Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13/3668a37b-a50d-3732-b77d-a313fa326510.roa
File:                     3668a37b-a50d-3732-b77d-a313fa326510.roa (raw, json)
Hash identifier:          ZuXdNy/stnML1gq4kQd0LMg9Qby3APDJaiffm+sWj4U=
Subject key identifier:   54:D7:F1:A9:29:C7:2D:70:E5:38:CB:B8:60:07:40:F6:75:6E:3F:BE
Certificate issuer:       /CN=213e5365-5be3-42f4-a3d1-7f74bb44df13
Certificate serial:       010D0C9F4328584D98BAA4D881C7D4562C00AB00
Authority key identifier: 7A:C1:C6:0D:0F:85:20:1F:B9:B4:4F:6C:D6:94:4C:4B:D1:88:FC:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13/3668a37b-a50d-3732-b77d-a313fa326510.roa
Signing time:             Thu 23 Apr 2026 01:00:24 +0000
ROA not before:           Thu 23 Apr 2026 01:00:24 +0000
ROA not after:            Wed 22 Jul 2026 01:00:24 +0000
asID:                     14618
IP address blocks:        208.70.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13/213e5365-5be3-42f4-a3d1-7f74bb44df13.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13/213e5365-5be3-42f4-a3d1-7f74bb44df13.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:98:ba:a4:d8:81:c7:d4:56:2c:00:ab:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=213e5365-5be3-42f4-a3d1-7f74bb44df13
        Validity
            Not Before: Apr 23 01:00:24 2026 GMT
            Not After : Jul 22 01:00:24 2026 GMT
        Subject: CN=31186934-b58e-4619-b3ea-8175d375259c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ad:50:7a:9d:96:36:de:e3:f7:1f:d9:d8:b1:
                    d3:b3:39:0f:b3:17:5b:a0:05:95:6d:d5:1e:b2:47:
                    90:0f:11:6c:8e:17:96:5b:bb:2f:cc:25:2a:a4:9c:
                    c9:36:0d:08:1d:49:f1:d8:62:a2:7c:9c:47:01:b9:
                    ef:2f:d3:c3:16:1f:6b:83:1b:07:4e:a2:95:2b:d1:
                    f1:f2:ca:df:8e:a6:f8:54:ac:99:d7:99:92:ab:36:
                    4d:4c:42:9b:d2:7b:6f:f7:c2:cd:7a:d4:80:76:27:
                    1e:3a:e6:ee:81:d6:27:76:e0:20:62:76:ad:62:f8:
                    c3:7d:2f:a8:a8:d7:8c:8f:2a:56:82:b8:fc:14:2c:
                    e6:a2:51:b3:cf:9a:8c:42:df:32:a7:43:4b:d2:eb:
                    27:60:24:0b:0c:d5:22:47:34:1f:4f:6a:b9:64:85:
                    bd:3a:9f:1d:a3:81:66:36:44:98:da:42:a1:59:99:
                    a6:14:d8:1c:1b:5f:65:55:19:7c:06:d4:1a:8d:07:
                    ca:aa:db:6b:b0:87:8e:72:5d:b6:9c:3d:b3:93:78:
                    43:46:e9:cc:91:65:e8:cd:ab:73:04:c8:8c:14:eb:
                    e0:5a:21:96:c8:d9:63:61:2c:0a:8b:a8:e2:83:5a:
                    2d:55:5c:1f:ac:e6:36:03:87:bd:03:27:fc:5f:47:
                    d6:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:D7:F1:A9:29:C7:2D:70:E5:38:CB:B8:60:07:40:F6:75:6E:3F:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13/3668a37b-a50d-3732-b77d-a313fa326510.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13/213e5365-5be3-42f4-a3d1-7f74bb44df13.crl

            X509v3 Authority Key Identifier:
                keyid:7A:C1:C6:0D:0F:85:20:1F:B9:B4:4F:6C:D6:94:4C:4B:D1:88:FC:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.70.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:0f:0d:08:91:dc:72:42:6e:9e:25:bd:d6:78:12:25:a5:98:
         44:fa:78:a9:9c:53:b0:e1:85:27:46:a2:16:54:25:df:c8:c4:
         3f:fc:ab:b5:e3:ac:de:b1:a1:01:fe:bc:f8:85:db:f8:0c:1b:
         83:1d:f6:ca:f4:64:d7:ed:47:ff:40:91:c6:11:08:93:db:62:
         da:7e:16:9c:be:34:0d:fc:56:20:8e:96:bb:fd:80:30:54:99:
         58:46:d0:fa:54:b1:cb:63:32:4f:5a:26:1a:f2:6f:b1:3f:0f:
         b8:7f:e6:84:b5:a2:78:ad:de:f8:25:4c:bd:7f:04:0e:08:88:
         0a:bd:12:bc:b5:b1:9e:c1:c6:d6:98:5a:4d:e8:ba:30:05:75:
         41:82:cb:d8:dc:d1:7b:9c:01:54:d1:dd:54:9c:66:8e:91:ec:
         89:bb:34:ea:3a:ee:7c:e4:88:d8:04:24:a9:d8:55:b9:48:4f:
         30:36:2a:87:5f:ef:85:ba:43:07:d7:4a:1a:6f:61:a7:03:65:
         26:10:2f:98:2d:0a:0e:5d:ad:66:34:f5:a2:31:60:8d:d5:66:
         ff:da:c6:97:d2:c8:f9:5e:39:4b:df:25:89:76:ad:12:e8:af:
         ff:2e:c7:cb:67:c7:9b:cf:6c:3f:ca:0a:c6:8f:46:e8:0a:c1:
         a2:2a:ce:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 29 15:33:07 2026 by rpki-client