Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b0b6fd49-a2fb-3145-b906-f79e76981bff.roa
File:                     b0b6fd49-a2fb-3145-b906-f79e76981bff.roa (raw, json)
Hash identifier:          XcANqaKUZu3vyWT02yLq1v2lY/Zt1QBIaHd1maxSGrQ=
Subject key identifier:   B8:DE:24:BC:67:D8:F0:06:04:2F:39:2D:71:82:3A:C7:69:94:B3:F9
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584D02178B7C6070FEEC729C6680
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b0b6fd49-a2fb-3145-b906-f79e76981bff.roa
Signing time:             Sat 28 Feb 2026 02:00:32 +0000
ROA not before:           Sat 28 Feb 2026 02:00:32 +0000
ROA not after:            Fri 29 May 2026 01:00:32 +0000
asID:                     31898
IP address blocks:        148.116.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:02:17:8b:7c:60:70:fe:ec:72:9c:66:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Feb 28 02:00:32 2026 GMT
            Not After : May 29 01:00:32 2026 GMT
        Subject: CN=c829ad75-c19c-4331-b426-ad3986d9bf79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:15:06:51:6b:66:0a:9b:fb:4b:c1:f9:cc:d4:
                    d7:e6:72:45:63:56:ce:9a:89:c3:73:77:65:81:24:
                    73:cc:a3:3b:54:9e:53:e0:ac:b8:68:41:2b:40:ce:
                    4c:fe:1b:d5:67:a7:09:82:7f:0c:dc:d2:fa:45:5b:
                    7c:7d:4f:ce:e0:4e:31:11:eb:a4:ff:0f:a7:4f:8b:
                    7c:15:17:ce:0d:ef:00:ad:ad:7f:ff:a3:6b:fa:57:
                    86:11:cb:78:fb:aa:5a:05:e4:8e:78:0a:b2:fa:47:
                    34:b0:7e:c7:5d:9d:66:e2:db:e9:d6:4f:5c:e7:04:
                    24:d6:f3:04:6b:57:48:a6:79:b6:a4:33:fe:51:5e:
                    d7:51:d7:a3:df:68:39:ba:de:ca:16:98:32:11:52:
                    65:57:53:4e:6d:a8:49:37:92:76:63:86:28:60:11:
                    f1:6c:fa:d5:35:2a:40:28:21:a9:44:dc:26:b2:76:
                    83:2f:5f:e7:69:47:a1:08:a4:f5:e7:b4:f4:80:7a:
                    4e:5e:63:6e:0f:58:0b:bb:9a:ff:56:ae:3a:90:cc:
                    48:ed:18:3a:e2:53:f0:dc:2c:f6:67:85:b0:57:44:
                    19:21:f0:8d:9a:68:d2:bf:0f:fb:4d:b6:a1:bb:53:
                    38:64:a4:68:c6:4d:9c:6a:9c:f6:a3:3c:43:b3:bd:
                    26:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:DE:24:BC:67:D8:F0:06:04:2F:39:2D:71:82:3A:C7:69:94:B3:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b0b6fd49-a2fb-3145-b906-f79e76981bff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.116.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:ee:2a:2b:99:1d:67:82:03:f6:b7:f6:35:06:b0:81:c0:1b:
         4e:35:57:96:d0:c5:b1:eb:a1:99:0d:d5:24:0b:c6:97:db:ee:
         dc:07:d0:12:4e:75:8c:73:a0:b3:6a:f7:b7:45:7e:c0:68:2a:
         51:ab:16:99:2d:59:00:06:29:2e:33:fa:a4:bb:a1:11:6f:75:
         ef:c3:e9:03:fa:a8:0f:38:8c:61:0d:85:b3:1d:14:57:65:6a:
         dd:e8:c3:d1:89:e6:b1:77:22:39:d0:53:a2:3a:07:a6:f6:53:
         6a:21:5f:d4:f0:76:4c:9e:97:18:9b:f4:d2:a8:84:37:ac:bf:
         99:da:d5:88:5b:0e:35:c3:81:6a:b3:1a:b3:db:73:49:a4:30:
         db:da:8e:1e:b0:d9:10:e0:7c:d1:1a:40:b5:fe:5e:28:cd:38:
         2a:21:54:db:3e:0e:e8:1a:01:d7:52:e7:16:d9:38:20:a9:42:
         3a:a6:01:ac:d4:b0:dc:2f:78:34:b1:3d:c7:02:48:09:89:c7:
         96:a7:39:2c:0d:ae:4a:a9:35:39:ee:d0:c6:fb:dd:89:88:1e:
         a0:1f:74:7b:64:33:42:cb:9e:a5:16:c4:85:1c:71:29:3e:fd:
         f9:57:be:31:67:56:6a:86:50:12:b6:ab:a5:48:0a:c7:62:48:
         b3:79:a3:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:05:22 2026 by rpki-client