Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f0c6bc94-e3c5-3afd-8ce3-ff49c25a4262.roa
File:                     f0c6bc94-e3c5-3afd-8ce3-ff49c25a4262.roa (raw, json)
Hash identifier:          p3F0KpQq+3e0kGIcwh8Bzfgfn78NlP7Im4F3expDEd0=
Subject key identifier:   98:B8:0C:DE:0E:C8:D4:43:0A:03:B5:0F:C8:21:07:8D:2E:8C:E4:C1
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584CA5F747E1455E06B0331CE500
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f0c6bc94-e3c5-3afd-8ce3-ff49c25a4262.roa
Signing time:             Mon 26 Jan 2026 02:00:32 +0000
ROA not before:           Mon 26 Jan 2026 02:00:32 +0000
ROA not after:            Sun 26 Apr 2026 01:00:32 +0000
asID:                     31898
IP address blocks:        140.91.48.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:a5:f7:47:e1:45:5e:06:b0:33:1c:e5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Jan 26 02:00:32 2026 GMT
            Not After : Apr 26 01:00:32 2026 GMT
        Subject: CN=cd8e9439-1943-48b5-9084-a483d94c9f95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:01:90:88:54:75:f3:4e:37:89:4a:1a:6d:46:
                    be:16:23:25:b2:78:31:33:96:26:ae:f7:78:69:8d:
                    97:c4:88:72:36:cf:16:ec:d7:e7:3d:bc:b0:34:1b:
                    42:68:89:4b:9a:f6:3d:4d:ca:22:73:7e:c1:f8:17:
                    69:51:5d:b1:72:e6:1f:38:5b:5e:46:19:c4:ec:4e:
                    e1:5b:15:82:e4:e8:d5:98:03:10:be:48:1a:e8:f5:
                    e0:3c:0b:7c:fe:95:92:b9:48:aa:1f:2c:75:a3:8a:
                    2a:ab:4a:d2:04:68:6b:2c:cd:c8:b3:b6:25:50:b3:
                    e5:88:48:d4:0c:8b:98:fa:3a:5c:d4:f3:17:af:33:
                    38:36:06:c5:10:29:de:f6:58:cd:1e:d3:84:9a:4d:
                    fe:99:4f:ee:d1:d8:97:81:32:d4:60:92:c5:3e:df:
                    73:73:61:0a:e1:89:3d:82:6f:51:42:6e:91:f4:3f:
                    ab:81:ed:1c:f3:72:e5:e9:c5:c0:44:40:41:b8:b1:
                    e0:21:23:98:00:65:a2:30:68:34:43:b9:e5:20:e6:
                    0b:5d:0c:27:02:a1:96:76:34:ea:96:63:35:6b:42:
                    54:b8:66:1e:61:b1:82:cb:8b:e8:2c:cc:a0:0b:6f:
                    44:49:90:6c:4e:c1:91:9d:73:4f:75:50:38:40:10:
                    5f:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:B8:0C:DE:0E:C8:D4:43:0A:03:B5:0F:C8:21:07:8D:2E:8C:E4:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f0c6bc94-e3c5-3afd-8ce3-ff49c25a4262.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.91.48.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:5e:2c:d7:42:90:69:e2:de:19:6f:7a:0f:00:9e:7f:5b:6a:
         ca:50:82:bc:f6:99:03:0e:bf:0e:d6:bd:d1:9d:5c:9b:98:98:
         71:28:5e:b1:53:6c:7a:1f:74:cc:8e:17:2e:be:83:2b:09:b5:
         7c:04:06:b7:9a:00:ba:b8:8e:dd:2e:7f:3a:14:b9:08:0f:59:
         a9:53:a7:b0:c9:64:9a:71:a8:f0:9f:47:82:52:56:53:fe:ff:
         0f:df:db:59:92:c7:64:7f:8e:ba:e8:9b:98:21:fd:98:ab:31:
         26:f3:55:9b:a9:82:37:5f:ac:a7:6c:0a:2a:c8:62:5e:1e:3f:
         db:2b:4c:dc:05:d4:4b:d5:19:54:6d:2f:7d:fb:c9:b4:8f:a1:
         20:4f:7e:b6:d5:83:6b:ea:dd:ef:fc:4a:f8:19:53:b6:35:64:
         36:be:1e:a7:10:07:75:50:75:0c:4b:c5:4e:5a:ec:2f:54:c7:
         af:9c:2d:e5:16:da:ea:dd:84:e4:9a:be:1b:44:4d:7f:98:93:
         f8:a2:2b:5a:c7:ba:cf:63:41:c4:e3:d2:38:01:10:c9:2f:10:
         63:09:05:8a:76:35:79:2d:07:23:ca:95:9e:8a:3d:3b:e2:53:
         06:3f:03:01:6d:7c:be:b0:ec:38:19:2a:1a:fb:77:8f:53:fd:
         94:7d:43:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 03:26:25 2026 by rpki-client