Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b50ebce3-ddf5-4fb0-b8ed-b9a45d8b46b2/6cf09c11-cdfc-3291-a79f-6993e6710f10.roa
File:                     6cf09c11-cdfc-3291-a79f-6993e6710f10.roa (raw, json)
Hash identifier:          YCOY75cnCURH6kaRrs1gu0sDe700EscAkmd1v0puCig=
Subject key identifier:   33:03:6D:76:8B:43:8B:F7:EC:12:3B:10:FB:8B:57:DA:BB:55:CD:2B
Certificate issuer:       /CN=b50ebce3-ddf5-4fb0-b8ed-b9a45d8b46b2
Certificate serial:       010D0C9F4328584CB551D42A4F6FD8C6A5244500
Authority key identifier: 56:CF:D3:78:ED:45:30:F1:BB:D1:61:53:91:A4:FC:D4:37:A6:EA:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b50ebce3-ddf5-4fb0-b8ed-b9a45d8b46b2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b50ebce3-ddf5-4fb0-b8ed-b9a45d8b46b2/6cf09c11-cdfc-3291-a79f-6993e6710f10.roa
Signing time:             Sat 31 Jan 2026 14:00:39 +0000
ROA not before:           Sat 31 Jan 2026 14:00:39 +0000
ROA not after:            Fri 01 May 2026 13:00:39 +0000
asID:                     16509
IP address blocks:        195.85.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b50ebce3-ddf5-4fb0-b8ed-b9a45d8b46b2/b50ebce3-ddf5-4fb0-b8ed-b9a45d8b46b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b50ebce3-ddf5-4fb0-b8ed-b9a45d8b46b2/b50ebce3-ddf5-4fb0-b8ed-b9a45d8b46b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b50ebce3-ddf5-4fb0-b8ed-b9a45d8b46b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b5:51:d4:2a:4f:6f:d8:c6:a5:24:45:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b50ebce3-ddf5-4fb0-b8ed-b9a45d8b46b2
        Validity
            Not Before: Jan 31 14:00:39 2026 GMT
            Not After : May  1 13:00:39 2026 GMT
        Subject: CN=cba1f938-fd44-4998-bf44-e5c5e3472a25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:38:e7:9f:2b:c1:5a:77:e8:28:ce:18:f5:85:
                    28:9b:cb:c3:36:d7:49:ee:73:5e:97:e4:a8:9e:b2:
                    b9:a9:75:fa:f3:62:34:b0:e9:bd:06:ed:ea:46:bf:
                    df:4a:59:8a:6d:af:c1:0b:c6:97:62:6a:20:8b:da:
                    28:3a:d1:16:fd:b2:c5:b0:0d:4e:fd:5f:ff:42:ea:
                    a2:8b:c7:f6:5f:b1:65:79:23:07:1b:f9:4f:27:ac:
                    26:be:82:bf:5c:66:59:d9:8c:15:97:06:6c:b6:de:
                    5e:31:d0:81:80:04:af:ff:03:89:00:1b:25:ee:3f:
                    db:1c:4a:78:81:ce:b8:e5:88:cc:79:3d:b8:8c:59:
                    34:b7:a2:66:29:e0:c8:3d:db:60:0a:c0:c6:5a:af:
                    b0:21:b0:be:65:6c:df:09:69:74:d2:e2:49:f9:7d:
                    36:fe:dc:fd:05:b6:2f:08:6a:da:b7:0e:d4:99:47:
                    b7:4d:55:23:6c:c6:71:7e:f3:21:0f:02:9a:c3:28:
                    ab:3c:40:d1:45:b9:07:7d:c3:34:22:0b:1a:f8:05:
                    9c:17:ce:84:f9:28:5f:21:a6:ea:5c:ce:5f:8b:1c:
                    dc:bf:fc:2a:9f:94:07:9d:9f:1a:0a:89:cb:5d:12:
                    62:0c:6c:2f:9f:98:8f:0d:9e:1d:1b:8a:85:b3:b0:
                    60:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:03:6D:76:8B:43:8B:F7:EC:12:3B:10:FB:8B:57:DA:BB:55:CD:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b50ebce3-ddf5-4fb0-b8ed-b9a45d8b46b2/6cf09c11-cdfc-3291-a79f-6993e6710f10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b50ebce3-ddf5-4fb0-b8ed-b9a45d8b46b2/b50ebce3-ddf5-4fb0-b8ed-b9a45d8b46b2.crl

            X509v3 Authority Key Identifier:
                keyid:56:CF:D3:78:ED:45:30:F1:BB:D1:61:53:91:A4:FC:D4:37:A6:EA:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b50ebce3-ddf5-4fb0-b8ed-b9a45d8b46b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.85.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:9a:05:5e:06:17:64:5a:be:f1:c8:6b:a9:aa:eb:54:02:f0:
         5d:a6:81:31:1c:f0:50:2b:b6:e4:ea:f0:de:35:27:2a:09:08:
         4f:c9:07:44:29:25:32:4b:f1:40:8e:b9:21:bd:3a:07:e4:0b:
         b8:01:8a:11:52:98:41:14:00:6e:9e:20:52:db:09:28:ba:9a:
         ea:a4:78:d6:59:df:6e:05:57:d2:fc:d3:b8:ac:93:b2:13:82:
         46:8a:97:58:42:4c:07:c8:d9:6a:32:79:b9:1f:3b:3b:f7:77:
         86:1b:36:29:5e:7e:92:22:84:89:4f:8b:0d:11:af:54:10:5b:
         5c:44:9d:86:11:c6:f5:8c:3b:b1:a7:f4:0c:72:44:58:35:99:
         3d:88:16:3e:0f:cc:f9:25:ec:b7:12:75:36:7c:07:67:11:74:
         5c:da:c3:fc:cf:3c:b9:7d:52:9f:e8:40:bb:9c:47:b6:ba:68:
         56:a8:d4:06:9c:4b:5b:97:37:3a:7b:28:96:a9:a1:be:62:b0:
         7d:fa:92:a2:10:ca:30:b7:61:3a:5a:77:b8:f9:ab:f4:24:da:
         af:bb:df:07:34:93:8a:e4:c8:4a:da:1a:f5:4a:a1:c8:60:dc:
         39:f4:2d:07:a7:6e:2a:67:8f:d1:2d:5e:95:42:de:0d:b7:fe:
         1a:f3:d0:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:00:52 2026 by rpki-client