Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e609e2ce-1acf-3bd4-b7be-f0da3b3d9d90.roa
File:                     e609e2ce-1acf-3bd4-b7be-f0da3b3d9d90.roa (raw, json)
Hash identifier:          gZ6bQTZo+rdK9P+NvkYoi3JagRmiWZn9KOH2YfN0Wfk=
Subject key identifier:   B3:76:55:B3:47:3A:AD:05:E5:96:02:09:77:59:7B:45:2C:DB:43:D9
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584D02178A7D955AD830720BA880
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e609e2ce-1acf-3bd4-b7be-f0da3b3d9d90.roa
Signing time:             Sat 28 Feb 2026 02:00:32 +0000
ROA not before:           Sat 28 Feb 2026 02:00:32 +0000
ROA not after:            Fri 29 May 2026 01:00:32 +0000
asID:                     31898
IP address blocks:        168.110.160.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:02:17:8a:7d:95:5a:d8:30:72:0b:a8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Feb 28 02:00:32 2026 GMT
            Not After : May 29 01:00:32 2026 GMT
        Subject: CN=6d69be51-6174-4266-b8ef-d2d3573be780
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:5f:ea:d9:c1:ae:17:23:6c:02:ea:a7:57:df:
                    d5:5f:11:0a:d9:94:70:cf:f9:66:9c:01:03:3f:ad:
                    3a:e8:a0:59:8a:8e:11:04:54:1c:fc:83:9e:16:7c:
                    c8:e5:8f:e9:3f:29:14:a3:b3:98:0f:87:a1:0b:ef:
                    73:af:17:5f:bb:a5:ae:5b:80:28:9f:ee:4f:dd:6a:
                    8a:57:23:2a:57:90:da:61:d5:3a:b7:e2:f7:f0:24:
                    9a:0b:b8:14:1d:de:f1:50:b1:8e:12:66:ec:05:24:
                    29:f4:db:9c:29:a7:75:03:6e:bf:a5:37:8d:6c:82:
                    7e:7a:65:22:53:15:2e:33:d1:85:c5:b3:84:2c:e5:
                    4f:c2:a6:e5:e1:5e:2a:bb:39:2c:5b:b8:fa:98:a5:
                    11:7d:3c:44:ef:3a:90:da:43:87:52:b9:a8:e4:78:
                    3c:e4:4a:0d:bd:c4:9d:f2:68:64:9d:d3:6f:c5:fc:
                    49:40:42:8b:ad:65:ca:7c:e7:67:3f:3d:b5:ec:a2:
                    79:4a:1c:43:bc:fc:3c:88:0b:16:3e:97:29:ac:f3:
                    16:89:3e:59:1a:2c:f2:89:81:49:61:ac:07:0e:01:
                    86:9a:b1:fb:11:5a:48:ca:2e:2c:16:06:f1:bb:86:
                    4a:d8:69:41:85:f3:a6:07:d8:49:c4:96:f3:1a:6a:
                    1a:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:76:55:B3:47:3A:AD:05:E5:96:02:09:77:59:7B:45:2C:DB:43:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e609e2ce-1acf-3bd4-b7be-f0da3b3d9d90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.110.160.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:91:43:e4:9a:6b:6e:8d:cb:12:a8:40:f7:a9:bb:49:6d:cb:
         5d:fd:02:07:ba:d3:7d:61:32:15:13:d1:da:10:d7:34:a7:fc:
         3d:5b:f3:83:29:a1:cc:4f:54:bb:dd:2a:ad:a7:6f:eb:ae:f6:
         86:94:0e:1b:45:85:70:9d:7e:ee:7e:b2:c2:41:e6:8b:d2:fb:
         c0:16:c6:4d:50:9e:82:33:80:ea:64:fb:15:7a:67:97:35:85:
         9f:3a:58:54:4a:07:56:0d:f7:9a:96:35:f5:fd:3a:be:bf:71:
         20:be:15:09:6b:c1:11:3e:34:45:47:06:13:57:3b:b1:f5:4f:
         5e:7d:1c:15:9a:6d:4c:ee:5c:57:22:54:59:04:5e:b3:90:1b:
         eb:b5:4b:34:73:66:95:89:f7:9b:68:4e:f9:c7:a5:5e:e8:0e:
         2d:1a:3b:60:58:27:a2:fc:05:af:55:32:7e:c8:61:01:68:cf:
         4b:69:a9:93:6f:62:f5:15:3d:99:fe:0b:e2:2a:2b:ab:f9:c2:
         56:c7:b0:7a:5d:6f:c5:04:95:63:e8:2f:44:6f:c1:c8:8b:dc:
         30:46:24:d1:49:54:27:c1:1e:01:a2:80:94:48:6b:16:c8:eb:
         d7:9d:86:41:b2:9c:60:6c:da:5f:b6:e0:22:85:4c:43:37:c1:
         a0:26:8e:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:52:02 2026 by rpki-client