Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/dbffbdc6-dd77-328c-8b88-3e76b95f78b4.roa
File:                     dbffbdc6-dd77-328c-8b88-3e76b95f78b4.roa (raw, json)
Hash identifier:          tSaiRnF44ZqBQk8Z5as2VpVWZURQYjnDjplP811o3BQ=
Subject key identifier:   F1:45:59:08:2F:79:BF:C6:F1:1B:34:4F:0E:6A:E3:0C:1E:24:38:52
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584CA5F752D9D8E9FF4A89C1AD20
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/dbffbdc6-dd77-328c-8b88-3e76b95f78b4.roa
Signing time:             Mon 26 Jan 2026 02:00:32 +0000
ROA not before:           Mon 26 Jan 2026 02:00:32 +0000
ROA not after:            Sun 26 Apr 2026 01:00:32 +0000
asID:                     31898
IP address blocks:        168.110.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:a5:f7:52:d9:d8:e9:ff:4a:89:c1:ad:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Jan 26 02:00:32 2026 GMT
            Not After : Apr 26 01:00:32 2026 GMT
        Subject: CN=c702ad01-e7fd-43f1-b145-fcd93a24f341
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:57:d5:de:16:58:f5:12:bf:8f:3b:2c:6e:29:
                    ff:a7:eb:b4:e3:58:e5:58:72:63:20:67:dd:fd:f7:
                    eb:8a:f8:00:55:65:e0:0d:2d:70:59:71:d3:ef:93:
                    93:9e:4d:d4:dc:04:36:85:79:a5:3b:af:24:c1:6b:
                    1d:a0:af:fc:54:71:ee:4c:ce:e4:18:72:71:3c:a9:
                    ea:8a:ee:e4:db:15:51:42:ac:c1:0e:7b:dd:3b:ba:
                    39:98:e7:3a:81:71:45:22:ac:2a:11:d2:da:f3:f0:
                    fc:bb:aa:bb:c4:31:3d:bf:f8:36:31:4a:85:3e:b4:
                    3c:d8:95:e2:db:c9:51:88:72:99:a3:53:b7:fc:fa:
                    52:60:ae:37:02:8a:7c:fd:c2:cf:1c:68:da:8c:09:
                    6a:f9:74:81:04:ff:53:4a:cb:a5:40:fc:fa:3d:1f:
                    b7:9c:0e:0a:04:8e:00:25:89:44:da:3c:9a:0f:c6:
                    ce:5f:24:5e:5e:be:0e:51:52:c6:51:12:2b:e5:a7:
                    72:a0:4d:68:b0:66:6e:2c:c7:70:fd:71:65:d6:30:
                    10:59:62:13:27:7a:56:ce:64:22:ce:96:91:b5:4e:
                    d6:fb:4b:f6:7d:fe:9e:3b:6c:e4:44:92:b9:e8:65:
                    b4:25:5f:9a:e5:0a:32:a1:f8:57:69:0e:66:7d:9e:
                    a8:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:45:59:08:2F:79:BF:C6:F1:1B:34:4F:0E:6A:E3:0C:1E:24:38:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/dbffbdc6-dd77-328c-8b88-3e76b95f78b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.110.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:09:ee:53:24:9e:51:86:c7:91:82:87:0f:ed:3e:19:27:da:
         b6:95:c2:2a:80:f4:06:e8:ad:fc:ba:f9:9b:26:1e:fc:5b:df:
         ce:66:9c:da:80:77:0f:05:f5:90:0c:1b:c1:9f:c0:16:9d:31:
         79:19:72:db:4a:af:db:25:98:c7:75:df:16:6f:53:8f:18:a2:
         a0:7f:d1:80:45:76:a5:cd:26:d2:be:b3:db:c8:5d:9e:fc:9c:
         7b:df:32:25:97:69:61:ca:42:bc:8b:71:a6:ef:78:74:e6:d6:
         16:a6:cf:48:6b:c1:4e:25:57:72:48:b5:53:66:58:7e:b1:ce:
         e9:d7:ba:3f:f8:53:f9:34:27:33:35:7b:45:bd:f2:34:f5:14:
         4c:76:8c:d3:25:b2:1c:11:07:71:94:d2:96:47:4b:55:71:9f:
         11:dd:a3:a5:d7:f1:ad:e0:a0:cf:b4:9b:2f:75:0e:7f:c4:aa:
         5a:4f:bf:43:ab:ba:ae:93:61:5d:4d:01:fc:64:d1:25:09:98:
         0c:1d:79:7d:d2:bc:38:eb:76:90:74:ad:0e:f3:2e:5e:1e:8e:
         3e:e5:05:2d:f5:9d:6d:f0:44:e0:4f:fa:64:45:67:43:ba:c6:
         61:05:be:b2:4f:b8:ad:05:19:d1:0d:0d:a9:55:66:5c:b4:a8:
         cf:fc:42:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 03:27:20 2026 by rpki-client