Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/081e16c7-6867-37c7-a326-455047ded562.roa
File:                     081e16c7-6867-37c7-a326-455047ded562.roa (raw, json)
Hash identifier:          WEMQXR0sMDYm2ff8bjsLo1H3DhTLgLJ+FiIXlcKEJU8=
Subject key identifier:   AB:B7:FE:9A:2A:7F:9C:BE:D3:60:8D:1D:4D:1A:20:1A:53:2F:87:65
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584CE62CAC1511DF6D2BCF385860
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/081e16c7-6867-37c7-a326-455047ded562.roa
Signing time:             Wed 18 Feb 2026 02:00:31 +0000
ROA not before:           Wed 18 Feb 2026 02:00:31 +0000
ROA not after:            Tue 19 May 2026 01:00:31 +0000
asID:                     54253
IP address blocks:        151.104.148.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e6:2c:ac:15:11:df:6d:2b:cf:38:58:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Feb 18 02:00:31 2026 GMT
            Not After : May 19 01:00:31 2026 GMT
        Subject: CN=cc031f56-fe7c-459a-90c4-0550c5023e9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:27:13:43:1b:b9:1f:64:b1:66:b8:9b:93:17:
                    cb:78:2a:00:55:d1:ca:14:73:1b:6f:39:3e:42:d9:
                    58:38:2c:07:7e:ff:80:92:2d:b1:cf:b9:e7:9d:13:
                    35:50:9e:92:a8:37:2d:9c:70:9e:70:0c:c1:53:9a:
                    2a:82:ba:e3:03:2e:f3:b7:05:44:c8:3f:33:d2:f7:
                    15:dc:44:62:fe:15:60:01:49:fa:26:6a:0a:f7:54:
                    07:e1:d9:61:83:90:e0:9e:32:85:cc:2b:da:86:fa:
                    bc:08:06:79:24:56:fd:6f:87:c8:c6:0a:28:8e:36:
                    71:c3:3a:39:ad:b0:26:fa:3f:e4:f9:53:c3:6d:cb:
                    00:e7:a2:8c:ea:7e:6f:13:3d:b6:d6:3a:8d:6e:56:
                    1f:82:f6:70:86:8d:ea:af:ad:2f:4c:43:98:89:f0:
                    04:d5:9f:ca:14:45:20:ea:d8:42:0a:61:c4:0b:81:
                    3d:a8:55:5c:a0:d1:d3:6e:16:b3:ce:10:6e:a4:c6:
                    6c:f4:17:44:8a:b2:02:f9:35:01:c1:8d:74:78:c1:
                    44:58:08:0d:f0:a0:3d:c7:8e:f5:ac:d1:5a:e9:a3:
                    33:f2:bd:d1:f3:20:c3:d5:72:6e:ff:ce:63:79:ee:
                    70:42:5b:28:9b:24:0f:20:2f:bd:9b:44:ce:40:54:
                    9d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:B7:FE:9A:2A:7F:9C:BE:D3:60:8D:1D:4D:1A:20:1A:53:2F:87:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/081e16c7-6867-37c7-a326-455047ded562.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.104.148.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:84:16:c8:ee:1d:a4:32:39:f8:ac:f3:d4:e9:68:59:95:f4:
         39:21:3d:78:40:b7:a4:b3:91:e4:f1:f6:53:98:2d:e1:ab:32:
         c5:f8:63:91:b4:25:0e:80:88:54:e4:3f:0f:6b:e2:2f:a4:b6:
         80:85:3f:81:49:9d:96:51:da:c8:0f:81:ae:57:98:4d:8a:7f:
         d4:6f:36:79:ef:e3:a8:24:c1:d2:f2:1d:ab:2e:26:32:fa:9a:
         e7:39:0e:ea:dc:e5:08:ee:cb:72:97:7f:70:38:5e:28:35:f8:
         ea:31:56:29:44:5f:f3:65:8f:5a:87:99:32:96:f0:ee:fc:e4:
         33:aa:e7:54:2c:cf:73:42:24:18:42:6b:35:86:64:4c:35:5c:
         29:39:41:e4:a2:73:3d:2f:3a:0c:7a:db:fc:cf:35:66:a4:94:
         94:76:cc:88:db:d9:f2:d7:98:83:a4:40:76:c6:90:d0:aa:48:
         c3:86:55:03:7e:cc:9d:0c:38:c9:77:17:d8:d0:ef:2f:52:5b:
         06:4e:ae:ca:ef:82:f2:7b:a3:3a:ca:ec:57:ab:d3:7c:da:a8:
         32:61:05:1b:ad:8b:58:6d:ea:ea:fb:24:8a:fe:80:f9:65:c8:
         bc:10:a7:b3:d1:b2:23:40:88:3f:b3:c5:86:2f:ac:6a:59:a5:
         aa:c9:e6:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:33:50 2026 by rpki-client