Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/8b8e5674-db36-3436-8904-c0f1d0b4de91.roa
File:                     8b8e5674-db36-3436-8904-c0f1d0b4de91.roa (raw, json)
Hash identifier:          wNMNrn+SrPFAf3iJ9/8WbOglmc+AD7i0Ruq6BB05q+E=
Subject key identifier:   78:FF:78:21:45:0A:00:BF:23:15:D4:27:BF:A8:2B:C3:5E:1D:21:A0
Certificate issuer:       /CN=4bc604de-ac2b-4921-b601-a2c976ab18e8
Certificate serial:       010D0C9F4328584C50D1419E053059FD59BB5D60
Authority key identifier: 5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/8b8e5674-db36-3436-8904-c0f1d0b4de91.roa
Signing time:             Fri 26 Dec 2025 14:00:39 +0000
ROA not before:           Fri 26 Dec 2025 14:00:39 +0000
ROA not after:            Thu 26 Mar 2026 13:00:39 +0000
asID:                     27299
IP address blocks:        149.112.123.0/24 maxlen: 24
                          149.112.124.0/24 maxlen: 24
                          149.112.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Feb 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:50:d1:41:9e:05:30:59:fd:59:bb:5d:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bc604de-ac2b-4921-b601-a2c976ab18e8
        Validity
            Not Before: Dec 26 14:00:39 2025 GMT
            Not After : Mar 26 13:00:39 2026 GMT
        Subject: CN=be1036c3-31a1-4eb4-85bd-dbf17a687624
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:24:5a:2f:7e:31:f0:8d:65:43:e9:b0:c1:80:
                    30:b9:b6:bb:59:a5:48:aa:5d:20:5c:45:16:6b:4a:
                    e1:43:52:c3:5d:da:50:bf:d3:16:9e:96:41:20:29:
                    51:a4:aa:27:45:9b:5b:a3:8f:12:da:55:7a:90:32:
                    47:04:69:2d:94:b9:ce:db:ee:eb:c6:b5:31:7a:04:
                    ad:79:8e:ba:f0:68:ec:4c:17:8d:7c:f7:73:bf:ec:
                    51:ee:53:ed:78:10:f0:fe:19:53:ce:26:bc:72:d4:
                    ce:d7:13:cd:b9:5b:ff:a8:67:70:28:b7:0c:b3:11:
                    42:b2:ac:4d:67:2b:d3:30:da:12:5b:04:ce:ad:26:
                    2b:9e:2f:a0:76:36:62:47:b5:ba:1d:04:76:83:f5:
                    65:71:ff:57:37:15:2a:82:ba:d5:99:0a:1c:de:23:
                    6f:33:69:85:88:29:e2:fc:87:20:1a:f5:be:e4:2f:
                    2c:e7:bd:3e:31:52:3a:b2:7b:b4:7c:c7:75:08:df:
                    e1:29:b8:14:c0:9b:b3:3a:46:79:72:47:e5:a0:cf:
                    75:36:74:48:06:00:92:7b:ab:b7:86:f5:5a:07:b9:
                    8b:e7:7f:3e:c5:3e:a1:c6:87:d2:12:0e:9c:3a:1c:
                    ef:92:37:a0:93:ee:5b:d0:77:a3:19:09:8d:48:ed:
                    8f:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:FF:78:21:45:0A:00:BF:23:15:D4:27:BF:A8:2B:C3:5E:1D:21:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/8b8e5674-db36-3436-8904-c0f1d0b4de91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.crl

            X509v3 Authority Key Identifier:
                keyid:5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.123.0-149.112.125.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:c0:95:93:a6:34:ee:f5:b8:84:7f:c4:ae:8e:d3:d5:31:f6:
         90:a5:29:ef:68:b4:56:b0:a7:af:99:14:b4:f6:36:a2:04:0a:
         ec:c4:4c:11:ff:24:e9:74:61:64:c2:70:ef:65:3e:7a:a8:15:
         99:48:7c:3a:7c:3a:d3:cb:ad:43:26:22:4a:fa:1a:30:17:4c:
         0a:d7:09:05:7a:32:17:d1:fc:ba:86:7a:f5:34:35:ea:10:5d:
         df:e0:7e:ec:40:47:7f:8a:5a:50:e4:05:ec:d1:ad:0e:bf:b4:
         0c:b7:47:64:67:41:50:88:cb:15:9d:b4:48:60:6c:aa:a6:7e:
         3e:1c:73:4c:3e:c1:28:66:ca:6d:7c:51:5e:d8:59:4c:d3:19:
         3f:b6:dc:3a:94:3a:b2:0f:ca:40:8d:74:f6:10:7c:fa:cb:c9:
         26:c2:a1:72:7c:8f:ed:ef:dd:ad:30:d7:8c:dd:b8:90:68:f8:
         95:bf:9c:aa:6d:a7:91:ca:2f:4c:7d:34:e1:df:c3:4c:35:3e:
         66:e6:fc:6b:f8:c6:38:d6:86:8c:ed:4d:b7:f0:2e:d7:73:ce:
         6e:a4:15:dd:86:c3:1f:34:07:d7:81:f5:0f:d4:dc:98:13:c2:
         9f:ec:97:10:95:ff:90:0d:9a:a6:25:9d:e6:38:e2:02:39:7f:
         82:14:f4:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:13:43 2026 by rpki-client