Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/973eb906-4f94-321a-82ad-8a8259d00b07.roa
File:                     973eb906-4f94-321a-82ad-8a8259d00b07.roa (raw, json)
Hash identifier:          K0CaxzIOQWnKoJ9vksdBdFafKTocKAS8ZQa94fWOdec=
Subject key identifier:   71:B1:D1:A8:93:2F:6D:A9:B1:65:A9:F7:70:B0:38:D2:E3:F1:60:00
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584C794C82EE272D34DAC91C6680
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/973eb906-4f94-321a-82ad-8a8259d00b07.roa
Signing time:             Sat 10 Jan 2026 02:00:31 +0000
ROA not before:           Sat 10 Jan 2026 02:00:31 +0000
ROA not after:            Fri 10 Apr 2026 01:00:31 +0000
asID:                     54934
IP address blocks:        184.105.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Feb 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:79:4c:82:ee:27:2d:34:da:c9:1c:66:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jan 10 02:00:31 2026 GMT
            Not After : Apr 10 01:00:31 2026 GMT
        Subject: CN=c3160246-3822-46ce-8f6c-cf8c1ab65fcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c0:b6:14:b0:30:a1:21:09:62:19:ca:98:58:
                    c3:d1:4c:46:ad:49:a3:91:ed:1d:58:79:56:f7:7d:
                    c5:68:b6:e0:d7:bf:22:fb:dd:2b:6b:27:a4:0b:c9:
                    af:da:81:01:ad:2a:f5:01:02:08:4c:36:99:63:97:
                    af:68:cc:bf:54:21:59:0d:ff:18:22:f0:c5:c8:0b:
                    05:7c:8d:a0:3e:a5:15:81:26:93:68:c4:22:0d:9a:
                    6c:a6:16:4a:45:00:88:2e:94:37:75:95:31:a1:c7:
                    a6:b4:d6:82:0c:83:81:f7:f7:26:57:f2:c3:2b:bd:
                    9d:57:f8:ee:61:a9:8d:cd:f2:f8:f0:3e:7c:ca:70:
                    09:78:65:6d:d0:79:26:5e:4f:2c:c2:d1:84:cd:c1:
                    f4:49:b4:bb:6c:56:f3:62:79:d7:9c:c8:43:84:cd:
                    08:84:f5:62:64:49:e7:49:ef:73:09:30:b5:97:a7:
                    48:37:6c:9f:3b:fa:3d:17:cc:cc:5a:39:28:38:59:
                    b5:b2:91:e3:2e:4f:0f:5d:7a:1d:6c:b7:93:d4:14:
                    04:e9:3c:81:c5:3c:71:b1:60:c6:d4:b9:02:9d:81:
                    c3:74:e9:45:7a:ee:91:ed:45:35:7c:51:b6:41:1c:
                    fb:8f:cc:0a:82:21:a7:c2:05:78:4d:d6:13:ee:2c:
                    df:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:B1:D1:A8:93:2F:6D:A9:B1:65:A9:F7:70:B0:38:D2:E3:F1:60:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/973eb906-4f94-321a-82ad-8a8259d00b07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.105.21.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:e5:6e:97:76:f7:df:da:50:83:f3:d2:dd:9a:a2:7b:16:f0:
         fb:38:87:79:38:6c:f1:29:25:27:28:ea:cb:bc:e6:68:cd:54:
         c8:2e:31:eb:66:85:51:a6:c9:0f:dd:32:bf:34:64:a9:38:b8:
         36:fb:74:d0:b8:0d:29:c1:cf:a2:a3:48:db:bb:bd:cb:35:71:
         e6:c5:05:51:54:9f:f7:fb:83:04:90:d1:1b:e5:a2:0d:de:5c:
         d5:09:b2:b1:f3:04:44:cd:58:14:ea:f4:7a:e6:a2:9a:f4:50:
         00:26:50:dd:c1:77:0e:5c:cc:e5:6d:d6:e5:77:de:4c:f9:f6:
         e4:b3:bc:43:54:4e:92:0c:42:06:9f:62:46:c4:c5:1d:f0:2a:
         4a:da:99:b7:cf:ff:a1:42:50:ef:14:1e:39:ea:f7:e4:e1:1e:
         b5:a6:38:29:82:9c:bd:77:5d:8d:86:e1:50:f6:ad:96:1c:17:
         8f:fe:a5:cb:51:99:ba:9a:c6:65:34:6b:51:d4:cc:56:99:39:
         e5:34:9f:08:d9:43:e5:81:fb:04:69:b6:d6:9c:73:be:c0:20:
         e8:6b:9f:9e:07:90:51:ab:ac:11:3e:08:4e:27:e3:0f:a7:06:
         bd:b5:d7:50:07:e3:fe:4c:1e:ac:7a:b2:42:ce:5c:60:8a:8f:
         02:61:c5:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 17:58:25 2026 by rpki-client