Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/a695d1a8-57a2-3f5d-abac-ea47525d89cc.roa
File:                     a695d1a8-57a2-3f5d-abac-ea47525d89cc.roa (raw, json)
Hash identifier:          PJbtSmce4YyeeGtj5a5NNPAaLsH/wfIBvQWqPBeGG90=
Subject key identifier:   F9:DA:45:73:02:7A:2B:F6:66:33:97:B3:64:36:A9:89:D7:E4:E0:26
Certificate issuer:       /CN=87417fe6-1790-481a-9bdc-6574c0ef7d7c
Certificate serial:       010D0C9F4328584CB121D514F0FC2B862A4C7BA0
Authority key identifier: BA:B7:0F:02:DE:9A:71:72:A4:F0:E9:40:13:AF:00:0E:D8:9A:5C:FD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/a695d1a8-57a2-3f5d-abac-ea47525d89cc.roa
Signing time:             Fri 30 Jan 2026 02:00:31 +0000
ROA not before:           Fri 30 Jan 2026 02:00:31 +0000
ROA not after:            Thu 30 Apr 2026 01:00:31 +0000
asID:                     1742
IP address blocks:        128.103.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/87417fe6-1790-481a-9bdc-6574c0ef7d7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/87417fe6-1790-481a-9bdc-6574c0ef7d7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b1:21:d5:14:f0:fc:2b:86:2a:4c:7b:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87417fe6-1790-481a-9bdc-6574c0ef7d7c
        Validity
            Not Before: Jan 30 02:00:31 2026 GMT
            Not After : Apr 30 01:00:31 2026 GMT
        Subject: CN=b69157e6-6929-4b76-b86a-6643b6749855
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:bf:1e:d3:fd:ca:10:4d:7c:7e:d1:6a:7b:b3:
                    f9:79:8e:c9:b2:7e:9d:52:95:fe:85:d5:ba:8a:97:
                    51:11:b3:e7:77:bf:2d:98:6a:bd:ac:f4:7b:c8:d7:
                    1c:8b:ce:38:e1:40:1f:94:5c:03:bc:5e:54:d8:08:
                    2e:a2:db:48:c3:4c:e6:51:ce:03:80:4f:dc:d9:70:
                    2d:b8:cb:64:be:8f:26:41:22:01:49:99:d7:3f:b1:
                    58:41:b9:4a:a3:16:78:74:a3:07:e7:ee:f7:42:02:
                    2d:f0:5d:ec:31:4f:f2:10:7a:d5:95:f6:64:eb:d1:
                    c3:5e:07:61:d4:6e:ab:47:28:e1:ee:90:c6:2e:d2:
                    88:2a:bc:61:46:6c:cd:c7:7e:76:94:ad:79:c6:25:
                    2d:7d:c7:21:19:3d:6d:9e:f9:3c:a9:9c:71:c2:d4:
                    44:0b:25:ea:4a:40:54:a5:88:a0:e7:97:d1:f1:0c:
                    05:2d:45:62:8a:fe:c1:69:82:d1:32:96:57:57:ec:
                    fb:0d:a7:86:6b:c8:a8:8a:a4:ef:67:ff:6c:18:5c:
                    f3:b6:23:17:b0:2b:0d:65:a8:cd:fd:39:07:f7:74:
                    14:58:b4:95:4d:5b:ef:0e:e9:6b:43:48:db:19:f3:
                    87:c3:11:d2:4e:a3:60:5e:6a:a8:c8:ec:1b:dc:68:
                    4c:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:DA:45:73:02:7A:2B:F6:66:33:97:B3:64:36:A9:89:D7:E4:E0:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/a695d1a8-57a2-3f5d-abac-ea47525d89cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/87417fe6-1790-481a-9bdc-6574c0ef7d7c.crl

            X509v3 Authority Key Identifier:
                keyid:BA:B7:0F:02:DE:9A:71:72:A4:F0:E9:40:13:AF:00:0E:D8:9A:5C:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.103.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:58:2f:67:01:d1:95:9d:9a:7d:bc:16:d3:a1:05:0f:96:dc:
         e9:ac:25:76:8a:01:19:e8:11:5d:15:35:70:95:51:f5:a8:4e:
         b3:5c:4b:fb:b5:23:aa:f8:e4:c3:59:d8:85:5d:e3:19:26:5b:
         95:09:cd:f0:d9:bb:46:f8:98:34:66:bd:57:e9:bc:b3:0a:95:
         08:5d:71:74:b4:cb:bd:5e:74:31:5b:5c:9f:9f:25:c9:fa:41:
         c3:05:07:21:8b:1f:15:eb:af:f3:90:08:0e:01:85:c9:ac:5d:
         c1:85:1c:50:75:d4:ea:64:25:50:ed:62:3e:f4:b8:5b:6a:7e:
         48:f8:2e:fd:71:63:05:cf:b3:ec:53:08:32:02:1e:d9:a3:af:
         00:bb:48:58:6f:54:3e:e2:1a:a8:f0:d3:3d:9b:b4:da:1a:bf:
         98:ab:b9:f0:3f:34:5f:97:23:6e:0b:c5:5e:5b:45:80:59:65:
         e0:a7:52:7c:bd:d0:7f:48:9e:01:9d:8f:5b:a3:95:7b:5a:d0:
         45:a7:9a:6b:96:e9:6f:5d:4b:f5:56:ec:20:4c:0e:7d:c1:32:
         a0:b3:92:6d:59:85:87:a4:68:22:00:bc:e2:de:0f:7a:2f:27:
         e1:2b:9a:af:c1:34:b1:83:7a:a7:b1:91:c4:53:b9:66:63:43:
         2f:be:d6:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 21:39:34 2026 by rpki-client