Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/be0c0ba3-5f5d-4f25-9828-23e3dd604ee7/1240df73-c51c-3ee8-876b-f6ef5d6e3e60.roa
File:                     1240df73-c51c-3ee8-876b-f6ef5d6e3e60.roa (raw, json)
Hash identifier:          7om01DW/bDDU2AvX7Qkg642251yTOqt5G4zoux7aL28=
Subject key identifier:   CD:86:85:33:94:E7:2F:60:9B:AF:BF:50:BD:90:D1:21:A6:DC:06:BA
Certificate issuer:       /CN=be0c0ba3-5f5d-4f25-9828-23e3dd604ee7
Certificate serial:       010D0C9F4328584D0EA7C07A23BF33719F223540
Authority key identifier: A0:F0:66:F4:C5:4F:A7:E9:1B:46:F2:18:3D:DC:96:F7:F7:D3:2B:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/be0c0ba3-5f5d-4f25-9828-23e3dd604ee7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/be0c0ba3-5f5d-4f25-9828-23e3dd604ee7/1240df73-c51c-3ee8-876b-f6ef5d6e3e60.roa
Signing time:             Wed 04 Mar 2026 14:00:41 +0000
ROA not before:           Wed 04 Mar 2026 14:00:41 +0000
ROA not after:            Tue 02 Jun 2026 13:00:41 +0000
asID:                     399194
IP address blocks:        172.81.28.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/be0c0ba3-5f5d-4f25-9828-23e3dd604ee7/be0c0ba3-5f5d-4f25-9828-23e3dd604ee7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/be0c0ba3-5f5d-4f25-9828-23e3dd604ee7/be0c0ba3-5f5d-4f25-9828-23e3dd604ee7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/be0c0ba3-5f5d-4f25-9828-23e3dd604ee7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0e:a7:c0:7a:23:bf:33:71:9f:22:35:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be0c0ba3-5f5d-4f25-9828-23e3dd604ee7
        Validity
            Not Before: Mar  4 14:00:41 2026 GMT
            Not After : Jun  2 13:00:41 2026 GMT
        Subject: CN=3886b52a-27e6-4956-a965-53c391b3db5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:ea:0e:e6:47:b1:38:2e:c2:e4:1b:c4:e0:72:
                    28:0e:c5:22:29:d4:8b:2f:fa:1a:2d:bc:42:1d:a6:
                    32:3f:aa:6d:76:59:f1:d2:a6:49:df:00:dd:ee:58:
                    4a:1c:3d:a5:81:9f:d7:4a:70:9f:e9:f1:16:15:21:
                    01:55:37:d4:4e:06:39:4f:c1:72:22:83:99:a2:be:
                    d1:3c:0d:99:c2:7b:89:61:e0:50:93:26:3f:21:58:
                    f8:e3:40:af:17:c7:f9:a0:9a:b2:8d:10:7b:e8:7b:
                    23:cf:8f:8c:fc:e1:04:59:22:3a:70:e9:63:99:04:
                    67:f0:7f:c1:54:91:e0:39:58:90:f2:a8:de:b7:32:
                    4b:53:04:e2:df:4f:37:0e:06:02:96:79:01:2a:a5:
                    75:76:74:0e:2b:b3:f2:99:68:83:9e:4a:7f:9b:a4:
                    62:88:84:34:a1:3f:b8:4c:a6:2f:0c:0a:96:4b:c9:
                    d7:f6:28:3e:e9:3c:23:14:1f:e4:2b:b2:9c:99:3c:
                    9e:3f:1a:a4:83:d7:d7:1e:9f:04:71:73:5d:e7:16:
                    e1:47:f2:e0:5d:20:55:3e:62:6b:6f:ef:ed:b2:69:
                    8c:41:e7:2f:de:2e:0f:5f:9e:fb:dc:81:0e:7b:18:
                    16:c2:82:7d:00:1d:2c:fc:5d:36:8c:0e:fe:ce:dc:
                    57:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:86:85:33:94:E7:2F:60:9B:AF:BF:50:BD:90:D1:21:A6:DC:06:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/be0c0ba3-5f5d-4f25-9828-23e3dd604ee7/1240df73-c51c-3ee8-876b-f6ef5d6e3e60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/be0c0ba3-5f5d-4f25-9828-23e3dd604ee7/be0c0ba3-5f5d-4f25-9828-23e3dd604ee7.crl

            X509v3 Authority Key Identifier:
                keyid:A0:F0:66:F4:C5:4F:A7:E9:1B:46:F2:18:3D:DC:96:F7:F7:D3:2B:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/be0c0ba3-5f5d-4f25-9828-23e3dd604ee7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.81.28.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:61:90:9c:5f:c0:f5:2d:e3:2b:4c:aa:35:90:50:44:6e:0c:
         26:6a:87:a7:87:c1:ff:18:73:a7:a7:1a:8b:3e:c3:8b:ea:b0:
         fd:9f:d2:ee:9d:1c:a8:39:eb:0c:62:97:30:03:66:68:8c:54:
         3d:23:5c:26:19:d9:90:28:e4:ea:42:98:7e:b8:34:cb:07:d2:
         62:8b:5d:4b:a8:0a:ea:58:28:93:e3:83:d1:b0:c5:7f:6f:01:
         71:f8:98:78:ed:f6:65:87:af:cf:75:91:82:81:10:b4:db:82:
         51:88:6a:1c:24:6c:8a:d0:56:26:39:7e:9d:ec:d3:be:64:49:
         e9:e6:63:98:e0:bf:a4:bc:4e:8d:53:e1:21:83:a6:85:0c:c7:
         f5:f2:b8:37:da:76:3d:aa:a2:f9:ff:47:a3:48:5f:81:4a:cf:
         d4:74:7e:c2:ce:a9:a2:47:6d:f1:a7:cf:e7:e7:b4:58:30:b3:
         80:2d:4c:1c:24:12:fb:de:70:6a:71:cd:bb:30:94:6f:d1:1f:
         99:01:e5:30:d9:5f:c4:3c:17:0f:a5:40:ed:66:84:7e:2f:7f:
         e1:97:32:9b:8d:54:d1:5a:0e:4b:e0:a8:ca:ac:ae:5a:1d:75:
         7f:13:73:0c:bd:f2:0c:ef:b8:07:d3:6c:fd:7c:77:b0:38:51:
         70:19:15:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:53:28 2026 by rpki-client