd:7a:db:88:
                    29:04:d7:57:30:ac:da:df:c0:b6:bf:3d:62:6e:0e:
                    56:3a:f5:eb:b4:ca:20:bf:ae:c3:38:31:5f:65:23:
                    ae:58:eb:3c:7b:d8:fc:27:63:50:68:99:0e:15:3e:
                    b5:b6:18:17:7c:00:e9:37:87:9f:39:c8:17:d2:a0:
                    f5:60:1a:01:1d:29:c7:d0:b6:6a:89:a6:2e:d3:15:
                    17:14:9e:df:43:d7:c0:e2:a3:69:3c:79:f6:12:91:
                    a2:56:87:2d:86:d0:b0:67:39:3d:86:62:e0:2d:dd:
                    ba:73:c6:16:ce:d1:08:6b:c8:82:bf:d8:29:02:ef:
                    f5:1d:b0:55:23:d9:b6:36:7c:d0:34:06:17:5f:c7:
                    cf:0b:6f:1c:a6:82:43:c0:c8:7a:1d:86:48:93:6e:
                    83:22:1c:ad:42:f1:1b:84:93:ff:59:76:8f:b0:cf:
                    26:d8:a5:ea:18:04:f2:fd:c2:7c:f2:cd:68:55:22:
                    0c:eb:fb:0c:17:c5:f2:48:97:ac:d7:de:61:77:b6:
                    7b:c9:46:ce:51:99:72:4c:2a:b1:a5:2d:4f:f2:a2:
                    97:d0:e4:96:9f:4e:fb:48:eb:e1:ef:a6:e6:85:d6:
                    db:c1:da:8d:e3:0b:aa:f5:72:64:96:b7:da:31:ed:
                    40:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:6D:48:F8:75:FC:61:37:1E:53:77:0C:9C:56:BF:EB:89:59:16:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b09eeed3-3c84-4892-89ae-0ce139a9ca4a/b3ae037a-93d7-379e-94a3-ef8de4f644db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b09eeed3-3c84-4892-89ae-0ce139a9ca4a/b09eeed3-3c84-4892-89ae-0ce139a9ca4a.crl

            X509v3 Authority Key Identifier:
                keyid:65:6D:DC:8C:64:FE:51:A7:CF:6F:01:44:7E:5D:6B:44:20:DE:B2:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b09eeed3-3c84-4892-89ae-0ce139a9ca4a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.249.184.0/22
                  170.39.220.0/22
                  192.107.120.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:30:af:92:da:63:29:d8:3d:dd:a4:9f:53:d2:7c:92:ee:f7:
         5e:9b:54:50:c4:c2:0a:42:22:68:44:9f:cf:bd:9e:2e:5a:4e:
         08:b6:55:3d:6c:c2:7d:f3:7f:c7:1f:c1:64:c3:f4:3e:e1:0e:
         60:1d:f8:47:e7:1a:d8:3b:ef:80:01:40:4b:40:eb:33:85:76:
         a8:b8:7a:92:f1:18:9b:b4:ad:92:06:5c:45:86:a4:92:fa:aa:
         17:9a:33:d6:5b:9b:af:b0:6f:43:96:7f:2a:97:03:93:84:c3:
         fc:e8:d0:e1:92:12:55:fe:dd:8e:2e:57:a5:70:8f:63:43:a7:
         cb:8e:4d:fb:47:96:f1:bb:4a:08:c7:33:6d:cf:dc:08:91:c3:
         75:65:fa:da:40:0b:e6:a0:59:2b:d7:7f:99:6a:9e:82:9e:fc:
         40:f0:e4:19:79:10:0e:4f:16:e1:0a:9c:df:a1:24:27:ee:f9:
         65:70:5c:59:e2:b5:1b:fc:75:31:11:06:0c:74:ba:c0:0d:77:
         1c:12:a6:a9:30:fc:bf:b6:b8:e2:bf:66:9c:b7:0e:e5:08:e8:
         8c:8e:78:1f:c2:9c:b7:58:57:fa:32:52:2d:ea:ec:da:d1:7b:
         3f:39:23:03:42:8e:8e:5d:d3:b7:17:0d:52:c9:f4:c6:35:06:
         fc:25:44:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:08:25 2026 by rpki-client