Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/6c02983f-b55e-3b6f-8afc-56eb3fe302c5.roa
File:                     6c02983f-b55e-3b6f-8afc-56eb3fe302c5.roa (raw, json)
Hash identifier:          POoOAx2khacvpczFDpIarJDfWvs4SqXh+TbeZ1Tw8tY=
Subject key identifier:   81:A9:AF:DB:7C:51:65:3F:64:8E:1B:61:F4:CF:50:BB:C4:F7:7A:60
Certificate issuer:       /CN=472e527a-848a-4f3d-b7a0-4f001e757ee7
Certificate serial:       010D0C9F4328584CC07C98884D4F1A8523268580
Authority key identifier: 2C:3A:2F:6B:C8:5B:37:1A:29:05:9B:D1:83:82:B5:85:4D:45:C5:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/6c02983f-b55e-3b6f-8afc-56eb3fe302c5.roa
Signing time:             Wed 04 Feb 2026 14:00:39 +0000
ROA not before:           Wed 04 Feb 2026 14:00:39 +0000
ROA not after:            Tue 05 May 2026 13:00:39 +0000
asID:                     1239
IP address blocks:        104.167.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/472e527a-848a-4f3d-b7a0-4f001e757ee7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/472e527a-848a-4f3d-b7a0-4f001e757ee7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Feb 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c0:7c:98:88:4d:4f:1a:85:23:26:85:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=472e527a-848a-4f3d-b7a0-4f001e757ee7
        Validity
            Not Before: Feb  4 14:00:39 2026 GMT
            Not After : May  5 13:00:39 2026 GMT
        Subject: CN=0968c5c9-66ce-42ee-90be-e65b01f9ce0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:26:24:e2:7a:dc:ca:3a:e1:96:ac:df:21:be:
                    43:16:eb:2f:fa:6e:38:fa:0c:89:9e:59:f8:21:3e:
                    d6:47:df:c9:75:50:18:44:72:85:8a:f8:5d:32:7d:
                    be:3a:c0:76:66:c1:4a:ab:c0:f6:fc:dd:9e:60:1d:
                    2e:45:c1:2e:8c:e3:f8:3d:d0:4e:8d:6d:e1:3c:d2:
                    59:54:6e:1c:ec:55:99:80:b2:f7:86:e9:a4:00:c7:
                    b8:65:fd:e6:65:25:3b:8d:58:69:92:14:47:4d:31:
                    ca:f6:7e:21:bd:e3:73:16:40:97:7c:1a:9a:2a:4e:
                    a1:c2:7c:ba:c9:ac:a6:3c:65:35:81:4e:42:01:2d:
                    86:6f:e6:72:25:5f:b7:a0:eb:7e:87:e4:a7:f9:ab:
                    69:45:b5:91:19:13:d4:a5:d0:f5:b3:b8:b8:f3:b5:
                    44:07:d8:e8:1d:65:f9:63:48:50:3b:70:6c:37:17:
                    3e:be:66:2c:f3:c8:f1:b5:74:10:43:95:9b:56:66:
                    52:0d:07:4b:44:ff:d0:7b:c5:ff:c2:23:73:e6:c0:
                    6a:a2:9a:b6:61:df:1c:07:ad:c0:e2:f0:cf:4c:d9:
                    50:0c:4e:b8:f4:9b:c2:c7:7b:5d:cc:82:92:73:bf:
                    db:be:37:94:24:30:a0:cd:c9:ba:ab:c1:53:09:2b:
                    68:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:A9:AF:DB:7C:51:65:3F:64:8E:1B:61:F4:CF:50:BB:C4:F7:7A:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/6c02983f-b55e-3b6f-8afc-56eb3fe302c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/472e527a-848a-4f3d-b7a0-4f001e757ee7.crl

            X509v3 Authority Key Identifier:
                keyid:2C:3A:2F:6B:C8:5B:37:1A:29:05:9B:D1:83:82:B5:85:4D:45:C5:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.167.229.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:32:5e:e3:a0:39:21:d8:00:50:a7:74:dd:25:72:0f:e5:0d:
         16:f3:60:a8:f4:de:69:72:2e:a2:ed:89:ed:c8:18:3b:ed:de:
         e6:00:69:eb:c8:30:ae:dd:e6:0b:03:91:ae:94:e5:d0:bb:d7:
         03:a5:b6:ac:76:68:fa:79:d6:82:b7:91:07:cc:61:36:cd:a3:
         7f:2d:81:e6:7b:d4:d8:f5:b6:a7:c5:13:8d:2f:41:5e:48:d2:
         0d:11:ba:57:7d:e5:a8:22:89:ca:00:c7:86:75:07:6c:fd:2d:
         32:89:39:c6:cb:da:65:4b:84:99:35:d5:b1:aa:50:f8:aa:b8:
         a5:07:80:cb:71:0d:39:68:47:e1:8d:11:ca:d1:68:fc:93:9d:
         e2:8d:98:17:1b:15:f4:44:40:28:a3:42:eb:15:aa:47:fd:91:
         7b:de:e4:87:99:2b:69:26:82:94:c5:aa:e4:f4:0c:24:85:da:
         0a:75:2d:be:1e:e1:83:c3:13:04:96:04:10:30:f2:d7:cf:ab:
         5c:e3:13:ca:2f:2e:93:82:d9:4c:d1:de:33:29:14:57:58:f3:
         f9:9f:74:5e:ab:5d:68:83:e8:47:03:e6:fb:25:89:e3:0b:25:
         ef:38:ca:78:d6:9b:3b:07:10:e8:8e:1b:90:75:fc:30:3e:46:
         2a:34:27:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 12:34:10 2026 by rpki-client