Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c418ca6f-20c8-4f1b-b4f5-e4f805862363/8298df6b-5374-3b5b-805b-56273bfaf2d8.roa
File:                     8298df6b-5374-3b5b-805b-56273bfaf2d8.roa (raw, json)
Hash identifier:          2EtAG+aRhTnv5ySbI8Vccc45v+BKByC/OMTRmnEelmo=
Subject key identifier:   98:3D:5F:07:2C:A6:AB:B7:8F:38:4D:AD:C5:90:12:AB:56:54:45:A5
Certificate issuer:       /CN=c418ca6f-20c8-4f1b-b4f5-e4f805862363
Certificate serial:       010D0C9F4328584D2644ABAC8B369074B96634E0
Authority key identifier: 35:FA:88:74:F9:80:ED:CD:A6:42:D2:0B:1E:D0:B8:8B:EF:EB:D7:7B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c418ca6f-20c8-4f1b-b4f5-e4f805862363.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c418ca6f-20c8-4f1b-b4f5-e4f805862363/8298df6b-5374-3b5b-805b-56273bfaf2d8.roa
Signing time:             Fri 13 Mar 2026 01:00:31 +0000
ROA not before:           Fri 13 Mar 2026 01:00:31 +0000
ROA not after:            Thu 11 Jun 2026 01:00:31 +0000
asID:                     13767
IP address blocks:        162.252.168.0/24 maxlen: 24
                          2606:fe80:10::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c418ca6f-20c8-4f1b-b4f5-e4f805862363/c418ca6f-20c8-4f1b-b4f5-e4f805862363.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c418ca6f-20c8-4f1b-b4f5-e4f805862363/c418ca6f-20c8-4f1b-b4f5-e4f805862363.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c418ca6f-20c8-4f1b-b4f5-e4f805862363.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:26:44:ab:ac:8b:36:90:74:b9:66:34:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c418ca6f-20c8-4f1b-b4f5-e4f805862363
        Validity
            Not Before: Mar 13 01:00:31 2026 GMT
            Not After : Jun 11 01:00:31 2026 GMT
        Subject: CN=0741afdc-00e1-44a6-9bb5-ca173cf81739
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:30:94:a0:bc:41:64:5b:ee:1b:44:b8:3a:e7:
                    47:97:e0:96:2c:83:17:16:52:1d:86:1a:5a:da:1a:
                    8b:cf:d6:4f:75:fe:46:48:05:bb:d4:84:00:80:25:
                    bc:a1:13:16:c8:b6:c3:c2:6c:00:8c:0e:85:97:71:
                    fb:eb:b8:38:84:da:24:50:d5:29:0e:78:1b:af:2d:
                    d1:3a:ae:bc:53:c1:6c:e2:e0:66:03:d9:f5:cd:6a:
                    6c:9c:72:81:64:a8:15:7b:47:02:ad:63:27:19:7f:
                    be:b5:a1:81:13:c6:cf:92:c5:83:01:a6:6c:69:f2:
                    80:75:03:bb:13:82:5a:89:07:e5:77:1a:0b:2b:d3:
                    03:12:87:f4:f5:70:1b:77:03:de:6c:ef:b4:58:50:
                    7e:46:03:07:3b:79:b6:06:f5:ae:28:3f:89:72:e4:
                    f0:7c:56:cd:31:c3:0e:06:12:e7:a7:79:18:6e:ba:
                    95:9d:f2:4a:15:60:f1:67:bf:fa:c8:54:cc:be:b1:
                    29:98:2f:19:9f:e0:b3:1f:06:d6:b1:33:f0:0e:06:
                    fd:cc:15:43:b8:99:74:4d:00:dc:07:e5:02:ed:50:
                    3c:65:6f:0f:e0:21:07:e1:20:90:64:09:df:3b:af:
                    65:bc:48:b0:ca:fe:9a:92:ad:2f:7d:27:4c:f3:4d:
                    fa:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:3D:5F:07:2C:A6:AB:B7:8F:38:4D:AD:C5:90:12:AB:56:54:45:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c418ca6f-20c8-4f1b-b4f5-e4f805862363/8298df6b-5374-3b5b-805b-56273bfaf2d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c418ca6f-20c8-4f1b-b4f5-e4f805862363/c418ca6f-20c8-4f1b-b4f5-e4f805862363.crl

            X509v3 Authority Key Identifier:
                keyid:35:FA:88:74:F9:80:ED:CD:A6:42:D2:0B:1E:D0:B8:8B:EF:EB:D7:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c418ca6f-20c8-4f1b-b4f5-e4f805862363.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.252.168.0/24
                IPv6:
                  2606:fe80:10::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ca:3f:8f:72:93:1d:ab:b0:d7:db:0a:c7:96:2e:8d:c3:a0:af:
         9d:5b:2f:27:ae:22:ee:4b:09:29:bd:03:a5:21:8f:7c:c6:cb:
         b5:79:2c:8e:6b:9b:cc:23:9a:f4:be:35:ac:e4:6a:ee:80:31:
         db:1d:ac:da:ab:a1:7f:7f:51:25:51:5e:9a:59:dd:bc:2c:74:
         f6:a7:06:c9:4a:fe:89:71:10:67:3b:c2:a3:4d:ea:8d:e2:fa:
         da:3b:40:be:d0:7b:d4:4b:c0:a3:9b:d0:23:2e:b0:49:f9:22:
         e1:80:8d:ce:78:b3:3a:81:d8:73:5f:b0:92:f3:aa:f3:b7:e0:
         bf:2b:0b:aa:54:b5:de:cb:7b:e9:c1:8f:b6:5f:b8:bc:78:97:
         47:ff:b7:18:0a:1d:42:cb:24:e0:32:9b:65:51:74:ee:6a:00:
         8a:9d:b9:09:c3:a8:ba:3e:d1:d0:b7:a7:26:c5:38:8a:a0:48:
         65:5d:1e:d9:e5:d2:fc:ed:1e:f0:e2:cd:45:60:ab:ec:c3:8f:
         fa:68:40:f3:bb:40:d4:50:f8:24:44:e7:2d:d9:ff:ed:13:e7:
         d1:87:3b:93:6d:7c:f5:af:02:fe:de:61:17:57:43:45:ce:65:
         b3:c0:5b:9f:bb:41:76:04:82:49:3a:ec:ad:6d:57:e8:3c:7b:
         dd:06:26:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 20:41:50 2026 by rpki-client