Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/fabb8d63-e0ce-3598-a09f-0513068d6941.roa
File:                     fabb8d63-e0ce-3598-a09f-0513068d6941.roa (raw, json)
Hash identifier:          mBHk5cenz6UI0B6SVQa8yCPvzjS992bgRItOUng/9Z8=
Subject key identifier:   FB:68:E4:B4:77:63:A3:B6:34:EA:C6:46:5C:3A:14:00:28:FF:F2:B3
Certificate issuer:       /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44
Certificate serial:       010D0C9F4328584CA5F748469E9F0B3B7063CD80
Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/fabb8d63-e0ce-3598-a09f-0513068d6941.roa
Signing time:             Mon 26 Jan 2026 02:00:32 +0000
ROA not before:           Mon 26 Jan 2026 02:00:32 +0000
ROA not after:            Sun 26 Apr 2026 01:00:32 +0000
asID:                     31898
IP address blocks:        150.230.0.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Feb 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:a5:f7:48:46:9e:9f:0b:3b:70:63:cd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44
        Validity
            Not Before: Jan 26 02:00:32 2026 GMT
            Not After : Apr 26 01:00:32 2026 GMT
        Subject: CN=b04a9b16-d45f-46aa-9848-ba28e09cfa03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:f1:d5:0e:48:6f:8c:75:aa:cc:3a:5c:17:e6:
                    34:51:75:52:43:bc:f2:87:51:61:e5:f9:a6:a4:9f:
                    9e:36:ca:b5:01:e4:8d:eb:f4:29:21:22:3d:9c:0b:
                    f9:cd:4d:e5:32:6b:47:d4:7b:22:05:a2:3a:f6:2d:
                    37:27:aa:f8:d2:cb:90:a6:17:22:59:a4:4e:cc:2d:
                    f4:db:a2:20:7f:6d:46:6b:5e:a4:99:d7:f2:d3:b0:
                    4e:62:7f:a5:8a:74:1a:2e:3a:fc:a9:9c:ad:71:e1:
                    30:e2:a6:e8:37:02:4c:2d:75:d8:71:fa:8a:e4:94:
                    7a:6e:ec:ce:34:1c:1f:5a:11:ab:56:2e:30:9b:8f:
                    48:18:08:cb:d2:08:a8:8d:77:25:2f:24:75:7a:85:
                    06:e1:8c:16:dd:9b:94:00:f4:d7:65:6d:f9:f4:43:
                    3a:19:3b:b6:e8:a8:e3:3a:44:fb:80:16:2c:c8:c3:
                    af:a2:5c:91:b0:22:38:d1:aa:65:8d:31:b2:cd:e2:
                    7f:bc:6d:78:99:78:cf:f5:d2:6c:35:84:04:3d:43:
                    df:0e:6b:63:9d:fa:11:e0:01:65:89:ad:8c:22:bd:
                    2d:0c:20:18:8c:57:33:cf:d8:93:7e:ae:6c:49:25:
                    ea:5f:d5:3d:c4:3e:40:08:3b:5c:10:75:f5:68:66:
                    15:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:68:E4:B4:77:63:A3:B6:34:EA:C6:46:5C:3A:14:00:28:FF:F2:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/fabb8d63-e0ce-3598-a09f-0513068d6941.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl

            X509v3 Authority Key Identifier:
                keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.230.0.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:19:da:61:b9:d6:1c:b0:75:6c:e5:f6:01:20:80:32:eb:4f:
         43:5c:2a:23:58:39:f3:e9:11:d3:8b:1c:42:48:9d:4f:61:2b:
         ca:4b:4e:73:f2:55:81:92:4d:61:79:d1:b4:3e:20:65:4e:d8:
         ac:8d:22:a1:d1:91:f9:66:2d:ba:96:21:e8:e8:bf:80:43:8f:
         61:86:ff:6d:39:b8:43:11:8a:55:db:79:41:5d:4d:b1:f5:6e:
         18:44:d1:dd:ab:5e:94:fe:e8:0d:56:eb:b0:61:f7:41:16:53:
         51:10:f1:7b:59:a8:51:c9:68:ac:19:45:19:46:07:79:80:82:
         e9:95:e1:71:b5:e3:cf:60:70:d3:4c:88:de:11:e5:01:be:20:
         49:ec:7a:e6:50:44:b4:09:23:a0:ee:95:52:e8:8f:c5:b8:cc:
         42:57:39:4d:d5:59:fa:b8:2e:41:0b:44:b1:04:23:24:fc:13:
         6e:69:2e:49:cb:70:d2:03:ce:cf:a5:a4:d5:e5:6e:8b:b5:1e:
         f1:af:4d:22:11:5c:76:62:92:e1:6d:49:5b:d2:72:42:e3:b5:
         6e:93:25:f6:88:de:b8:bd:e3:42:c0:c7:fc:57:4b:1e:cd:4f:
         cb:84:f7:2c:0d:d9:c1:7e:56:7a:c7:1b:e2:05:df:2a:9e:d5:
         74:77:33:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 03:28:00 2026 by rpki-client