Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8bd77619-03d2-3f04-af58-ca0ca2f4b534.roa
File:                     8bd77619-03d2-3f04-af58-ca0ca2f4b534.roa (raw, json)
Hash identifier:          9C6do9x8SNVE0wusNyML7UwpKZvdaz8ypyBolTZvFFg=
Subject key identifier:   78:89:D6:B4:C1:C6:08:2D:CE:4D:3C:77:40:D7:C6:24:41:3C:15:B5
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584CE62CB0DE41DBF7E4E1F4BE00
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8bd77619-03d2-3f04-af58-ca0ca2f4b534.roa
Signing time:             Wed 18 Feb 2026 02:00:31 +0000
ROA not before:           Wed 18 Feb 2026 02:00:31 +0000
ROA not after:            Tue 19 May 2026 01:00:31 +0000
asID:                     54253
IP address blocks:        134.185.232.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e6:2c:b0:de:41:db:f7:e4:e1:f4:be:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Feb 18 02:00:31 2026 GMT
            Not After : May 19 01:00:31 2026 GMT
        Subject: CN=9edb1d30-68b9-44c4-81d7-96f76cd4bb01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:e7:8e:c8:61:ee:c0:b6:12:4c:09:89:86:08:
                    3e:81:33:2f:28:52:c6:75:09:c7:57:9c:69:67:1a:
                    ea:c5:7f:21:10:d9:d3:ed:41:65:f8:63:0b:e7:39:
                    4e:a6:68:64:8b:c8:6b:67:95:09:ec:29:87:b5:b1:
                    bb:27:c8:7f:d8:76:7b:e9:1f:7f:2b:3a:65:fa:b4:
                    e4:17:0e:a1:94:c2:b1:17:0e:df:ba:41:1a:2b:a4:
                    a3:8e:31:01:fa:e8:bd:1e:33:98:80:97:ae:d6:13:
                    0d:71:09:15:f6:fe:5a:9c:f9:7b:64:db:85:f2:3c:
                    fb:9e:54:16:d4:c7:78:fa:a9:78:1a:1a:60:7b:de:
                    a4:95:b7:71:ac:87:7c:c2:01:f4:7d:6c:0f:d9:63:
                    1d:19:2d:58:3d:2b:e8:c1:7f:37:25:d7:ca:fa:17:
                    08:08:06:dd:c1:c4:d5:a9:67:7b:b4:bd:b9:4e:2e:
                    0d:6e:92:96:a3:f4:d4:c9:c5:98:19:74:0d:ab:35:
                    ec:09:dc:6a:48:a2:91:31:7c:da:b8:7c:fa:0c:af:
                    3f:8a:25:31:f4:ec:c7:c6:c7:25:4b:bd:e9:4a:5d:
                    25:cd:81:44:28:eb:1a:ae:aa:01:42:85:ee:c9:e9:
                    1f:9e:2c:17:c7:0c:2e:cb:27:4e:d2:79:2f:b7:2c:
                    db:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:89:D6:B4:C1:C6:08:2D:CE:4D:3C:77:40:D7:C6:24:41:3C:15:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8bd77619-03d2-3f04-af58-ca0ca2f4b534.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.185.232.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:f0:c5:55:12:1f:b8:42:10:cd:83:bb:ee:f5:d2:4c:85:4e:
         68:c9:f4:bf:6e:cc:4b:5b:d1:a5:07:cd:4f:f4:ce:ca:06:82:
         86:57:0a:17:48:ab:05:1c:f9:a2:24:2d:66:81:99:17:2c:08:
         fb:eb:ae:57:ac:a9:4c:a9:d3:fd:fe:dc:de:e3:67:79:21:0f:
         75:98:17:c8:3b:b4:50:fe:7c:d4:74:e0:06:ee:cc:03:15:2a:
         52:ba:78:ec:47:6c:5d:e3:ce:ff:2c:5a:9d:16:10:8a:90:1d:
         2e:b4:ea:19:fc:e5:82:4f:3f:df:7b:34:5e:df:74:d7:ab:5a:
         d6:1b:24:e5:ff:e6:90:f0:43:db:47:a9:03:78:7c:b0:6e:78:
         7d:08:e9:ec:7b:41:e5:14:d4:e6:31:c4:b4:f1:06:d2:1a:57:
         64:57:74:78:29:86:a5:37:c1:b7:52:7c:e9:d4:82:63:8d:fe:
         6c:d3:9e:16:4b:63:1c:2b:df:3b:33:d3:1f:cc:bc:ee:8f:dd:
         b6:ca:ce:bc:21:b9:b4:86:33:aa:18:95:f3:37:d5:0d:98:e1:
         41:99:f9:ef:9a:33:99:13:83:67:cd:a0:3f:c9:e2:8b:a8:dd:
         a4:a1:32:c9:20:81:e0:48:4d:d6:87:23:31:fb:f5:b0:46:a1:
         7c:1a:1c:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:33:03 2026 by rpki-client