Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/9d47a116-fd9c-32d2-9643-721de89ac8ef.roa
File:                     9d47a116-fd9c-32d2-9643-721de89ac8ef.roa (raw, json)
Hash identifier:          SyXJ3h3CD1jZl7EeN5KLvhWK1NDnuDGohZ0/br0tLtA=
Subject key identifier:   AA:F4:5F:24:5E:5F:EC:64:B6:97:14:3B:53:5F:C2:CF:F3:D3:C6:1D
Certificate issuer:       /CN=87417fe6-1790-481a-9bdc-6574c0ef7d7c
Certificate serial:       010D0C9F4328584D71A50C70A4A0A2BD863BC840
Authority key identifier: BA:B7:0F:02:DE:9A:71:72:A4:F0:E9:40:13:AF:00:0E:D8:9A:5C:FD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/9d47a116-fd9c-32d2-9643-721de89ac8ef.roa
Signing time:             Thu 09 Apr 2026 01:00:23 +0000
ROA not before:           Thu 09 Apr 2026 01:00:23 +0000
ROA not after:            Wed 08 Jul 2026 01:00:23 +0000
asID:                     1742
IP address blocks:        128.103.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/87417fe6-1790-481a-9bdc-6574c0ef7d7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/87417fe6-1790-481a-9bdc-6574c0ef7d7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 16 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:71:a5:0c:70:a4:a0:a2:bd:86:3b:c8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87417fe6-1790-481a-9bdc-6574c0ef7d7c
        Validity
            Not Before: Apr  9 01:00:23 2026 GMT
            Not After : Jul  8 01:00:23 2026 GMT
        Subject: CN=bb03f007-748b-4238-837f-7c02160f251f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:46:a2:57:08:74:59:ae:db:51:80:7f:ff:31:
                    28:e7:53:d8:2a:37:fc:04:c5:d0:67:6b:6d:da:fd:
                    80:d1:ed:27:3e:4d:65:70:45:1f:a0:98:89:41:fe:
                    0d:97:f1:01:1a:2e:74:3e:93:48:57:41:51:c7:ed:
                    62:1d:65:03:e4:30:4f:47:8f:9d:71:2f:5d:cf:4e:
                    73:72:16:0c:ad:f0:9c:a2:4a:ca:4f:c1:88:3d:13:
                    2f:de:58:fe:b6:68:b7:36:d4:1c:39:fa:fe:cb:74:
                    02:3e:89:0c:91:37:f0:91:29:69:52:94:2a:85:27:
                    6d:a0:b5:d0:e5:8c:b5:eb:e4:ad:4f:10:22:96:34:
                    da:4e:73:8b:09:74:d6:e5:a6:b8:33:9d:e6:35:4a:
                    5c:85:9d:65:ec:91:ee:3d:80:d0:4c:19:cf:bc:02:
                    81:df:ea:33:92:33:da:d5:27:06:78:5e:5b:85:2e:
                    b5:30:2a:b3:37:a6:17:74:5f:5a:e1:d9:1c:9c:5f:
                    4e:77:89:3b:e9:2c:fe:95:51:9a:fb:3f:a2:de:93:
                    05:a6:7d:36:9e:ff:aa:a6:b0:a3:6e:c7:0f:c7:41:
                    09:e2:fe:40:e9:0b:f6:5a:01:fe:cd:7f:f1:0a:45:
                    a0:df:1b:49:ad:54:c9:1e:1b:1b:b8:c9:0a:73:3d:
                    52:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:F4:5F:24:5E:5F:EC:64:B6:97:14:3B:53:5F:C2:CF:F3:D3:C6:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/9d47a116-fd9c-32d2-9643-721de89ac8ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/87417fe6-1790-481a-9bdc-6574c0ef7d7c.crl

            X509v3 Authority Key Identifier:
                keyid:BA:B7:0F:02:DE:9A:71:72:A4:F0:E9:40:13:AF:00:0E:D8:9A:5C:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.103.205.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:4f:b0:86:f5:5b:99:d5:8e:a0:04:a8:f1:5c:b5:8c:4b:cc:
         f1:b4:02:ec:a4:26:43:c8:81:1b:7b:64:d8:10:d9:2a:35:e9:
         3d:b3:13:52:ac:c6:9f:e5:3e:22:0e:cf:5b:35:db:bc:4c:33:
         bb:1b:d4:d2:40:2d:82:c5:72:86:ba:6a:69:86:0e:7b:e7:05:
         39:b3:68:95:e2:17:cc:a4:b9:0a:f3:a7:93:21:89:a9:1c:b8:
         af:35:82:ee:a8:f6:71:69:5b:4a:df:aa:63:4a:61:e2:e8:fc:
         96:20:30:37:a0:48:e8:8e:0f:47:15:19:c1:66:04:f9:8b:ea:
         a9:b0:e5:9a:03:3b:48:9d:2d:27:a0:0d:29:b5:a9:6a:16:a3:
         f4:ac:3d:8e:0f:d8:a9:1f:6d:0f:b4:97:00:f6:c5:a4:03:4c:
         92:f3:1f:78:1f:5a:13:a0:aa:96:6f:46:a2:7f:ab:b6:c4:a1:
         7a:54:cd:c3:ff:0f:d3:2d:27:a4:2e:aa:bb:89:3b:25:58:24:
         37:5a:a8:06:63:40:50:21:80:c5:86:18:c8:fa:a4:bf:72:71:
         02:85:31:30:d5:f2:8e:2d:4b:d8:a5:34:c8:82:60:38:b8:0f:
         36:d3:38:2c:d9:1b:f4:87:f8:93:e2:39:79:f4:ba:b0:7b:49:
         33:ab:00:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 15 02:35:37 2026 by rpki-client