Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b7ac9cc8-4173-45cf-bc59-200a8d6d9b36/8b48a01c-43a6-3fec-9950-67a40504b55d.roa
File:                     8b48a01c-43a6-3fec-9950-67a40504b55d.roa (raw, json)
Hash identifier:          IqKUmRgi7HCqL6BZ86ngWcXwg7t5L3H28j6ASoKsEew=
Subject key identifier:   0F:E6:57:14:2D:1A:E8:F3:3E:BE:3D:76:76:1F:5D:CD:99:E8:65:74
Certificate issuer:       /CN=b7ac9cc8-4173-45cf-bc59-200a8d6d9b36
Certificate serial:       010D0C9F4328584D00B25199EE10347338C0DB00
Authority key identifier: B7:E1:11:80:E3:B1:3C:E1:0B:71:DF:DF:FD:00:0E:83:83:40:11:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b7ac9cc8-4173-45cf-bc59-200a8d6d9b36.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b7ac9cc8-4173-45cf-bc59-200a8d6d9b36/8b48a01c-43a6-3fec-9950-67a40504b55d.roa
Signing time:             Fri 27 Feb 2026 14:00:40 +0000
ROA not before:           Fri 27 Feb 2026 14:00:40 +0000
ROA not after:            Thu 28 May 2026 13:00:40 +0000
asID:                     395064
IP address blocks:        140.161.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b7ac9cc8-4173-45cf-bc59-200a8d6d9b36/b7ac9cc8-4173-45cf-bc59-200a8d6d9b36.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b7ac9cc8-4173-45cf-bc59-200a8d6d9b36/b7ac9cc8-4173-45cf-bc59-200a8d6d9b36.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b7ac9cc8-4173-45cf-bc59-200a8d6d9b36.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:00:b2:51:99:ee:10:34:73:38:c0:db:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7ac9cc8-4173-45cf-bc59-200a8d6d9b36
        Validity
            Not Before: Feb 27 14:00:40 2026 GMT
            Not After : May 28 13:00:40 2026 GMT
        Subject: CN=675bf2ff-ee8b-4c72-a6bf-5dd82a62bd7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:57:e7:75:13:15:e1:d6:fe:6a:1d:51:f3:cc:
                    76:99:e1:ef:a8:8d:11:58:8f:d5:b1:3e:58:3a:36:
                    25:bd:31:43:38:c3:6e:e8:19:37:e7:54:e2:f8:bd:
                    b0:3d:75:01:b5:63:56:f7:28:eb:a7:dc:55:d7:87:
                    6e:ec:55:9c:49:6b:c3:c1:b5:ae:2d:df:06:a3:ae:
                    78:17:d3:6a:03:91:27:13:7a:f5:3f:86:bc:bf:49:
                    e4:31:c5:f6:68:0a:a0:bc:23:34:64:55:c9:46:d2:
                    5e:65:57:13:78:ee:93:7a:29:be:88:80:ba:fa:0d:
                    0a:e5:8b:dc:4e:0e:d2:7d:79:cb:65:0f:ab:ad:fa:
                    f1:02:eb:d9:56:2c:4d:bb:de:af:49:53:3f:e5:b4:
                    10:1a:b1:ef:1d:ab:92:cb:c3:25:90:50:46:70:b5:
                    9b:f6:0d:37:fb:64:7c:62:6f:70:2e:ad:b8:9e:a8:
                    28:bb:6d:bb:dc:bd:14:9c:9a:d1:18:b4:ca:b0:57:
                    10:be:36:b9:10:fd:53:d5:53:a7:72:6e:c4:df:6d:
                    3a:7b:fe:98:16:62:dc:6f:1e:fe:5f:f5:ed:2b:f8:
                    0a:26:13:4b:ec:c3:9b:d8:15:3c:e1:16:ed:c7:1e:
                    7b:e2:c6:ee:f7:7f:2e:9d:0a:4d:09:7a:fd:34:9e:
                    c9:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:E6:57:14:2D:1A:E8:F3:3E:BE:3D:76:76:1F:5D:CD:99:E8:65:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b7ac9cc8-4173-45cf-bc59-200a8d6d9b36/8b48a01c-43a6-3fec-9950-67a40504b55d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b7ac9cc8-4173-45cf-bc59-200a8d6d9b36/b7ac9cc8-4173-45cf-bc59-200a8d6d9b36.crl

            X509v3 Authority Key Identifier:
                keyid:B7:E1:11:80:E3:B1:3C:E1:0B:71:DF:DF:FD:00:0E:83:83:40:11:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b7ac9cc8-4173-45cf-bc59-200a8d6d9b36.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.161.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:1a:4b:c1:48:e0:bc:5d:8a:20:f6:44:a4:11:32:22:ef:e0:
         3f:be:df:d5:0d:92:12:2f:f2:d8:e7:25:d5:f9:56:e0:0a:1d:
         40:5a:c0:5b:b4:d7:8c:9c:cb:28:62:80:d9:b5:2e:b0:0d:8f:
         13:3a:52:3f:d7:3a:5b:7f:e7:5b:ce:3d:6a:a8:c5:5e:35:e6:
         c1:b9:74:0c:8a:69:fa:1a:c0:13:20:b2:3e:65:97:5e:e9:3b:
         5a:19:ef:35:98:79:b2:8d:ec:11:eb:b2:33:89:20:0a:b2:d0:
         47:e4:f7:7f:2d:14:1f:00:87:4e:e4:80:8f:15:2b:f9:41:db:
         37:80:c3:73:18:14:e0:08:11:fe:dd:ef:db:81:f8:26:2b:c4:
         68:3a:0b:7e:ee:59:0f:13:ec:a3:81:d4:ba:dd:25:3c:92:4c:
         68:76:48:8f:5e:33:1c:b7:c5:47:f8:0f:fe:99:54:4c:a3:2a:
         72:93:0f:3a:7d:3a:c9:95:bf:31:89:a2:5e:02:dc:3c:1c:b0:
         8e:db:82:8a:c1:d7:70:88:27:55:c4:ea:9c:2f:e3:50:97:0d:
         b1:af:a6:8d:85:2d:69:4a:c4:0e:9e:e9:eb:1e:de:fc:07:4c:
         70:30:bc:9b:89:4c:d4:ed:43:d2:62:81:77:fd:33:3f:cc:cf:
         58:8a:cc:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 03:32:20 2026 by rpki-client