Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/05ab8139-89d9-35ad-bd35-66f27355974f.roa
File:                     05ab8139-89d9-35ad-bd35-66f27355974f.roa (raw, json)
Hash identifier:          UN40IHL6xzuy3oJb/411KZY+REB+pTzWOmMrbyfgWx8=
Subject key identifier:   1F:E2:2C:B0:C6:13:C0:DC:3A:A1:5F:92:CB:81:61:16:D4:CB:00:A5
Certificate issuer:       /CN=bf1c119f-5c08-4663-b550-1d531c2fe54f
Certificate serial:       010D0C9F4328584CB121C1273E250BE0BC25A0C0
Authority key identifier: AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/05ab8139-89d9-35ad-bd35-66f27355974f.roa
Signing time:             Fri 30 Jan 2026 02:00:31 +0000
ROA not before:           Fri 30 Jan 2026 02:00:31 +0000
ROA not after:            Thu 30 Apr 2026 01:00:31 +0000
asID:                     14618
IP address blocks:        155.226.254.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Feb 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b1:21:c1:27:3e:25:0b:e0:bc:25:a0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf1c119f-5c08-4663-b550-1d531c2fe54f
        Validity
            Not Before: Jan 30 02:00:31 2026 GMT
            Not After : Apr 30 01:00:31 2026 GMT
        Subject: CN=7943ee84-0806-4391-8dd8-aae329a68889
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:69:d0:c9:e7:a6:de:99:ed:40:57:10:f0:34:
                    40:28:43:01:78:e9:57:b3:18:cb:82:99:f0:a0:12:
                    ab:bb:c4:b2:10:8f:47:12:32:46:f9:ed:0e:35:7d:
                    e6:7f:b9:00:e6:b8:2e:d9:bc:f4:84:19:2a:12:92:
                    02:39:ee:98:4f:76:6a:58:6a:e1:23:b7:10:64:c2:
                    01:f3:c9:65:81:de:c9:1f:28:0f:e0:6b:83:80:ca:
                    16:71:cd:4e:81:00:fb:21:0a:0c:c0:65:51:bf:65:
                    e4:3b:95:ee:71:ca:85:95:9f:62:2c:09:17:4b:35:
                    1f:74:13:8d:63:70:02:fc:5f:92:5a:03:52:45:7f:
                    c0:c5:15:8f:c1:34:4c:60:4a:dc:25:c5:21:64:18:
                    1f:17:f7:86:93:eb:c1:b2:d1:aa:fc:a4:47:42:aa:
                    aa:02:03:81:85:d6:e4:14:0a:d4:03:68:94:ab:8b:
                    f5:d1:96:a4:e6:36:c1:18:80:24:47:6f:22:31:bc:
                    76:8d:82:2a:7d:bf:9b:78:20:c2:eb:1d:c2:0a:ea:
                    79:ab:89:0c:a3:2c:79:3a:a3:03:3f:e2:c6:f7:72:
                    ce:70:d8:e0:31:7a:a6:d9:b3:89:9d:53:ca:ce:37:
                    9e:d0:58:f8:15:71:77:99:43:05:6b:0a:7c:3b:8b:
                    ee:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:E2:2C:B0:C6:13:C0:DC:3A:A1:5F:92:CB:81:61:16:D4:CB:00:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/05ab8139-89d9-35ad-bd35-66f27355974f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl

            X509v3 Authority Key Identifier:
                keyid:AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.226.254.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d5:bc:93:86:f8:ce:4b:2d:a1:85:cf:9e:36:9c:ae:fe:99:6b:
         70:ed:48:b4:d7:88:04:68:cd:b9:05:3b:bd:69:17:a0:aa:01:
         d0:92:e0:13:6b:9c:50:76:da:f5:48:8e:ae:59:22:df:b8:7f:
         7d:bb:52:8d:9c:7f:b0:b6:0e:65:57:7a:ef:6a:31:b1:5f:74:
         df:10:ca:67:4a:63:97:b3:f5:93:c2:ab:e0:21:8e:7c:13:a9:
         f7:65:fe:74:68:b5:61:71:0e:cb:ac:d4:66:c3:0a:7c:f3:93:
         57:2b:39:f7:f2:a5:6b:21:27:aa:21:a7:e3:9b:d7:8a:a8:d0:
         a3:86:1a:9d:b0:4d:d0:41:c2:b3:56:1a:8d:ae:30:b0:e5:28:
         02:4d:c0:4a:5d:39:ca:07:16:18:26:b1:ac:e7:48:72:65:4a:
         16:b5:08:17:64:a2:fd:87:57:ed:1e:58:b3:d6:82:02:cb:15:
         11:5d:1d:3f:30:75:5a:39:ce:f9:d9:1a:08:97:23:4a:61:5d:
         7b:a2:cf:a2:d0:da:cb:f7:bb:63:dd:60:ac:99:2a:94:f3:26:
         5f:9a:ce:69:8a:cb:07:c9:90:ca:7c:62:69:a1:d0:1c:be:1f:
         9a:75:a7:1e:12:21:dd:f2:e7:5d:25:42:c7:e9:58:c1:a4:0a:
         e4:6b:ab:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 04:54:26 2026 by rpki-client