Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/bec1dba7-bbd3-3dec-8f18-289fb3c414a4.roa
File:                     bec1dba7-bbd3-3dec-8f18-289fb3c414a4.roa (raw, json)
Hash identifier:          PK0Hd1eDP+in4ix4YDXrPR7MzObcme7jsBcMx55kWAo=
Subject key identifier:   CD:BD:6C:31:41:AB:9B:94:A2:48:16:CF:F7:FB:54:1B:0B:14:25:AB
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584CBB3C14D94B11C92460E19780
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/bec1dba7-bbd3-3dec-8f18-289fb3c414a4.roa
Signing time:             Mon 02 Feb 2026 16:51:51 +0000
ROA not before:           Mon 02 Feb 2026 16:51:51 +0000
ROA not after:            Sun 03 May 2026 15:51:51 +0000
asID:                     0
IP address blocks:        204.182.160.0/20 maxlen: 20
                          205.162.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Feb 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:bb:3c:14:d9:4b:11:c9:24:60:e1:97:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Feb  2 16:51:51 2026 GMT
            Not After : May  3 15:51:51 2026 GMT
        Subject: CN=84ab91e9-99db-480f-a4dc-7337ab4c83a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:6d:9b:80:be:b8:32:0b:d3:44:23:8b:aa:e9:
                    71:ef:e0:73:9f:3b:2c:64:90:7a:56:ee:a0:f1:d4:
                    21:ea:20:66:72:f1:bd:33:2a:22:48:b1:87:50:06:
                    b7:e9:8d:53:03:59:97:d8:2c:ce:61:77:88:a4:29:
                    7b:b8:23:0a:6f:a0:0f:7b:26:56:50:73:c9:f8:1f:
                    59:a1:cc:dc:7e:60:9d:9f:41:f8:2d:fd:17:9b:87:
                    f4:4c:2a:c6:89:e2:8d:a7:62:29:8a:99:56:66:89:
                    72:32:b9:bc:9d:59:2d:3d:05:98:e6:ad:65:54:0a:
                    af:37:9e:7a:53:c5:87:df:b2:d0:a8:5a:5a:34:26:
                    ab:fc:a1:fa:91:02:be:46:e8:31:25:e1:5f:eb:89:
                    71:28:9e:86:a8:ee:1f:96:d9:3a:d1:35:a5:63:25:
                    cb:5c:0f:77:09:a1:7e:f9:ed:ae:44:d6:8a:da:67:
                    61:ae:a5:c7:9a:76:02:0b:fd:42:15:60:62:07:d8:
                    6b:44:2a:b7:d3:59:99:95:64:79:58:81:cd:82:10:
                    e4:73:ba:c7:d0:75:c8:4b:72:e4:f5:5a:d3:8a:bf:
                    be:f3:c5:76:d4:30:e8:88:9b:16:5d:f4:6f:f5:e8:
                    14:e9:f4:09:bc:93:47:19:f0:97:d3:e5:b3:02:c7:
                    db:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:BD:6C:31:41:AB:9B:94:A2:48:16:CF:F7:FB:54:1B:0B:14:25:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/bec1dba7-bbd3-3dec-8f18-289fb3c414a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.182.160.0/20
                  205.162.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:96:61:e4:84:a5:79:2b:51:a0:c6:a8:ef:9e:8a:29:c8:55:
         d2:39:ec:fc:9b:55:9b:fd:25:b6:b7:9e:da:cd:a8:d9:cd:8c:
         2a:d3:ff:08:2a:d9:c9:a8:88:4a:3c:ad:f9:e2:56:67:ca:7d:
         70:f0:23:b1:58:54:02:eb:be:02:af:90:16:bb:81:7e:8d:5e:
         f5:7e:b5:99:67:10:57:c1:21:bd:90:14:80:f6:0a:bb:25:d7:
         46:ff:70:fa:c6:d0:9a:5f:58:d9:9c:bf:f5:90:31:fb:e7:ef:
         5c:3f:29:ce:9a:31:72:08:f8:d3:ea:56:a6:15:fe:d8:cf:36:
         fc:72:4d:d6:43:23:7d:7b:a2:90:44:06:7d:a9:de:12:da:d0:
         3a:9e:c1:fc:89:db:9c:e5:01:83:d5:38:51:31:99:0d:5d:54:
         db:f1:00:3d:c8:9f:57:2e:7b:45:cc:e4:13:03:27:81:b2:42:
         71:f4:b5:fc:c9:e6:2f:a3:09:f8:03:66:4b:da:c9:73:25:83:
         42:55:9a:16:30:26:53:46:70:26:b0:b8:90:d0:e5:99:a9:8d:
         b1:c3:b7:bd:06:b8:18:66:4c:61:44:52:13:44:ed:d0:4f:31:
         f2:de:59:69:e9:f3:c0:a6:21:e2:46:0f:34:78:ad:d7:3b:3b:
         11:f1:94:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 03:42:09 2026 by rpki-client