Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/e9773053-a133-3b93-b9c7-d11f12756773.roa
File:                     e9773053-a133-3b93-b9c7-d11f12756773.roa (raw, json)
Hash identifier:          oThZFXVa88mNyCAc8d9EjkCB/hNh+zCEUVZBvE9eW1M=
Subject key identifier:   B4:8E:FB:0D:B7:29:EA:6A:C3:E6:C1:1C:AB:9C:E9:A8:FA:2E:EC:26
Certificate issuer:       /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial:       010D0C9F4328584D2A74BDD63C4742163662C940
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/e9773053-a133-3b93-b9c7-d11f12756773.roa
Signing time:             Sat 14 Mar 2026 13:00:40 +0000
ROA not before:           Sat 14 Mar 2026 13:00:40 +0000
ROA not after:            Fri 12 Jun 2026 13:00:40 +0000
asID:                     23471
IP address blocks:        107.161.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 26 Mar 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:2a:74:bd:d6:3c:47:42:16:36:62:c9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
        Validity
            Not Before: Mar 14 13:00:40 2026 GMT
            Not After : Jun 12 13:00:40 2026 GMT
        Subject: CN=564dd6f1-a104-4488-8842-7795efdca1e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:9e:af:b3:72:a7:bd:fe:72:fc:be:29:78:a2:
                    be:49:3f:b5:60:03:1c:36:00:8a:b4:75:ae:6f:6c:
                    27:e6:ba:7b:55:06:ec:69:a3:e0:cb:c0:86:79:00:
                    b7:d4:0f:f0:31:47:9f:30:d0:bc:4c:07:2c:a8:3a:
                    da:ad:03:01:92:d5:98:64:c3:aa:d0:06:1e:e3:00:
                    11:9c:57:65:8e:61:0b:59:aa:70:4e:0d:7c:49:9f:
                    fb:e3:dc:02:8c:dd:98:34:7f:b5:88:fc:66:38:4e:
                    4a:54:b3:5f:25:f4:fc:14:05:6d:ec:a0:fa:0d:08:
                    f8:7c:e5:4c:e6:d1:5d:da:a5:fc:ec:d9:af:05:20:
                    1e:62:9d:90:5c:c7:ea:c1:f4:fc:23:6b:e2:7a:3f:
                    8e:9d:e3:23:55:10:a9:3d:fb:6d:88:19:a6:de:51:
                    9e:c6:31:61:57:d0:ec:69:c4:11:08:d0:2f:83:b1:
                    1b:62:b8:72:15:79:ab:0a:a6:2b:23:a0:51:cf:51:
                    bc:fa:b1:9f:e2:8e:3d:a9:d9:b7:8e:98:d8:09:60:
                    95:87:87:31:db:6b:85:28:66:99:00:9c:c6:51:25:
                    58:43:bc:1b:61:d5:99:fb:5b:13:1b:5f:d0:7f:92:
                    59:7a:df:94:59:57:c9:91:fd:08:2f:3d:4e:c1:e4:
                    28:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:8E:FB:0D:B7:29:EA:6A:C3:E6:C1:1C:AB:9C:E9:A8:FA:2E:EC:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/e9773053-a133-3b93-b9c7-d11f12756773.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl

            X509v3 Authority Key Identifier:
                keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.161.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:da:fa:d1:b7:ef:bd:6e:ac:8a:1c:8e:50:bd:72:a5:df:20:
         d0:18:a9:c6:08:ca:88:d5:28:d3:b6:a1:bf:8a:11:05:4f:93:
         bb:f2:fc:df:6f:25:ec:cd:b1:1c:2b:1a:32:92:83:3d:a7:04:
         50:fa:4d:79:30:4c:9b:d3:63:96:52:21:68:d0:5f:19:c9:c5:
         1f:d9:d6:3a:38:96:d4:f6:ba:8c:72:61:fe:15:6e:d9:87:26:
         f1:24:23:90:ed:34:57:f4:ba:92:b3:6f:80:5e:ff:97:97:a5:
         c6:c2:aa:a7:5d:f2:5b:6f:64:9f:b2:df:d7:91:6b:08:35:ac:
         93:b2:38:7b:be:16:8a:b2:d4:7a:92:57:43:8f:af:b1:0f:19:
         63:84:54:a8:c3:42:9c:8a:ff:31:1c:79:47:f7:c4:8a:11:b7:
         c7:44:b4:6b:1a:69:bc:9a:2c:93:b5:4e:18:71:33:4a:77:95:
         bb:93:56:0f:9c:4c:d6:c0:ea:fe:21:30:66:f8:64:0f:a4:86:
         3b:e3:e5:ab:db:a2:35:7d:61:6c:86:fb:6e:0c:a6:31:44:3e:
         ab:38:2d:ec:fb:c6:ef:62:61:d4:a5:b2:a8:82:94:ed:95:9e:
         8c:b2:62:40:df:fa:7c:3c:28:1e:9a:63:99:00:68:d0:7f:ff:
         a9:49:14:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 10:10:30 2026 by rpki-client