Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b450e5ef-41c2-4834-b6b3-6d1a1efe28f0/197ca69c-f6d5-3b63-ae60-623cff8b7efb.roa
File:                     197ca69c-f6d5-3b63-ae60-623cff8b7efb.roa (raw, json)
Hash identifier:          qrnlKeoJeCdfNn+Lf221CywXKtXrvjbffTOzQ2fXcao=
Subject key identifier:   02:CD:BE:16:51:5C:9B:A7:48:75:5F:D7:C2:B9:6A:8C:F6:CE:EF:02
Certificate issuer:       /CN=b450e5ef-41c2-4834-b6b3-6d1a1efe28f0
Certificate serial:       010D0C9F4328584CB121D6CD1E429FA60B9801B0
Authority key identifier: 44:70:52:90:13:82:B9:35:9C:3D:3F:EF:73:C2:83:91:9B:95:22:BD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b450e5ef-41c2-4834-b6b3-6d1a1efe28f0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b450e5ef-41c2-4834-b6b3-6d1a1efe28f0/197ca69c-f6d5-3b63-ae60-623cff8b7efb.roa
Signing time:             Fri 30 Jan 2026 02:00:31 +0000
ROA not before:           Fri 30 Jan 2026 02:00:31 +0000
ROA not after:            Thu 30 Apr 2026 01:00:31 +0000
asID:                     557
IP address blocks:        209.222.192.0/19 maxlen: 24
                          2610:48::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b450e5ef-41c2-4834-b6b3-6d1a1efe28f0/b450e5ef-41c2-4834-b6b3-6d1a1efe28f0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b450e5ef-41c2-4834-b6b3-6d1a1efe28f0/b450e5ef-41c2-4834-b6b3-6d1a1efe28f0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b450e5ef-41c2-4834-b6b3-6d1a1efe28f0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Feb 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b1:21:d6:cd:1e:42:9f:a6:0b:98:01:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b450e5ef-41c2-4834-b6b3-6d1a1efe28f0
        Validity
            Not Before: Jan 30 02:00:31 2026 GMT
            Not After : Apr 30 01:00:31 2026 GMT
        Subject: CN=a7bc6313-fce1-4840-91ef-aaf79aec7f72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:3d:de:44:11:cb:a1:0b:58:44:08:0a:d5:c9:
                    e8:98:fe:02:22:5b:7c:a7:af:70:d6:fe:11:17:5c:
                    e2:d1:ec:29:11:60:42:d4:10:bb:37:47:4e:69:ce:
                    53:b9:66:1c:d8:1d:bd:2c:bc:73:28:92:a7:66:c3:
                    fe:dd:1a:69:97:7d:c1:01:77:2d:f4:09:44:bc:58:
                    b7:32:12:11:7e:4d:51:4f:99:3a:af:fd:f7:ca:ee:
                    f3:d1:28:d5:35:6e:74:ff:d3:15:3d:be:27:9f:7b:
                    3d:6b:a5:a9:0c:ef:76:61:f3:e1:44:5b:e2:89:b9:
                    ca:04:f4:1a:82:64:1f:b8:bc:a7:d5:40:f0:e0:f3:
                    86:27:15:cf:22:4f:61:25:76:4f:41:b5:2d:a5:09:
                    06:fa:d2:70:98:53:3e:7b:29:cf:cd:79:43:92:d1:
                    85:d8:5b:f3:e5:e4:6a:8b:78:62:e0:c9:4a:04:7f:
                    7e:76:55:67:23:52:94:66:2b:1d:59:07:8b:fc:98:
                    5c:4f:0e:17:a1:96:06:ca:56:74:23:04:9e:52:3e:
                    b6:30:ee:13:f9:5c:75:0d:3f:ac:2d:e2:3d:45:9d:
                    3f:fb:55:5f:a7:fa:09:e0:a5:e1:88:14:00:36:d8:
                    e1:47:44:2d:32:50:41:1c:c0:72:63:9f:8a:84:f7:
                    ac:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:CD:BE:16:51:5C:9B:A7:48:75:5F:D7:C2:B9:6A:8C:F6:CE:EF:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b450e5ef-41c2-4834-b6b3-6d1a1efe28f0/197ca69c-f6d5-3b63-ae60-623cff8b7efb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b450e5ef-41c2-4834-b6b3-6d1a1efe28f0/b450e5ef-41c2-4834-b6b3-6d1a1efe28f0.crl

            X509v3 Authority Key Identifier:
                keyid:44:70:52:90:13:82:B9:35:9C:3D:3F:EF:73:C2:83:91:9B:95:22:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b450e5ef-41c2-4834-b6b3-6d1a1efe28f0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.222.192.0/19
                IPv6:
                  2610:48::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:34:48:83:25:11:74:8f:d4:f5:8c:3c:b4:37:75:43:49:bf:
         5d:f9:ff:0c:d6:f0:40:d4:d2:58:59:a7:13:42:0f:14:97:e6:
         a9:12:ab:b5:48:73:2e:bb:73:73:3d:81:c4:07:4d:f3:4b:57:
         05:e7:68:ef:36:1f:bc:8b:58:12:9f:50:53:3a:18:d9:69:4c:
         fd:19:cc:98:97:40:26:a2:1b:cf:16:25:09:65:c7:89:ec:75:
         ff:dd:45:0c:c2:e1:92:76:22:b4:2a:d4:8b:24:58:ba:ee:37:
         3e:60:2c:22:58:92:27:38:7e:2a:aa:2c:6b:61:18:3f:5d:d4:
         51:8c:9b:30:9d:29:a4:81:76:ba:1a:85:16:d3:ce:c5:26:7e:
         17:82:d4:83:37:a2:eb:d9:fd:69:fa:43:d8:f8:79:bf:9c:f5:
         7c:ba:36:3e:e5:be:6c:58:0d:fb:a3:f6:ea:a1:a3:32:a2:71:
         9b:c3:4c:c8:f8:20:b9:9c:2f:66:38:b6:1c:65:c0:a8:5e:10:
         5b:23:19:2c:80:fe:58:25:83:5f:a8:9e:1a:de:8b:1b:8e:1d:
         4c:80:10:1c:29:63:21:e5:61:ab:10:f4:d6:8d:fa:99:0d:e9:
         2f:39:3b:41:b7:f5:8e:c9:68:d9:a6:eb:b7:f0:9b:b5:4d:8f:
         9e:ef:f3:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 06:46:00 2026 by rpki-client