Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/40b26335-b6d1-3420-9784-e80d92e5fd88.roa
File:                     40b26335-b6d1-3420-9784-e80d92e5fd88.roa (raw, json)
Hash identifier:          8ql0xw4uEMJpl7elorGksTfYv19NLTQ5DNsIau3zWv0=
Subject key identifier:   B6:6D:58:0F:03:05:0F:BA:80:06:86:80:16:01:E2:69:69:14:B9:D7
Certificate issuer:       /CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Certificate serial:       010D0C9F4328584CC61207D1029EFB51BA8EFF00
Authority key identifier: 66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/40b26335-b6d1-3420-9784-e80d92e5fd88.roa
Signing time:             Fri 06 Feb 2026 14:00:40 +0000
ROA not before:           Fri 06 Feb 2026 14:00:40 +0000
ROA not after:            Thu 07 May 2026 13:00:40 +0000
asID:                     4922
IP address blocks:        70.32.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c6:12:07:d1:02:9e:fb:51:ba:8e:ff:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
        Validity
            Not Before: Feb  6 14:00:40 2026 GMT
            Not After : May  7 13:00:40 2026 GMT
        Subject: CN=741a3a89-fe9b-4ef2-9693-fdbb9d027bf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:dc:5f:ff:25:81:f9:d5:93:f6:39:bc:9a:e6:
                    32:d0:20:92:f1:22:5c:04:bc:bf:82:2b:7d:4c:41:
                    14:5b:03:c4:b5:21:f2:3d:a6:7c:19:10:97:cc:e9:
                    3c:29:a4:85:75:ca:57:fb:a4:92:3f:68:b8:9c:14:
                    af:cb:73:93:e9:f7:30:7a:ba:25:6d:ed:20:7b:64:
                    35:f9:98:b4:4a:61:ac:c0:44:d4:0b:6d:99:b0:81:
                    2e:14:09:e3:be:d5:e4:fb:c8:15:41:d3:eb:83:15:
                    74:b8:61:6b:25:6e:b2:ca:a4:ba:92:66:06:4c:cd:
                    d7:6d:44:e7:4a:eb:63:ba:8f:d5:c3:94:3f:60:00:
                    14:7f:85:2c:47:69:29:83:0e:e1:a6:05:f3:80:9e:
                    54:c0:8f:7c:79:7f:8c:e0:af:f2:cf:6b:19:59:16:
                    54:a4:5a:e6:b3:96:45:29:6f:ef:c2:29:96:77:57:
                    46:6a:23:dd:5f:07:25:58:49:2b:79:16:61:a6:39:
                    ec:ed:6e:0c:93:d5:ea:36:06:42:59:b7:c2:e2:1b:
                    73:fd:88:94:f8:9b:e4:e8:58:63:5e:56:ea:4b:85:
                    4d:24:2c:c4:d4:94:46:a8:d6:81:86:9e:69:04:71:
                    38:e9:cb:f7:97:8c:5a:b0:49:b4:22:41:05:b9:fc:
                    dc:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:6D:58:0F:03:05:0F:BA:80:06:86:80:16:01:E2:69:69:14:B9:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/40b26335-b6d1-3420-9784-e80d92e5fd88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl

            X509v3 Authority Key Identifier:
                keyid:66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.32.201.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:31:85:15:37:2b:37:f8:ef:59:01:2f:3e:73:8a:1e:43:6e:
         d4:35:12:08:87:1b:db:6a:e4:6c:0e:25:02:df:d6:83:9d:6b:
         68:c7:14:e7:7d:1d:49:47:7d:c2:cc:fb:6f:42:62:b5:54:32:
         f3:d2:ec:ed:28:15:26:e8:96:c4:35:1c:e4:ce:74:87:9f:e4:
         56:c7:20:32:3b:5d:dc:5d:30:d1:2e:45:35:ab:79:ae:f1:59:
         e3:da:04:04:ae:bc:5e:bd:d3:3a:9c:91:ae:13:48:b1:8f:31:
         68:a9:56:f2:a0:cd:dd:be:0f:e0:26:83:c4:82:22:23:85:3b:
         13:2f:fd:63:49:0e:1a:00:1c:a2:91:81:f0:47:88:92:ef:19:
         ba:9c:b8:7e:1b:85:14:6f:78:14:d2:44:b5:95:c2:a1:ec:87:
         2b:70:64:cf:4f:1e:2d:f4:26:43:3d:6a:12:a8:af:e5:b9:d1:
         ec:43:51:1d:c7:6d:ed:54:09:5c:82:9f:8a:a7:82:68:14:34:
         0c:45:6b:17:a2:6f:69:a5:7d:a1:89:2f:9a:6c:9d:47:55:5d:
         ef:24:5e:99:de:a4:5d:69:0f:d1:37:95:c9:40:68:06:23:55:
         ba:af:51:c6:dc:92:3c:92:c4:69:9d:8e:54:ef:d1:50:82:bb:
         14:a9:df:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 27 02:22:31 2026 by rpki-client