Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/5c85abc0-dae3-36e6-88c2-3a908b056c4f.roa
File:                     5c85abc0-dae3-36e6-88c2-3a908b056c4f.roa (raw, json)
Hash identifier:          EyU+wFZ70wGU4bUDb+HqjO5tu/g7pH/DefWatdJg+VQ=
Subject key identifier:   69:7D:13:AC:A8:8E:B0:21:27:5B:FB:D2:4B:D4:3F:60:97:2A:44:6D
Certificate issuer:       /CN=87417fe6-1790-481a-9bdc-6574c0ef7d7c
Certificate serial:       010D0C9F4328584CAE5EA7EE7D8CC3AA7EE0D9E8
Authority key identifier: BA:B7:0F:02:DE:9A:71:72:A4:F0:E9:40:13:AF:00:0E:D8:9A:5C:FD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/5c85abc0-dae3-36e6-88c2-3a908b056c4f.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     1742
IP address blocks:        140.247.179.128/26 maxlen: 26
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/87417fe6-1790-481a-9bdc-6574c0ef7d7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/87417fe6-1790-481a-9bdc-6574c0ef7d7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:5e:a7:ee:7d:8c:c3:aa:7e:e0:d9:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87417fe6-1790-481a-9bdc-6574c0ef7d7c
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=f47d6be3-789f-460d-b6fc-a8b26be28700
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:22:5d:53:9d:c1:39:a9:35:5e:6c:7b:26:84:
                    9d:1a:1a:39:b3:60:a4:e3:5a:18:55:a9:23:16:63:
                    1a:1f:f8:fe:87:2d:0e:7d:eb:69:29:5b:8d:ac:74:
                    96:bc:e4:68:bc:40:e7:99:9f:a7:3b:42:c7:19:c8:
                    4a:ed:0f:56:be:4f:aa:75:62:8b:eb:ff:07:aa:1c:
                    ad:e5:70:0d:83:9b:13:1c:b6:ed:48:81:a6:c3:8c:
                    c9:c9:3c:35:ba:f5:0e:52:a1:68:ba:b7:bd:e3:d2:
                    fc:55:83:fd:88:c8:58:0f:a4:56:b7:4a:9e:32:78:
                    b3:8b:5e:3b:ed:e7:89:79:f0:1d:37:fc:ff:8f:20:
                    b8:3a:41:41:5e:aa:f9:a4:7e:38:40:46:46:dc:8d:
                    21:ca:3a:3d:f9:b2:38:98:28:b3:9f:9b:a1:8f:0d:
                    0f:8d:7d:a4:7f:99:ad:7e:2e:ac:66:bc:9d:8e:2b:
                    92:c0:98:c8:9f:be:60:5a:0c:d1:39:60:c7:75:12:
                    f9:1d:3a:f2:30:7a:79:77:a7:6e:38:63:d1:f1:c2:
                    fd:d2:fd:25:03:b6:be:c0:79:5b:22:88:c8:5e:76:
                    8f:2b:cf:13:ba:67:8d:2e:2d:40:89:64:43:ff:3f:
                    16:4b:20:e4:3e:75:bb:6c:4c:00:9f:45:6d:a9:11:
                    87:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:7D:13:AC:A8:8E:B0:21:27:5B:FB:D2:4B:D4:3F:60:97:2A:44:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/5c85abc0-dae3-36e6-88c2-3a908b056c4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/87417fe6-1790-481a-9bdc-6574c0ef7d7c.crl

            X509v3 Authority Key Identifier:
                keyid:BA:B7:0F:02:DE:9A:71:72:A4:F0:E9:40:13:AF:00:0E:D8:9A:5C:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.247.179.128/26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:f9:b6:da:a7:24:ce:a3:6d:fa:fb:8b:57:e7:a2:3a:1b:b7:
         28:d0:d8:b3:37:91:c3:14:19:53:d3:4b:65:e3:c5:a3:92:01:
         88:60:3c:4d:14:00:47:fa:e2:1e:c7:f4:62:75:37:f3:50:99:
         f0:96:2e:60:71:ea:7d:9b:0a:71:d2:98:0e:0e:2d:94:58:86:
         82:0d:38:a6:bf:42:a5:78:c4:e3:fb:39:0e:24:57:37:40:04:
         b8:84:3a:5f:60:e0:95:a9:8c:e4:8b:27:61:72:b8:f0:1b:be:
         bf:67:c3:33:72:a2:07:bc:fd:4a:85:92:00:7e:61:9e:fe:af:
         18:45:4d:29:a7:be:e0:15:1c:8b:8b:fb:f1:28:7d:4d:89:54:
         12:3d:66:0c:99:01:b6:f0:17:23:27:0d:48:15:a2:f3:ff:00:
         a7:e8:f8:31:86:84:f4:e5:44:4f:dc:7b:11:07:a1:4c:5e:3d:
         b0:1c:f0:c6:a0:0a:df:35:30:3c:76:ee:96:e8:fe:1d:57:d5:
         37:67:86:2f:57:ea:66:8b:f8:9f:39:3c:4a:ae:45:61:ca:a0:
         66:0a:1b:ab:6b:42:ec:5e:ed:22:3e:7f:89:9d:69:8f:50:75:
         e6:fb:36:11:b1:37:88:d4:72:6b:c2:e6:b1:95:51:37:ed:4a:
         99:0f:a5:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 21:39:33 2026 by rpki-client