Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/fc3c9a71-297c-3669-8a10-ecd6cc302677.roa
File:                     fc3c9a71-297c-3669-8a10-ecd6cc302677.roa (raw, json)
Hash identifier:          8B6PBp/Dgg6pAJaMn5e7qVfVpOZL89Q0cKV6FMn0PCA=
Subject key identifier:   76:B4:95:19:47:7B:A4:6A:60:42:DF:FF:A5:44:DE:5F:1C:89:1B:1D
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584CE62CBB7A2765102DD44CBF80
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/fc3c9a71-297c-3669-8a10-ecd6cc302677.roa
Signing time:             Wed 18 Feb 2026 02:00:31 +0000
ROA not before:           Wed 18 Feb 2026 02:00:31 +0000
ROA not after:            Tue 19 May 2026 01:00:31 +0000
asID:                     54253
IP address blocks:        131.186.100.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e6:2c:bb:7a:27:65:10:2d:d4:4c:bf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Feb 18 02:00:31 2026 GMT
            Not After : May 19 01:00:31 2026 GMT
        Subject: CN=1cfccf3a-e70e-492b-99a2-829ea50fdac3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:39:21:50:0a:db:b0:a3:84:6e:c1:65:f6:75:
                    bf:84:91:34:4e:de:6f:a4:98:10:58:64:45:88:20:
                    60:52:67:ad:95:f5:7f:4e:d8:ff:52:2f:a3:ce:ed:
                    89:ab:26:cf:02:90:d5:01:b2:6f:c8:c4:e5:2a:6a:
                    9c:2d:ef:ad:ed:79:0d:7d:24:35:5f:7b:ba:6d:f3:
                    2c:97:ed:11:ad:b7:8f:1e:ae:06:6f:93:74:1b:2e:
                    59:4c:66:1b:8c:5f:d1:5f:dc:2c:9c:e3:52:91:9d:
                    32:de:21:20:1c:4b:04:34:78:e0:89:4d:de:16:69:
                    98:a1:bd:0d:5a:f0:03:1e:f0:95:aa:d4:16:68:a4:
                    e9:5d:1a:43:b5:15:01:e1:c5:ac:29:e3:9a:fd:71:
                    9a:23:60:5e:fd:cd:05:31:f1:06:18:84:3d:da:38:
                    6d:92:d6:b0:32:c9:ef:85:f3:dc:62:b7:5e:5f:25:
                    47:7d:72:e2:36:c9:c2:a3:5c:eb:82:7c:39:7a:76:
                    22:5d:ca:8d:7f:21:e1:a9:b8:57:d3:5f:b5:b7:8d:
                    a1:ba:5e:06:87:ef:9d:40:c3:f2:1a:6f:8e:40:5c:
                    8c:a9:53:2c:a8:8b:f0:ef:6e:8d:fd:82:df:89:09:
                    7a:23:9b:7e:d1:1a:61:b3:49:44:f0:d7:12:17:6c:
                    5a:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:B4:95:19:47:7B:A4:6A:60:42:DF:FF:A5:44:DE:5F:1C:89:1B:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/fc3c9a71-297c-3669-8a10-ecd6cc302677.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.186.100.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:97:38:9f:61:5f:04:56:6a:a5:d8:4a:6b:d3:e5:4b:44:f5:
         0f:bd:8c:71:af:b4:6a:85:b5:1e:bf:01:0a:84:9f:78:3c:77:
         b6:5b:43:02:4e:22:79:be:37:dd:20:92:c2:46:14:32:93:80:
         2a:b5:ae:fa:86:6c:f2:b8:25:66:cd:f0:19:62:44:2f:c7:c1:
         e1:42:c7:33:8c:90:e9:17:18:7d:3e:43:aa:bf:41:6b:50:20:
         a2:28:c1:60:12:55:ba:77:57:5b:8d:b7:6a:4e:0c:39:cf:55:
         8e:c6:a1:64:45:59:4b:b9:c5:17:ec:e1:5b:0e:15:2e:11:e6:
         70:1a:7f:73:52:1a:86:09:c4:14:32:63:d7:f0:32:39:0d:3f:
         9c:b2:19:3c:93:d0:ad:42:bb:74:79:97:29:b2:9f:51:69:48:
         32:ee:b2:0d:39:02:e2:5a:45:68:f5:9e:b8:17:90:2b:89:d0:
         58:c3:5c:1e:90:c6:1c:37:ef:ba:3c:b9:bc:cb:2c:45:0d:2a:
         d3:9d:8a:52:9f:67:61:06:ed:0f:0e:94:8d:da:41:bf:8b:73:
         83:60:3f:be:60:82:49:32:97:41:f5:05:98:dd:56:02:49:ee:
         c8:f0:ce:2e:53:9e:96:e1:08:bf:fb:71:10:74:de:38:88:16:
         21:e2:63:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:12:14 2026 by rpki-client