Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2a5db58-16b0-3f11-8afe-8ff1eca11134.roa
File:                     c2a5db58-16b0-3f11-8afe-8ff1eca11134.roa (raw, json)
Hash identifier:          0Soy8O7Hrr3s4FVbprCCXPQBEfEet6s+h/Z6sNXf7ug=
Subject key identifier:   DD:61:28:6D:9E:9A:A0:BB:06:8D:35:D3:87:A1:71:0B:7B:6B:D8:2C
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584CBF171EAB4BD4ED413250DFA0
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2a5db58-16b0-3f11-8afe-8ff1eca11134.roa
Signing time:             Wed 04 Feb 2026 02:00:31 +0000
ROA not before:           Wed 04 Feb 2026 02:00:31 +0000
ROA not after:            Tue 05 May 2026 01:00:31 +0000
asID:                     31898
IP address blocks:        192.9.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:bf:17:1e:ab:4b:d4:ed:41:32:50:df:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Feb  4 02:00:31 2026 GMT
            Not After : May  5 01:00:31 2026 GMT
        Subject: CN=61f5d6ea-b956-4f28-b5ca-4c8516671966
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e8:51:21:a8:85:ad:a6:47:19:7a:de:cf:6c:
                    78:9d:db:c7:82:c5:50:2a:58:6c:e7:da:0e:07:de:
                    41:b5:a0:5c:db:6c:7d:37:3e:75:6b:89:d3:95:cf:
                    40:1a:56:cd:0d:17:51:e7:49:b3:a1:0f:49:e9:54:
                    9a:53:5e:d0:cd:bf:39:ab:62:6c:60:49:e5:11:9d:
                    b3:79:3a:ab:f3:83:ca:f5:9c:c7:a3:88:7e:56:23:
                    37:cf:96:84:a5:a0:46:6a:ee:fa:ca:7b:8b:6f:4e:
                    81:ee:67:5a:55:d5:1b:f7:13:ae:2c:06:5d:61:61:
                    10:f1:41:8f:22:7a:32:48:34:89:cd:c8:f1:20:6c:
                    21:d2:69:e9:cf:5c:b0:1f:51:5d:8a:c4:f0:f4:e8:
                    ce:d8:c0:9e:97:d0:64:42:f6:03:3f:0e:17:d4:8b:
                    2d:a1:c1:fe:c5:7a:8d:1d:3f:c9:7b:46:f0:37:8a:
                    8d:e2:21:72:a6:00:e8:a7:be:2c:63:7e:f9:c9:a9:
                    d2:e8:22:3b:da:e5:d9:04:f4:42:a4:cc:62:63:c9:
                    43:cd:4e:3b:1a:89:59:4b:74:ac:bf:16:13:b8:63:
                    83:29:c7:d8:bd:b4:22:ae:13:ed:b4:f9:0f:c8:e5:
                    25:e6:a0:f8:19:09:96:be:f5:eb:52:e8:70:af:63:
                    cd:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:61:28:6D:9E:9A:A0:BB:06:8D:35:D3:87:A1:71:0B:7B:6B:D8:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2a5db58-16b0-3f11-8afe-8ff1eca11134.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.9.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:da:94:44:45:81:17:0e:22:62:e5:4b:63:61:cd:1f:fb:1f:
         20:73:df:bf:e2:15:d2:bd:c9:42:62:80:11:e5:46:e3:db:70:
         2c:86:8e:79:f8:3f:5d:f4:3e:f2:9f:37:15:1f:9c:44:97:c4:
         ed:02:4c:ed:61:bc:6c:91:f9:ed:59:fd:a3:fa:f5:35:dd:b8:
         6b:23:e1:87:f2:1c:f2:0c:e9:6f:a1:d0:0d:c2:46:19:3a:d8:
         27:36:ed:01:cd:9a:d9:24:51:32:dc:8a:08:1c:f2:c4:62:c7:
         92:e1:48:ac:83:29:5d:d3:f9:db:25:40:a3:51:51:b8:d0:ed:
         17:29:53:d9:5f:51:18:1d:eb:48:02:ef:be:39:25:f7:f2:06:
         15:66:d9:ba:7f:18:d6:92:e3:be:f2:f2:d6:a6:ac:35:fe:17:
         11:bf:ce:d6:85:cc:6c:26:da:0b:66:26:17:bc:22:ab:4a:96:
         34:24:b6:b4:e6:ea:e5:78:65:d4:19:b5:61:7b:75:18:c3:4c:
         05:62:8e:38:32:2f:dc:99:52:f5:dc:54:d7:f7:35:88:1c:5f:
         8c:d5:25:45:cc:72:50:c4:6e:81:a9:a7:6d:ba:62:f4:42:ab:
         76:d6:f7:9e:2e:ca:c5:61:cd:a4:6e:96:14:2b:81:95:ac:8b:
         d4:fe:d5:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 03:32:01 2026 by rpki-client