Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f023ce5d-7af8-4345-a2d9-d22e77efa68d/fb226e0a-5210-3180-993a-8a6b81c700a9.roa
File:                     fb226e0a-5210-3180-993a-8a6b81c700a9.roa (raw, json)
Hash identifier:          kgSVP06elAggDVvww5e/WyZHRiU8dF8wneZWRV4DaUo=
Subject key identifier:   52:77:21:BE:78:B5:33:2E:A0:ED:8F:FE:0F:48:77:4D:0A:60:C4:72
Certificate issuer:       /CN=f023ce5d-7af8-4345-a2d9-d22e77efa68d
Certificate serial:       010D0C9F4328584D6B72379EFA09D49C5A80FE80
Authority key identifier: 4F:82:EE:E2:41:F4:98:B6:19:53:0F:BE:B2:00:7B:D1:9D:E6:E5:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f023ce5d-7af8-4345-a2d9-d22e77efa68d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f023ce5d-7af8-4345-a2d9-d22e77efa68d/fb226e0a-5210-3180-993a-8a6b81c700a9.roa
Signing time:             Mon 06 Apr 2026 19:43:12 +0000
ROA not before:           Mon 06 Apr 2026 19:43:12 +0000
ROA not after:            Sun 05 Jul 2026 19:43:12 +0000
asID:                     396982
IP address blocks:        167.254.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f023ce5d-7af8-4345-a2d9-d22e77efa68d/f023ce5d-7af8-4345-a2d9-d22e77efa68d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f023ce5d-7af8-4345-a2d9-d22e77efa68d/f023ce5d-7af8-4345-a2d9-d22e77efa68d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f023ce5d-7af8-4345-a2d9-d22e77efa68d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Apr 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6b:72:37:9e:fa:09:d4:9c:5a:80:fe:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f023ce5d-7af8-4345-a2d9-d22e77efa68d
        Validity
            Not Before: Apr  6 19:43:12 2026 GMT
            Not After : Jul  5 19:43:12 2026 GMT
        Subject: CN=4c87c6bf-e2a6-4ff3-b459-dce075aeb3b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:18:5f:95:bd:61:90:0c:51:10:29:0e:5a:ef:
                    49:bd:76:4e:ea:28:a0:b0:e1:14:8c:ad:93:55:7f:
                    50:9d:1a:6d:02:62:c8:88:2c:a8:66:db:5a:2a:40:
                    db:12:a7:8a:cc:b1:e7:fc:54:1d:0d:68:a1:58:c5:
                    6d:78:21:09:8a:e6:0e:eb:ae:86:fa:4f:2b:a9:85:
                    af:57:ac:01:f0:e3:6c:e3:4e:5d:9f:98:00:c7:bd:
                    42:3c:9f:53:c4:ff:d3:80:d6:43:59:ed:c3:5b:73:
                    79:61:26:40:e9:08:f6:df:b9:08:6e:a2:0a:31:73:
                    c3:d1:c3:7d:a8:61:94:4f:c1:96:35:18:6c:84:88:
                    f6:97:ce:08:ab:47:4e:ab:02:d7:57:b1:7a:7d:89:
                    15:da:d7:af:50:b5:2d:2a:c7:e0:0b:61:a6:01:0c:
                    db:3d:7d:69:1a:06:23:b3:57:73:d1:b0:7b:20:09:
                    ff:3a:e0:42:ee:d4:bc:60:b0:db:3b:a7:b2:1a:58:
                    b6:1d:68:41:60:0b:90:24:55:6f:34:ff:2f:54:24:
                    9c:2f:2c:ac:19:72:86:76:f2:ef:aa:c8:3d:6e:fb:
                    7d:17:27:2f:85:ed:fd:42:0f:22:0e:c8:9c:16:e7:
                    b5:bb:13:f2:0c:b2:ae:59:35:5a:e9:d8:64:23:68:
                    8a:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:77:21:BE:78:B5:33:2E:A0:ED:8F:FE:0F:48:77:4D:0A:60:C4:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f023ce5d-7af8-4345-a2d9-d22e77efa68d/fb226e0a-5210-3180-993a-8a6b81c700a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f023ce5d-7af8-4345-a2d9-d22e77efa68d/f023ce5d-7af8-4345-a2d9-d22e77efa68d.crl

            X509v3 Authority Key Identifier:
                keyid:4F:82:EE:E2:41:F4:98:B6:19:53:0F:BE:B2:00:7B:D1:9D:E6:E5:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f023ce5d-7af8-4345-a2d9-d22e77efa68d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.254.179.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:92:ab:a0:f9:4a:7b:c6:02:ce:86:48:13:1b:13:5b:34:e2:
         19:12:b6:11:09:5b:26:49:77:51:ef:a2:18:22:2d:75:03:d8:
         1c:67:97:d8:7c:bd:0d:dd:be:8b:c2:99:4d:4a:3f:5f:4a:6e:
         f7:b6:ae:95:b9:40:64:a0:91:ed:b8:85:06:32:29:92:c4:ed:
         d2:d7:01:cb:da:37:d8:d0:8b:45:34:dc:c3:76:b8:a6:2a:27:
         87:58:80:40:b8:7a:17:f0:59:9e:ce:f1:fc:06:c9:c5:b6:84:
         51:40:9c:58:49:c1:6b:0e:fa:c5:7e:bf:bb:dd:7e:69:7e:9b:
         f8:63:d9:e9:fe:4d:69:33:ea:1c:f8:6f:8e:16:3d:a7:87:85:
         79:d0:53:66:69:f2:66:ab:1f:75:d2:96:e8:20:cc:85:dd:5a:
         1e:60:78:f3:c7:b8:2a:36:ce:81:db:3a:d7:ea:48:79:bc:22:
         55:42:66:8c:73:ff:26:9d:c5:7e:8d:98:6c:ce:71:03:1d:fd:
         f1:88:ea:ef:79:b8:a5:36:5d:fa:9a:38:3a:ce:c7:4c:13:46:
         c7:64:45:29:6a:25:58:b2:c3:be:f0:49:63:b0:ff:52:8c:ca:
         24:b2:35:bc:80:85:a3:1c:7f:9d:a0:a8:f2:5d:9d:88:81:aa:
         d1:92:f6:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 18:57:20 2026 by rpki-client