Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b08b04c4-3d5d-41d5-8263-cd575f4bd2da/a47ff330-10a8-3414-b09a-6537f240b5b7.roa
File:                     a47ff330-10a8-3414-b09a-6537f240b5b7.roa (raw, json)
Hash identifier:          3xY3Ahp7IZF3X+3CP76wRjeu2IjOIy2f+IY1qd87q2E=
Subject key identifier:   98:16:F9:34:C4:9C:F4:AA:34:DE:48:C1:0D:38:37:0B:CC:FD:E0:4F
Certificate issuer:       /CN=b08b04c4-3d5d-41d5-8263-cd575f4bd2da
Certificate serial:       010D0C9F4328584D021781BD183F011131A1E600
Authority key identifier: F6:82:89:44:D0:3B:CE:E1:4A:25:94:4D:E9:67:6A:8F:2C:51:21:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b08b04c4-3d5d-41d5-8263-cd575f4bd2da.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b08b04c4-3d5d-41d5-8263-cd575f4bd2da/a47ff330-10a8-3414-b09a-6537f240b5b7.roa
Signing time:             Sat 28 Feb 2026 02:00:32 +0000
ROA not before:           Sat 28 Feb 2026 02:00:32 +0000
ROA not after:            Fri 29 May 2026 01:00:32 +0000
asID:                     202
IP address blocks:        142.249.96.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b08b04c4-3d5d-41d5-8263-cd575f4bd2da/b08b04c4-3d5d-41d5-8263-cd575f4bd2da.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b08b04c4-3d5d-41d5-8263-cd575f4bd2da/b08b04c4-3d5d-41d5-8263-cd575f4bd2da.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b08b04c4-3d5d-41d5-8263-cd575f4bd2da.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:02:17:81:bd:18:3f:01:11:31:a1:e6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b08b04c4-3d5d-41d5-8263-cd575f4bd2da
        Validity
            Not Before: Feb 28 02:00:32 2026 GMT
            Not After : May 29 01:00:32 2026 GMT
        Subject: CN=6cd2dddb-77e3-48da-8a21-0976294a8474
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:4d:23:39:6a:79:04:4a:d1:31:35:1f:e2:c7:
                    73:ec:6d:42:c2:df:96:1b:48:aa:82:ee:c2:2b:85:
                    b5:11:2a:93:74:05:c4:60:32:57:c8:21:8d:a4:8e:
                    af:28:42:32:48:49:f7:de:11:08:18:ce:8a:de:f8:
                    f5:61:37:af:a3:6d:db:7d:53:11:0a:90:d2:f8:f6:
                    63:fe:ed:47:68:87:67:cd:14:c7:9f:14:de:30:6b:
                    27:3d:f6:d0:b0:82:18:64:7f:86:fd:74:69:af:3f:
                    9f:90:07:0d:4e:c4:52:e3:5d:1e:6e:2e:ee:b3:b1:
                    b6:40:e1:9b:26:b8:05:3b:0c:df:5e:1f:ad:a9:e8:
                    4a:82:12:b5:53:54:d0:9e:5d:1c:0e:cb:b9:f5:9b:
                    da:31:4b:af:5c:86:06:7c:58:01:c1:ff:af:a5:f8:
                    0b:69:65:be:b2:4a:5e:8d:bb:e3:4d:3d:1e:57:56:
                    15:28:98:a6:c4:40:85:76:f9:ff:6b:be:c9:21:54:
                    0e:3f:67:d8:61:4f:d7:30:2d:37:d8:0c:38:34:aa:
                    ff:74:ae:dd:1d:83:11:bd:75:ae:b4:d0:d0:36:1d:
                    00:d6:36:b5:c5:1f:e6:8e:03:af:ad:22:ae:05:57:
                    63:cf:ce:8b:bd:6a:e1:22:80:2d:b7:cb:b2:87:03:
                    84:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:16:F9:34:C4:9C:F4:AA:34:DE:48:C1:0D:38:37:0B:CC:FD:E0:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b08b04c4-3d5d-41d5-8263-cd575f4bd2da/a47ff330-10a8-3414-b09a-6537f240b5b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b08b04c4-3d5d-41d5-8263-cd575f4bd2da/b08b04c4-3d5d-41d5-8263-cd575f4bd2da.crl

            X509v3 Authority Key Identifier:
                keyid:F6:82:89:44:D0:3B:CE:E1:4A:25:94:4D:E9:67:6A:8F:2C:51:21:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b08b04c4-3d5d-41d5-8263-cd575f4bd2da.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.249.96.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:d2:1d:e8:8c:4f:9a:b4:d5:b1:19:f1:eb:c8:b3:cf:91:7d:
         50:d5:98:b8:b6:de:bb:6a:96:82:6d:ec:eb:c1:16:5b:2b:f5:
         64:36:77:99:9b:3d:60:0d:38:d5:f2:c7:77:77:45:44:b7:4f:
         c9:01:21:29:6d:8d:5c:1d:4e:37:23:51:26:90:6b:9e:cf:38:
         34:76:56:70:f4:b3:64:8d:a2:d2:bc:6a:8c:6e:4a:6c:cf:eb:
         d1:ba:ed:be:ed:3a:02:00:b6:35:d9:41:d0:05:35:ab:b7:a1:
         83:8d:4c:bf:66:ff:2d:f6:ee:97:c3:5a:4d:4f:80:e6:09:07:
         2c:f5:74:67:65:5c:3c:5c:5f:39:85:02:89:0f:5b:71:e6:0a:
         6a:e2:3c:d7:a5:db:46:1a:c6:7c:97:84:b8:fc:f1:f3:02:17:
         0d:76:7b:a8:8a:62:0f:cb:7c:2a:66:db:b5:79:cb:ad:a1:8a:
         8c:11:0e:36:7e:2d:f2:51:14:db:fa:6d:37:cb:5f:0e:df:df:
         da:c1:c8:7c:c4:fa:80:d2:7f:61:bc:a4:b6:25:47:58:56:4f:
         c5:0c:b4:40:09:62:6e:43:82:13:75:57:f2:e2:43:0c:be:6f:
         df:00:dd:7b:65:d8:85:88:5c:21:f7:f5:1e:78:fe:38:85:06:
         da:6d:20:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:35:28 2026 by rpki-client