Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/f976cb12-2b15-3cbd-af72-ffecc42b0a8e.roa
File:                     f976cb12-2b15-3cbd-af72-ffecc42b0a8e.roa (raw, json)
Hash identifier:          LOcPlKfIovxyeZDMpyGU6iEJvCLEJ2gdlTrO2sboBsg=
Subject key identifier:   27:EB:E1:9B:30:39:D5:5C:D9:A1:10:B4:3E:08:59:F6:2F:71:E3:C4
Certificate issuer:       /CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
Certificate serial:       010D0C9F4328584D24E03C9E26563EB4F4354A00
Authority key identifier: 53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/f976cb12-2b15-3cbd-af72-ffecc42b0a8e.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     32381
IP address blocks:        207.126.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Mar 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e0:3c:9e:26:56:3e:b4:f4:35:4a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=ea170046-ea40-41ae-852f-de78b8399655
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b6:78:4b:5e:69:6d:5e:ef:43:47:32:ce:2f:
                    e9:29:96:82:3b:d7:3f:00:3a:4a:44:06:c6:7a:9b:
                    68:d9:40:c3:81:9f:b7:93:e4:26:e9:db:f1:26:71:
                    8f:4f:ae:3f:57:af:e9:45:61:5b:1f:ff:64:e2:f2:
                    ae:b5:54:22:69:f7:57:24:9d:61:42:c6:fc:c4:12:
                    8e:c3:66:62:19:95:c1:01:51:51:a5:7c:1e:9d:ac:
                    d4:99:82:44:f1:01:f2:95:93:8b:c3:87:43:17:7d:
                    ac:97:2e:1c:67:ff:80:bc:fb:1d:52:ec:b3:e1:38:
                    49:5a:7e:0d:e1:5c:3d:df:df:1f:19:33:5b:cb:a0:
                    36:01:85:ed:45:01:4f:a9:e3:31:d5:ca:de:3e:6c:
                    47:e3:bd:15:df:04:18:cb:fa:cf:23:22:6d:45:14:
                    e8:3b:5b:89:62:88:bd:5f:e2:67:f0:21:91:dc:12:
                    7c:d4:56:4e:c7:7b:79:63:0a:89:0c:5a:ab:91:d2:
                    ec:bf:00:3b:de:1e:9f:27:07:64:ff:a0:af:2a:77:
                    be:c9:4a:44:04:b3:74:00:24:39:7c:89:ca:db:a0:
                    40:17:d0:44:af:8c:38:c2:e9:45:c5:5c:56:1b:89:
                    de:75:6d:76:ff:99:c2:c5:88:28:9f:4b:07:f0:dc:
                    c1:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:EB:E1:9B:30:39:D5:5C:D9:A1:10:B4:3E:08:59:F6:2F:71:E3:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/f976cb12-2b15-3cbd-af72-ffecc42b0a8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl

            X509v3 Authority Key Identifier:
                keyid:53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.126.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:cc:88:d4:f1:ca:54:c7:e2:73:af:b6:6e:3f:5b:c4:e1:ea:
         d7:16:6d:c1:2d:18:20:18:37:0f:bc:56:4f:a9:d3:6a:c8:67:
         24:c9:92:b7:3d:79:ec:5b:44:c3:f9:92:09:dc:c1:cf:33:db:
         43:5a:ca:f1:c5:a4:6a:16:11:ad:49:33:c3:00:52:cf:1b:b9:
         b8:d3:fb:ae:57:d9:11:56:8a:2d:91:e4:92:11:ab:d2:08:60:
         2d:00:54:29:93:8c:78:51:b9:a9:3a:ab:23:54:fe:55:f6:97:
         31:31:ec:a7:bd:c1:35:b4:77:29:69:f2:90:f3:5b:ce:0a:15:
         14:76:c6:05:e2:87:e2:41:e3:99:33:ba:f7:8d:89:1d:27:53:
         60:0a:a0:c2:a0:5a:48:aa:85:2d:ba:af:4e:42:c1:1c:00:93:
         63:05:22:41:50:96:dc:45:7e:6a:be:6a:0f:09:bb:f1:3c:68:
         65:ac:c8:b0:6d:67:f5:b1:2d:66:65:a1:c5:f0:d4:8c:78:65:
         58:75:ca:94:9a:7e:0b:0b:ce:64:df:bd:8a:3f:6e:bd:f7:e6:
         82:14:1e:26:09:be:ac:ab:51:fc:f5:75:28:fc:77:03:30:59:
         b5:09:5f:81:6c:bb:4b:d3:76:6e:66:04:96:03:c9:ef:3e:ff:
         9e:0f:b8:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 18 23:13:53 2026 by rpki-client