Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/bce136ea-d488-3a16-a4ed-ed5eeff08ef7.roa
File:                     bce136ea-d488-3a16-a4ed-ed5eeff08ef7.roa (raw, json)
Hash identifier:          KExjvup+C+tRwVGQzn4sKRgxtcBFgYN6qBQB4ASZxZc=
Subject key identifier:   00:F3:44:72:10:BC:05:1E:CC:FA:0A:41:5C:D7:06:6E:73:7E:EC:11
Certificate issuer:       /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Certificate serial:       010D0C9F4328584C62F68AC555C4FD261566AA80
Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/bce136ea-d488-3a16-a4ed-ed5eeff08ef7.roa
Signing time:             Fri 02 Jan 2026 02:00:30 +0000
ROA not before:           Fri 02 Jan 2026 02:00:30 +0000
ROA not after:            Thu 02 Apr 2026 01:00:30 +0000
asID:                     396918
IP address blocks:        65.51.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:62:f6:8a:c5:55:c4:fd:26:15:66:aa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
        Validity
            Not Before: Jan  2 02:00:30 2026 GMT
            Not After : Apr  2 01:00:30 2026 GMT
        Subject: CN=a6c968dc-bde0-4820-8030-022552424116
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:fc:86:01:90:45:62:b0:ab:39:45:c7:ad:23:
                    c1:15:a1:0d:1c:43:70:83:d5:d9:9f:93:3d:6e:df:
                    84:2f:b9:10:41:f2:0f:83:fe:fa:ba:95:14:b2:07:
                    aa:cf:90:b1:0b:87:de:81:07:bd:b9:26:bd:79:ac:
                    a0:f2:39:b3:e2:d2:f9:17:c7:06:bf:9a:22:de:55:
                    06:3a:79:cd:d7:c9:75:76:ed:90:b8:62:14:1f:72:
                    33:3e:cb:ab:10:70:a4:5e:18:e6:15:eb:cc:1f:7d:
                    02:24:d0:01:c5:22:c9:68:b8:06:63:72:a9:43:45:
                    ba:de:4c:12:50:13:20:80:93:a8:6a:e2:70:50:b0:
                    b6:ad:35:8e:26:dd:ba:65:7c:9e:b3:05:e7:0a:3a:
                    d7:12:7d:a8:68:59:bc:c5:82:3b:f0:27:18:d7:5e:
                    20:f3:d8:a4:f7:4f:95:27:85:b5:46:12:4f:17:5d:
                    7e:04:68:e3:58:a6:55:5d:9c:ce:ac:fb:d9:23:5b:
                    01:81:0a:c3:93:79:69:20:9a:e8:13:de:00:e6:31:
                    76:16:e2:30:43:af:9a:d6:c0:de:65:73:10:03:b2:
                    27:1b:c0:ab:1e:83:5a:1e:0b:15:30:08:17:e0:9e:
                    45:29:07:a1:1a:ba:b0:48:29:f5:c7:48:99:1c:cb:
                    d6:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:F3:44:72:10:BC:05:1E:CC:FA:0A:41:5C:D7:06:6E:73:7E:EC:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/bce136ea-d488-3a16-a4ed-ed5eeff08ef7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl

            X509v3 Authority Key Identifier:
                keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.51.81.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:c7:23:ff:d7:49:60:86:9c:3d:17:ae:2a:83:bd:e2:a7:21:
         d1:38:36:8d:13:91:81:11:57:ad:ac:51:9b:76:f0:88:14:d4:
         f3:61:b6:dc:35:0c:57:3a:dc:d3:53:9f:ca:1c:0e:f6:63:14:
         37:a1:4b:f7:36:95:f5:b8:d0:94:0a:5c:28:43:b7:40:3a:03:
         a9:e6:4d:2b:2c:d0:6f:fd:9e:99:17:4c:44:9f:14:ac:50:8a:
         67:74:b0:db:37:cf:e7:7e:7d:d3:ea:87:9c:e2:97:28:1f:2f:
         10:8e:f1:e2:33:65:1e:fb:10:31:f2:4e:98:7a:dd:30:9a:30:
         d7:20:13:7d:50:5a:fa:1d:e7:46:df:6c:14:82:ba:38:ce:0e:
         4b:23:cc:45:fa:77:05:a0:46:e9:5e:77:95:d2:64:42:6d:e3:
         c2:c5:3e:8d:36:cf:77:49:ea:c7:27:d2:61:a8:3f:b5:40:21:
         5d:92:79:70:d1:d1:cc:25:66:9d:ba:b5:c0:c8:59:06:4d:99:
         73:1d:6f:5b:5e:7f:47:0d:f1:0c:95:a7:94:10:22:fa:1a:ee:
         39:c3:65:47:45:89:ef:e3:76:72:12:fb:43:d1:76:2a:c2:9e:
         4e:56:a4:4f:e9:16:61:65:46:87:bb:de:da:81:14:73:e6:42:
         b9:c9:3c:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 14:59:59 2026 by rpki-client