Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3b4fdb02-2686-327a-9202-080a0e6307f1.roa
File:                     3b4fdb02-2686-327a-9202-080a0e6307f1.roa (raw, json)
Hash identifier:          09ZLoIOwecGZ3soFT7DqPnVU4mc6EbMeTQOV4qyXXbI=
Subject key identifier:   1A:67:A1:D0:BA:90:15:EA:16:77:3C:22:DE:BF:59:0E:3F:31:15:E3
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584CDC67912292FE286DFA3225C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3b4fdb02-2686-327a-9202-080a0e6307f1.roa
Signing time:             Sat 14 Feb 2026 14:00:41 +0000
ROA not before:           Sat 14 Feb 2026 14:00:41 +0000
ROA not after:            Fri 15 May 2026 13:00:41 +0000
asID:                     701
IP address blocks:        151.201.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Feb 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:dc:67:91:22:92:fe:28:6d:fa:32:25:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb 14 14:00:41 2026 GMT
            Not After : May 15 13:00:41 2026 GMT
        Subject: CN=751dba3c-5cad-4a4d-a314-0abb8026edd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:58:a7:64:be:00:5a:a1:4b:0f:b0:3f:cc:ed:
                    8e:c0:15:44:be:04:e6:5c:e2:de:23:d1:31:22:64:
                    ad:83:9e:f1:f0:81:16:5b:e7:6a:02:87:e9:ad:21:
                    01:ee:56:2b:00:44:d3:e7:94:f8:50:a6:a6:e6:4e:
                    05:74:63:3e:8d:80:9c:64:fd:96:1d:d2:f8:b6:78:
                    ab:bb:b0:de:b7:9a:4f:1f:6b:f9:d6:07:6d:b7:22:
                    77:1d:a4:91:39:97:fb:c0:b9:96:0f:2d:54:b6:81:
                    7e:f9:cb:31:ed:4f:37:fe:79:91:80:36:90:f2:49:
                    9a:29:15:79:17:c7:78:b4:2c:ae:e0:96:f5:9a:64:
                    17:be:86:33:7d:b6:fb:fd:05:18:de:e2:06:99:76:
                    e6:e5:21:6d:6d:5b:22:4b:0b:82:cd:8c:73:6b:2f:
                    83:0a:61:e5:2a:6e:73:f4:31:7c:6c:b3:2d:78:47:
                    41:98:74:b9:f4:74:21:a7:4d:18:3a:a4:8e:5e:0f:
                    d9:20:dc:a0:7d:a8:93:57:0b:27:30:b4:74:26:be:
                    7c:9e:0b:5f:a0:7c:80:22:37:39:9a:10:03:b6:4d:
                    db:0b:01:c4:6d:7a:da:36:a9:4c:67:ef:39:01:15:
                    6a:d5:db:f1:fa:f3:b1:94:80:c2:ec:4d:89:d0:c6:
                    00:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:67:A1:D0:BA:90:15:EA:16:77:3C:22:DE:BF:59:0E:3F:31:15:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3b4fdb02-2686-327a-9202-080a0e6307f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.201.217.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:b2:60:be:7f:5d:6f:84:90:4b:8f:f7:d4:4a:7e:e2:a5:ee:
         b6:b9:25:13:99:45:d9:bc:6f:06:e9:6a:79:47:8a:63:23:f7:
         28:28:ea:fc:07:ed:a0:43:f0:5a:f2:6d:7e:fb:57:fd:1d:82:
         09:4d:eb:53:39:85:25:97:68:bb:39:f4:2e:a6:2e:9b:9b:6a:
         35:6f:84:02:14:3a:61:5a:de:d6:bc:9c:49:8c:04:a8:4a:23:
         c3:12:76:a9:f6:40:1a:80:94:1c:97:0b:63:04:2b:b6:62:d0:
         f6:fe:23:b0:6c:77:69:53:45:02:e4:81:50:ee:65:7f:3c:f0:
         f6:cf:93:34:28:06:56:02:b5:c7:11:e7:9c:e9:30:69:39:ee:
         08:fb:8d:04:85:bf:f0:40:62:21:e4:57:09:2e:a8:c1:92:76:
         6e:27:11:92:3c:20:52:89:c2:8d:b6:c5:db:71:53:62:bc:8c:
         a8:f1:53:18:66:06:1d:de:97:09:5a:1c:d4:c4:a2:63:dd:38:
         cc:55:39:56:93:a2:f1:bf:9d:9f:a9:0c:59:49:0f:00:8e:fa:
         a2:82:9f:77:63:68:fd:ec:1a:1f:6e:4a:83:20:dd:d1:70:be:
         b4:15:eb:c6:16:dd:45:70:d5:70:95:20:5d:6c:c4:03:00:d3:
         c5:6e:cf:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 12:21:17 2026 by rpki-client