Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092/8c3741f9-53db-35d8-a767-d9a9be50f130.roa
File:                     8c3741f9-53db-35d8-a767-d9a9be50f130.roa (raw, json)
Hash identifier:          1MtPKbjBbW4pb8OZUQkjPAXMCpl78Iy90+sROHnE20I=
Subject key identifier:   D3:E7:DA:7F:3A:01:5D:13:5E:30:A5:BF:4A:E3:C2:1E:60:35:91:84
Certificate issuer:       /CN=4f4faf2a-17ff-4827-9bec-c6ffcb2ad092
Certificate serial:       010D0C9F4328584D4D5A597C72733A4E16F8B564
Authority key identifier: E0:13:5E:C0:DD:C6:72:A7:38:54:95:87:17:94:16:8E:6D:99:70:2F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092/8c3741f9-53db-35d8-a767-d9a9be50f130.roa
Signing time:             Fri 27 Mar 2026 01:00:31 +0000
ROA not before:           Fri 27 Mar 2026 01:00:31 +0000
ROA not after:            Thu 25 Jun 2026 01:00:31 +0000
asID:                     29992
IP address blocks:        152.124.0.0/14 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Apr 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4d:5a:59:7c:72:73:3a:4e:16:f8:b5:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f4faf2a-17ff-4827-9bec-c6ffcb2ad092
        Validity
            Not Before: Mar 27 01:00:31 2026 GMT
            Not After : Jun 25 01:00:31 2026 GMT
        Subject: CN=38bf596b-7934-4b59-9ad4-c124c53a1920
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:2d:5a:84:f4:8c:a7:24:2f:16:ad:75:cf:ad:
                    30:7d:b6:c4:d9:de:5e:19:c3:71:c5:8d:a5:21:7d:
                    f1:0a:75:87:31:49:21:57:cc:82:f8:25:17:09:47:
                    90:74:94:ce:83:a5:92:16:d4:8f:4f:76:30:42:12:
                    f6:3e:d4:25:fe:d7:9d:ef:dc:06:9c:07:55:60:68:
                    54:cc:58:4c:48:45:ee:29:24:c5:c5:2c:f6:5b:21:
                    15:e7:68:83:ab:1a:5c:4a:50:6f:f4:98:5a:1f:ab:
                    f8:1f:31:ec:89:19:70:ca:0d:8e:26:63:f6:8e:64:
                    26:d9:3e:11:80:21:18:e4:35:bc:5b:00:06:6b:43:
                    b2:74:1d:41:c3:99:98:bc:11:aa:ca:54:b1:2b:9a:
                    03:1a:84:f7:ca:ed:fc:d2:e8:48:b0:97:f5:23:78:
                    15:0b:95:86:6f:2a:dd:6e:10:e2:80:bd:1e:fe:6d:
                    d6:c7:09:3c:dd:c5:fa:93:95:cf:8c:18:c9:46:c0:
                    e9:45:53:6e:5d:32:98:03:c9:4b:e4:ea:6b:39:ae:
                    2f:7a:0a:e3:d8:d2:f3:65:90:19:c6:8f:72:92:ad:
                    e5:47:db:29:86:3e:ee:df:be:6d:ee:c1:0a:3d:e6:
                    17:90:19:8b:42:4f:2c:ea:90:cb:48:4d:f9:31:3b:
                    c3:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:E7:DA:7F:3A:01:5D:13:5E:30:A5:BF:4A:E3:C2:1E:60:35:91:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092/8c3741f9-53db-35d8-a767-d9a9be50f130.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092.crl

            X509v3 Authority Key Identifier:
                keyid:E0:13:5E:C0:DD:C6:72:A7:38:54:95:87:17:94:16:8E:6D:99:70:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.124.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:d3:fc:3f:e5:d9:2a:d7:45:b3:80:03:11:b3:03:a8:8a:15:
         c7:28:8e:f6:66:54:29:70:22:c8:f3:b2:3b:91:bc:57:9d:88:
         d4:d1:85:0d:8e:59:32:ca:bc:fe:d0:ef:90:5d:19:31:c6:a8:
         b0:86:e4:a7:2d:13:f2:7f:a6:43:83:a3:65:2a:f0:07:b3:a7:
         22:2c:e1:dc:86:21:cb:f5:07:24:e2:66:b9:52:f1:35:c1:10:
         88:64:4c:0c:38:91:8d:ae:4c:90:70:b6:08:6d:09:9c:73:72:
         d6:a2:0c:c1:7a:a0:43:2c:06:bb:2c:e9:e5:3d:fe:5a:42:b3:
         63:58:e8:a0:05:4c:40:a6:d9:7b:a7:8b:bb:9f:e9:6d:8c:34:
         3a:aa:fb:e2:d2:34:1d:05:30:df:98:f2:fc:0f:56:c2:20:65:
         a1:f4:82:05:b8:37:58:97:f7:5b:e6:8a:b8:23:ec:e9:b2:ae:
         04:0d:8b:4a:90:48:a0:56:b3:1d:56:a1:b7:7a:27:ef:b3:c5:
         f8:51:61:90:ce:b1:fc:87:fd:5e:2f:22:3b:a4:a3:44:56:6c:
         5f:03:5f:e3:64:68:b3:fb:5e:6a:31:7b:49:c6:c3:ed:2b:de:
         a0:3e:d0:64:ac:d2:44:3a:da:5a:db:89:30:04:84:8e:48:3c:
         7f:d1:bd:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 13:29:38 2026 by rpki-client