Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/a85ecc2f-63ac-3b07-a6b2-31bbb577002a.roa
File:                     a85ecc2f-63ac-3b07-a6b2-31bbb577002a.roa (raw, json)
Hash identifier:          KoGfwJTTTj+3WstqfSXOOEeorXxTy1IQOsVm9ZgWAq4=
Subject key identifier:   2F:79:04:50:25:3A:15:5F:91:92:58:F2:4D:36:33:78:A2:46:D4:D5
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584CCD0C81A82F44714E96F0C340
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/a85ecc2f-63ac-3b07-a6b2-31bbb577002a.roa
Signing time:             Mon 09 Feb 2026 02:00:31 +0000
ROA not before:           Mon 09 Feb 2026 02:00:31 +0000
ROA not after:            Sun 10 May 2026 01:00:31 +0000
asID:                     215607
IP address blocks:        205.196.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Feb 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:cd:0c:81:a8:2f:44:71:4e:96:f0:c3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Feb  9 02:00:31 2026 GMT
            Not After : May 10 01:00:31 2026 GMT
        Subject: CN=6d3ed087-7525-4f42-87cf-36c2e5218310
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:8c:8d:aa:9b:63:cc:f5:11:30:32:56:76:21:
                    27:e0:f1:3f:50:08:8e:00:95:b2:bb:6b:95:f8:86:
                    e8:34:67:01:ef:cb:70:21:97:0f:2d:66:58:a3:50:
                    e7:01:b6:4b:4b:da:85:10:4c:c9:fc:b2:89:56:67:
                    5c:18:70:9f:f5:8c:2a:8a:2f:0d:cd:b8:0b:2b:2d:
                    51:78:c0:c1:8f:e5:7b:50:c4:42:99:d4:6c:da:f0:
                    bf:f2:3a:a5:d0:d2:d6:2f:63:fe:e1:d9:e8:90:55:
                    61:fb:1a:f8:69:7b:8d:13:95:e5:f9:44:7a:6e:fd:
                    2d:15:b4:27:ad:97:dc:7a:0d:9b:98:a5:34:6e:24:
                    dc:b9:2f:a8:17:66:48:7a:7c:a2:e2:79:a3:eb:75:
                    ad:2d:26:51:ec:b9:9b:7d:0a:51:4c:34:31:a0:25:
                    95:35:00:20:6a:de:1a:b8:c7:be:e7:b2:4e:83:f3:
                    a8:3b:ce:09:0b:1c:18:95:6e:2b:e1:f6:42:c3:3d:
                    53:9f:17:ac:60:ec:1e:54:3c:b6:4f:6e:10:55:f7:
                    a3:ab:b0:1c:a6:fc:b4:77:a9:74:97:71:6e:2a:33:
                    f5:6e:78:13:f1:3c:95:2b:44:59:c8:a4:95:d9:e1:
                    a0:93:df:e1:bb:ad:bc:b2:56:c6:6f:ad:82:2f:61:
                    94:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:79:04:50:25:3A:15:5F:91:92:58:F2:4D:36:33:78:A2:46:D4:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/a85ecc2f-63ac-3b07-a6b2-31bbb577002a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.196.158.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:fb:af:59:75:2e:f4:eb:67:2c:6e:83:70:41:09:ad:48:d5:
         95:f3:89:17:ef:99:bf:ee:e7:17:d0:17:fd:fa:f5:1f:f2:13:
         bc:90:f0:04:3a:89:a3:60:65:6a:76:2d:30:65:28:53:af:67:
         c8:27:b1:25:42:3f:69:3b:f1:61:bd:19:66:78:41:6f:0b:29:
         c5:b9:e1:2f:93:63:cf:bc:91:f1:ad:50:39:37:00:3d:a2:c6:
         cb:b1:ca:4d:de:5c:a1:12:1c:9b:e4:d4:ad:ff:5d:b3:8e:68:
         4e:25:ff:5a:7a:84:e8:1d:da:2a:6b:e5:6a:1d:8f:31:a0:9e:
         9d:1f:b2:53:04:95:c1:63:e9:13:f1:22:4b:41:f6:ba:55:c3:
         49:d2:fd:cf:eb:75:e3:93:05:ab:ac:a4:13:4a:98:2f:22:ef:
         3e:a3:47:99:3d:e0:74:76:15:29:8f:47:b2:6a:a2:eb:7e:f1:
         0c:a2:8f:2d:3f:4b:6c:fc:22:28:68:d0:fb:5a:31:4d:6f:03:
         6c:93:ed:2a:10:2e:e3:ee:d3:8c:80:7e:b8:f6:73:6a:16:b0:
         87:15:25:5b:dc:97:a0:e0:1c:d1:2d:ab:b3:2b:7f:4d:ab:97:
         33:c7:e1:63:66:32:23:5e:ae:a6:3a:71:38:0f:9d:87:e5:01:
         17:e2:a3:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 24 05:09:26 2026 by rpki-client