Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b/3380adc5-3344-3ade-bd94-ce7bb7300997.roa
File:                     3380adc5-3344-3ade-bd94-ce7bb7300997.roa (raw, json)
Hash identifier:          Co15WGNIslETYZcDiMBT6PWjELB+InjEEwMDMcnuUlc=
Subject key identifier:   72:97:99:C4:27:83:5D:EE:BD:D7:39:9C:7B:D4:C4:15:BE:1A:07:FE
Certificate issuer:       /CN=2bdaa217-f00f-46c5-a102-e5ff2acb105b
Certificate serial:       010D0C9F4328584D6AAA6BC123902BA68D4B3970
Authority key identifier: C0:88:D3:59:8E:C0:4C:E4:97:77:88:B7:37:9D:8F:BB:3D:E9:1E:A3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b/3380adc5-3344-3ade-bd94-ce7bb7300997.roa
Signing time:             Mon 06 Apr 2026 13:00:30 +0000
ROA not before:           Mon 06 Apr 2026 13:00:30 +0000
ROA not after:            Sun 05 Jul 2026 13:00:30 +0000
asID:                     0
IP address blocks:        206.53.170.0/24 maxlen: 24
                          2606:a980:0:3::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b/2bdaa217-f00f-46c5-a102-e5ff2acb105b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b/2bdaa217-f00f-46c5-a102-e5ff2acb105b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Apr 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6a:aa:6b:c1:23:90:2b:a6:8d:4b:39:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bdaa217-f00f-46c5-a102-e5ff2acb105b
        Validity
            Not Before: Apr  6 13:00:30 2026 GMT
            Not After : Jul  5 13:00:30 2026 GMT
        Subject: CN=43e4c6d1-1aa7-4e1e-b0b1-9b9e793545c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:31:52:0b:de:d1:f8:78:7b:1c:75:35:c7:34:
                    b6:c9:91:1e:85:89:d5:04:05:c9:e9:c4:5b:85:14:
                    07:17:29:50:d6:44:e6:25:89:83:aa:dd:0e:88:fc:
                    9c:83:5f:48:c0:15:61:a5:22:23:bc:6f:4b:e7:3c:
                    f0:22:63:f9:6a:e1:51:1f:5f:b8:8a:8d:95:3b:38:
                    7e:a6:f1:d6:12:c8:65:ee:f2:fd:4e:32:05:02:e7:
                    21:c2:f9:ca:d8:29:6a:0d:4d:39:7e:90:62:6b:12:
                    15:14:3e:ed:dc:11:12:09:4f:7d:41:89:62:49:06:
                    f1:5e:e4:0a:f9:d0:a7:da:52:37:39:53:83:24:84:
                    03:54:92:a8:cd:7b:dc:76:92:27:2a:f4:92:44:d5:
                    65:4b:f4:7b:0d:44:78:a8:09:cd:4a:8f:7f:b8:3e:
                    42:3e:3a:a7:a5:c4:16:7d:ae:ec:d3:da:02:4b:ca:
                    1f:27:09:92:e4:89:21:af:bc:49:bc:d0:16:13:47:
                    65:c8:22:7d:74:23:5d:1b:21:8c:93:36:e7:7c:db:
                    d9:7f:43:78:5f:35:af:f4:ce:4a:3e:e3:46:d3:e3:
                    e4:b9:33:f5:1d:71:f8:30:fa:5f:a8:19:f6:e3:81:
                    a2:fc:e3:e6:0b:e6:b1:73:30:4d:4b:26:2e:fd:74:
                    4a:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:97:99:C4:27:83:5D:EE:BD:D7:39:9C:7B:D4:C4:15:BE:1A:07:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b/3380adc5-3344-3ade-bd94-ce7bb7300997.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b/2bdaa217-f00f-46c5-a102-e5ff2acb105b.crl

            X509v3 Authority Key Identifier:
                keyid:C0:88:D3:59:8E:C0:4C:E4:97:77:88:B7:37:9D:8F:BB:3D:E9:1E:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.53.170.0/24
                IPv6:
                  2606:a980:0:3::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:d5:8b:80:59:53:ee:59:26:82:5f:03:f1:e2:32:26:a8:59:
         32:49:44:b5:39:93:61:90:78:e3:16:64:06:91:c2:29:c2:e6:
         44:f8:03:76:cd:9a:5a:ba:ce:01:93:62:14:9e:dc:35:f1:68:
         81:d0:1e:71:55:1c:8b:65:2c:81:db:5e:cf:65:38:3b:a0:e7:
         40:e5:cf:24:69:08:b6:ad:f9:b6:56:c1:12:49:b3:84:8b:df:
         6e:1a:de:c6:f3:05:be:0e:9f:60:81:b7:b8:f1:43:91:4d:29:
         c7:ef:2a:33:20:77:8d:ae:f1:e2:aa:31:90:26:18:c7:92:1c:
         39:c7:a7:61:b6:53:dc:b0:3e:12:53:9d:62:57:e7:2c:c0:05:
         a1:aa:5e:8a:de:bc:ae:b4:48:5d:01:33:d4:45:e2:8b:d6:6a:
         cd:1d:69:56:23:f8:95:5f:fd:1b:11:4a:ba:0f:19:18:29:4e:
         58:c4:b9:26:85:fa:21:75:a0:61:22:05:5c:15:23:a7:e8:e5:
         c8:30:fc:80:48:23:f1:ab:69:15:f8:98:8d:90:eb:b3:e6:20:
         44:a2:cc:38:65:11:0a:63:aa:94:04:67:5a:74:45:9d:ae:50:
         cb:9c:5a:d7:f9:ea:0b:b7:ef:7f:41:a2:44:46:80:f9:09:90:
         94:ae:c7:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:41:35 2026 by rpki-client