Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ff44f78c-6d70-421c-a422-92b3c44d921c/c8439fb3-e084-30ec-9bc4-469b63b85a0e.roa
File:                     c8439fb3-e084-30ec-9bc4-469b63b85a0e.roa (raw, json)
Hash identifier:          g3lnz44LiuUFrSFZtV9sb3QvBe056V8DwKeo6daJ/iw=
Subject key identifier:   E3:A1:32:B4:AC:74:63:A8:B5:1C:FD:E4:88:EF:0D:20:32:E1:4B:05
Certificate issuer:       /CN=ff44f78c-6d70-421c-a422-92b3c44d921c
Certificate serial:       010D0C9F4328584D392293422CEF83DB9F91AAF8
Authority key identifier: 43:C5:A6:43:C3:B1:B3:7A:3F:E6:C8:A5:19:C2:52:4A:81:B1:A3:2D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ff44f78c-6d70-421c-a422-92b3c44d921c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ff44f78c-6d70-421c-a422-92b3c44d921c/c8439fb3-e084-30ec-9bc4-469b63b85a0e.roa
Signing time:             Thu 19 Mar 2026 19:12:19 +0000
ROA not before:           Thu 19 Mar 2026 19:12:19 +0000
ROA not after:            Wed 17 Jun 2026 19:12:19 +0000
asID:                     17303
IP address blocks:        170.76.237.0/24 maxlen: 24
                          2607:b9c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ff44f78c-6d70-421c-a422-92b3c44d921c/ff44f78c-6d70-421c-a422-92b3c44d921c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ff44f78c-6d70-421c-a422-92b3c44d921c/ff44f78c-6d70-421c-a422-92b3c44d921c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ff44f78c-6d70-421c-a422-92b3c44d921c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:39:22:93:42:2c:ef:83:db:9f:91:aa:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff44f78c-6d70-421c-a422-92b3c44d921c
        Validity
            Not Before: Mar 19 19:12:19 2026 GMT
            Not After : Jun 17 19:12:19 2026 GMT
        Subject: CN=215c1d39-2f25-4908-a759-f750e2632c7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ac:a7:58:b4:77:b3:d7:3a:a2:19:aa:4b:9b:
                    52:f9:3e:5b:8e:2b:66:c0:14:90:ca:67:03:a0:2a:
                    0c:35:89:f9:7d:d7:df:aa:0c:5c:52:8b:ac:68:4b:
                    54:89:1e:6d:33:b9:a1:f5:f5:33:fe:98:c2:02:70:
                    3b:c8:89:10:9f:f0:8b:3e:ad:2d:50:37:7a:df:09:
                    51:5f:61:1e:fc:c2:9d:c1:d2:66:b4:c7:04:52:47:
                    cf:1f:da:ee:0f:89:70:28:2d:6a:60:fc:29:c8:66:
                    dc:f3:f5:c7:40:8f:1d:0d:a7:11:ce:26:b2:3f:e0:
                    20:18:f4:81:88:db:41:ec:49:03:fd:0b:d0:a0:16:
                    0d:31:70:9c:2f:57:1f:69:f6:e1:99:c2:44:3e:93:
                    0e:77:1c:38:ab:5e:18:ce:7b:1f:e8:50:4c:a4:3e:
                    32:96:b5:86:74:41:b1:4e:6f:45:ac:c1:f9:6b:76:
                    c6:59:d2:12:82:03:aa:4e:ce:7c:59:94:76:aa:49:
                    bf:15:44:ed:91:cd:2e:e5:2c:2e:5b:44:8b:4e:bd:
                    4a:e5:e6:17:74:0c:55:45:1f:6b:6c:81:80:f4:ad:
                    4d:fb:4c:f0:ac:f9:56:d8:8a:af:1b:4b:3d:3e:52:
                    ba:ae:95:b4:78:58:55:33:b2:79:ae:fe:ce:b5:f3:
                    9a:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:A1:32:B4:AC:74:63:A8:B5:1C:FD:E4:88:EF:0D:20:32:E1:4B:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ff44f78c-6d70-421c-a422-92b3c44d921c/c8439fb3-e084-30ec-9bc4-469b63b85a0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ff44f78c-6d70-421c-a422-92b3c44d921c/ff44f78c-6d70-421c-a422-92b3c44d921c.crl

            X509v3 Authority Key Identifier:
                keyid:43:C5:A6:43:C3:B1:B3:7A:3F:E6:C8:A5:19:C2:52:4A:81:B1:A3:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ff44f78c-6d70-421c-a422-92b3c44d921c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.76.237.0/24
                IPv6:
                  2607:b9c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:e4:06:80:88:16:5c:fd:ee:53:02:36:9d:f6:85:81:88:d6:
         63:96:b6:cc:16:e6:5d:6a:92:41:3e:4b:0c:39:93:9c:bc:81:
         dc:13:c3:e9:dd:6b:07:74:46:11:1e:ff:11:50:bc:94:a5:1d:
         ca:73:da:5d:0f:a7:ab:5d:a9:58:3a:b4:bd:3b:c2:b3:99:43:
         0d:b8:3b:0c:dc:c4:03:61:c4:a3:f2:a9:85:11:fe:01:7d:51:
         a9:98:9b:76:15:26:39:81:9d:30:11:bb:77:b9:68:6d:d7:e5:
         30:c4:91:1b:57:fd:7a:39:59:88:23:69:f9:33:de:8c:88:1d:
         57:c3:4b:f8:b8:b9:fd:f6:c1:e0:4e:b0:69:49:cc:a0:c4:26:
         94:35:ba:6e:38:ef:7a:62:4e:7a:bf:45:f3:21:9b:04:ef:f9:
         37:38:cf:6f:fa:30:56:f7:f4:ed:60:0a:f3:d3:46:b5:3b:02:
         9a:34:2d:ee:f7:d0:e3:2c:28:06:8b:62:21:1a:c4:70:2c:f4:
         5b:6a:37:35:99:ee:a6:af:2b:56:62:bb:94:ca:c3:fc:b3:ea:
         1e:f9:ac:11:d8:ff:4e:df:95:81:ea:f7:ed:5e:19:1d:29:45:
         b5:28:f6:5e:15:31:90:6a:c8:46:29:79:09:a7:fd:12:4b:09:
         ef:66:3e:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 12:31:37 2026 by rpki-client