Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/02d2256b-68fd-3cf4-935d-01f38f5be267.roa
File:                     02d2256b-68fd-3cf4-935d-01f38f5be267.roa (raw, json)
Hash identifier:          qreiQvlulfawc4VSqZn874DVimzlN4wVN40TAQpmRI4=
Subject key identifier:   48:3D:06:92:67:3F:F8:5A:EF:00:67:E1:F2:FB:51:CF:FE:F6:0C:C2
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584CBDB20F89E5B25C2AA0C7C000
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/02d2256b-68fd-3cf4-935d-01f38f5be267.roa
Signing time:             Tue 03 Feb 2026 14:00:39 +0000
ROA not before:           Tue 03 Feb 2026 14:00:39 +0000
ROA not after:            Mon 04 May 2026 13:00:39 +0000
asID:                     31898
IP address blocks:        192.94.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:bd:b2:0f:89:e5:b2:5c:2a:a0:c7:c0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Feb  3 14:00:39 2026 GMT
            Not After : May  4 13:00:39 2026 GMT
        Subject: CN=8766857c-f0b5-4a4d-9dc5-abcfb45bc6cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ef:aa:09:e9:f5:73:37:eb:3c:d4:46:e8:bb:
                    2a:58:a6:97:0a:7f:c8:de:8b:ac:9f:3a:a9:06:36:
                    09:eb:49:cc:3a:aa:17:b7:75:42:0b:22:9f:c5:06:
                    28:f3:84:67:b9:3a:7e:22:8b:bd:63:24:f7:ed:fa:
                    48:7c:e6:27:fb:82:a5:bd:f4:51:b2:fc:79:62:6f:
                    2c:c6:35:d3:79:b7:2a:17:28:2e:70:bd:fe:32:b7:
                    a1:ba:96:fc:11:15:c6:90:35:e6:87:5b:ec:99:86:
                    86:5b:87:d5:14:60:fc:b9:47:6e:9b:1c:d0:e2:24:
                    1d:58:ed:d1:4d:9e:8b:7c:88:53:c4:7b:ae:08:2b:
                    dd:ed:0f:3a:5b:cf:aa:aa:41:f8:29:8f:87:b9:9b:
                    20:12:78:27:a7:10:6d:97:3a:35:c3:40:4c:47:09:
                    07:95:f0:25:2c:36:d1:21:da:8d:99:ef:f8:09:62:
                    be:10:d7:6f:22:bc:fd:0c:ac:87:98:81:87:bd:0b:
                    ae:a4:e4:56:2c:27:e7:95:8e:66:4c:64:04:18:19:
                    8a:36:a1:8c:e7:bd:ca:7c:20:ab:a4:d6:6c:16:7e:
                    ba:db:a6:0a:45:7a:be:36:9b:16:e4:b9:17:73:71:
                    d8:4d:38:5f:b2:c9:f7:8a:fc:be:a6:aa:60:01:8d:
                    08:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:3D:06:92:67:3F:F8:5A:EF:00:67:E1:F2:FB:51:CF:FE:F6:0C:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/02d2256b-68fd-3cf4-935d-01f38f5be267.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.94.219.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:15:0e:c4:00:5f:b7:81:65:ac:eb:bb:76:cc:b6:6e:55:31:
         ff:96:82:8d:2f:64:98:84:60:0b:33:63:35:70:60:da:8a:dc:
         b2:1f:48:87:5a:21:b7:8c:1f:88:0b:68:ec:40:cd:07:80:f9:
         65:ef:0b:a4:89:3b:5f:76:44:c6:67:d5:0a:ee:7f:79:f0:91:
         b8:f1:64:b6:7c:10:a9:07:82:d5:3d:c8:92:cb:bd:8b:d8:d0:
         b5:42:5c:ea:84:2f:83:d4:e7:14:c0:dc:20:dd:bc:4a:c1:ec:
         08:79:b9:ac:7c:42:4f:78:f8:96:6d:5b:af:00:bc:b3:2d:9b:
         f5:bd:16:0d:e2:55:78:72:d2:27:84:fc:81:ce:38:4a:ff:3a:
         10:68:a9:c9:4b:80:ff:68:f2:05:94:5b:a8:df:c9:d5:05:2a:
         65:20:a2:f6:3d:40:14:4e:fb:a2:c8:5b:46:0a:7c:7f:65:41:
         a8:1c:b6:e7:72:13:63:a3:03:bd:3b:8c:33:6e:fa:37:d8:84:
         5a:4e:67:85:fc:8b:67:fe:86:25:9a:13:e3:92:69:37:c5:06:
         67:08:1b:07:26:b4:0f:c4:c9:49:66:61:a4:f2:29:2c:d4:27:
         42:1a:14:d6:f7:b2:b2:16:a3:5a:b0:56:7c:aa:0c:a4:aa:c9:
         38:81:bf:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 03:29:10 2026 by rpki-client