Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c5bf81a5-6be7-3caf-87dd-1ae88434e6fa.roa
File:                     c5bf81a5-6be7-3caf-87dd-1ae88434e6fa.roa (raw, json)
Hash identifier:          6AdtMtrV0ulwsOPWQSVgwj1gfSciP0dUjiaP3AWUOdE=
Subject key identifier:   C0:D5:84:81:2F:D3:7E:43:ED:6F:75:9C:9D:3D:DC:BC:94:69:67:7D
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584D02178B59266E9001408C6B00
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c5bf81a5-6be7-3caf-87dd-1ae88434e6fa.roa
Signing time:             Sat 28 Feb 2026 02:00:32 +0000
ROA not before:           Sat 28 Feb 2026 02:00:32 +0000
ROA not after:            Fri 29 May 2026 01:00:32 +0000
asID:                     31898
IP address blocks:        148.116.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:02:17:8b:59:26:6e:90:01:40:8c:6b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Feb 28 02:00:32 2026 GMT
            Not After : May 29 01:00:32 2026 GMT
        Subject: CN=f48cddb7-6025-49a3-a134-f29ab352ba0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:6e:2f:cb:a9:99:3d:cc:6f:45:52:1d:56:92:
                    51:92:8d:09:f0:15:94:b7:a1:1b:9c:7d:08:11:cb:
                    b9:f4:81:d5:0d:c3:f9:88:26:61:ef:bd:04:bc:d5:
                    07:37:4b:fa:0a:65:a7:f7:87:37:10:c2:ee:2c:4b:
                    98:dc:18:37:92:93:94:e0:a5:7b:a5:e3:92:dd:a1:
                    1c:43:ac:a5:ee:5e:5d:30:f2:8f:fa:0a:60:0a:e2:
                    b0:82:cf:6c:27:82:89:e9:ed:34:9d:7e:90:bf:25:
                    62:53:17:98:af:72:b9:cb:ee:35:80:c0:8e:94:71:
                    d7:e9:66:be:f6:20:77:39:01:f9:d4:b8:11:02:c0:
                    f0:6e:5f:a8:bb:51:ec:b9:cb:e3:b6:5b:e9:1e:38:
                    80:47:32:f5:7a:34:02:fc:49:76:b8:bb:b4:21:2b:
                    3c:07:52:16:b2:da:84:55:f6:57:5a:c7:11:47:e8:
                    fe:06:a2:7d:7f:fd:38:0e:26:7f:28:a5:f9:9e:ac:
                    fe:0e:b0:29:6f:22:d8:d8:7c:9c:03:81:b1:d4:54:
                    9d:56:e9:46:b0:8a:59:24:21:e8:a9:04:fa:41:9f:
                    d7:2c:00:09:9a:4e:11:d1:c3:2f:49:53:81:d7:8a:
                    1f:f3:ae:01:a8:47:fd:91:12:44:34:f0:9d:2d:5d:
                    d6:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:D5:84:81:2F:D3:7E:43:ED:6F:75:9C:9D:3D:DC:BC:94:69:67:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c5bf81a5-6be7-3caf-87dd-1ae88434e6fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.116.103.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:0e:4c:e8:d3:59:12:a3:dd:af:73:70:33:f7:6f:1f:ce:be:
         20:33:a5:0d:a8:6b:ea:67:3d:32:c3:13:0b:4e:ed:73:b2:88:
         20:2c:24:30:45:2d:19:bc:e6:bb:56:b2:b0:82:78:13:5e:8c:
         78:7e:67:39:bd:28:30:bb:b0:c6:8c:b3:33:46:2e:ce:84:6a:
         9c:3c:30:da:4e:d4:21:23:7b:43:d5:44:91:4d:a7:c3:d5:4d:
         d9:51:4f:76:e8:2f:68:ef:c7:f5:e6:11:8e:ff:24:ed:e3:0e:
         f9:d0:86:ae:60:63:f3:0b:3c:a1:1d:19:80:ef:e7:a2:5e:f8:
         e6:52:08:69:b8:82:7c:31:d6:8f:0e:b8:a4:a5:16:26:d2:9b:
         82:c3:6e:61:71:31:e4:4c:ae:1d:a6:5a:11:c0:02:53:df:78:
         83:c0:09:85:fc:d9:b1:e5:2b:1f:b3:d2:a7:98:a7:95:7f:9b:
         c6:be:a3:0d:5e:d5:7b:30:a3:ab:fd:69:df:4a:02:c4:1d:a1:
         1f:b7:84:25:15:2e:e5:ac:8f:69:cc:e2:c9:e2:04:c2:fb:b9:
         31:0d:e0:92:08:5a:34:d3:bf:9a:08:cb:40:1f:12:66:5b:e7:
         9d:bd:24:18:79:38:10:d1:1f:ff:61:f6:96:35:6c:5a:df:2d:
         30:d1:0b:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:01:22 2026 by rpki-client