Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/ac2f3c8d-8fe8-31b8-a9c1-c3c90daf75d9.roa
File:                     ac2f3c8d-8fe8-31b8-a9c1-c3c90daf75d9.roa (raw, json)
Hash identifier:          N/U+EbP/dmUvCxOGHAtaz5Xzq0ATLJyBUwGcHp8L0m8=
Subject key identifier:   C2:10:A4:44:CF:95:81:70:CD:EF:20:43:61:A2:BB:0D:8D:25:37:D7
Certificate issuer:       /CN=87417fe6-1790-481a-9bdc-6574c0ef7d7c
Certificate serial:       010D0C9F4328584CAE5EA786F8FCB481430C2580
Authority key identifier: BA:B7:0F:02:DE:9A:71:72:A4:F0:E9:40:13:AF:00:0E:D8:9A:5C:FD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/ac2f3c8d-8fe8-31b8-a9c1-c3c90daf75d9.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     1742
IP address blocks:        192.131.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/87417fe6-1790-481a-9bdc-6574c0ef7d7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/87417fe6-1790-481a-9bdc-6574c0ef7d7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:5e:a7:86:f8:fc:b4:81:43:0c:25:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87417fe6-1790-481a-9bdc-6574c0ef7d7c
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=6b0e712a-a318-4c7b-baba-8f59fb05d0a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:85:5f:74:1d:08:5a:a8:52:8a:f5:b8:c6:77:
                    84:f4:5d:e1:b5:00:85:fb:df:50:94:de:f0:2e:7b:
                    63:ed:9c:f7:fe:d0:26:7f:0b:a7:38:aa:f1:ed:1a:
                    3f:e3:b8:ab:fe:26:32:9c:8f:83:90:32:fb:7c:0e:
                    3c:8d:09:46:3c:d3:0a:0a:f6:7d:bd:fa:14:fd:c3:
                    9a:38:2f:85:7c:1e:65:a9:9a:56:a0:db:06:3a:3d:
                    71:f3:3c:45:fc:25:27:45:e2:82:b3:5e:19:f7:81:
                    11:42:96:21:b6:a6:f5:e4:09:d2:34:66:05:33:97:
                    43:b7:aa:91:6b:bb:23:e7:f4:66:da:ac:90:f3:05:
                    8f:81:04:b9:82:ba:f6:71:ab:b6:b4:55:a4:6c:65:
                    8c:17:3c:46:c3:cd:22:01:24:6d:84:42:a2:d0:25:
                    7f:68:26:9d:10:b0:94:d4:02:9a:60:9a:db:00:72:
                    86:c1:0b:8e:8f:e8:95:8a:9d:2d:b8:e1:b6:f9:70:
                    7b:f2:f2:cd:0d:38:0a:b7:33:3f:25:b6:f7:ab:42:
                    ae:b3:e5:18:c3:9f:45:9a:f8:0d:87:72:d1:d4:f3:
                    c1:26:64:e2:7d:2a:81:e9:d1:fc:bc:50:9a:65:99:
                    76:5e:e7:52:e9:7f:33:f9:5e:32:0d:ed:3a:6b:bd:
                    3b:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:10:A4:44:CF:95:81:70:CD:EF:20:43:61:A2:BB:0D:8D:25:37:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/ac2f3c8d-8fe8-31b8-a9c1-c3c90daf75d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/87417fe6-1790-481a-9bdc-6574c0ef7d7c.crl

            X509v3 Authority Key Identifier:
                keyid:BA:B7:0F:02:DE:9A:71:72:A4:F0:E9:40:13:AF:00:0E:D8:9A:5C:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.131.102.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:54:52:c5:03:47:40:cd:9d:59:30:68:e9:29:5d:89:ed:08:
         83:65:8d:e4:59:62:24:4c:6d:b6:75:64:91:74:db:f8:7f:df:
         5c:24:df:a0:3c:2e:e2:6e:f5:a8:d5:f2:05:df:e8:3f:dd:a9:
         99:73:22:62:4c:6f:49:ed:50:50:9d:52:c1:98:08:af:7e:25:
         f8:6c:48:15:f0:08:e6:07:57:3d:7c:38:ae:5b:8c:c0:ed:9c:
         fe:63:05:f2:03:93:a7:94:1a:b1:9e:f3:d1:4b:f1:9e:19:84:
         31:7b:92:a2:d8:cb:4b:07:09:75:59:50:99:83:fb:d3:af:b5:
         e1:53:9a:ab:09:5a:87:b0:2b:2e:fd:c2:26:8d:a4:cd:02:16:
         63:bd:d9:bb:7a:8a:13:2d:de:90:7b:3c:a6:29:e2:33:48:fc:
         6d:dd:de:3a:79:af:c2:ed:7e:db:82:8a:b4:7f:94:6d:2b:b0:
         d1:d7:4b:5c:8a:86:bf:cd:df:6a:51:93:25:cd:d0:05:18:1b:
         d5:76:17:60:52:ca:7a:9a:a9:37:14:b0:f1:1d:1d:65:28:3c:
         cc:df:d2:fe:e1:4b:54:dc:6e:ca:12:58:1b:88:67:b0:c7:24:
         85:46:13:70:64:b4:e2:87:69:d0:59:05:6d:f2:84:e7:78:12:
         3d:f3:06:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 21:38:22 2026 by rpki-client