Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e58dee25-2204-469c-b0eb-da831443b959/a3cf7f4a-d049-3607-a31b-c702afeeafe2.roa
File:                     a3cf7f4a-d049-3607-a31b-c702afeeafe2.roa (raw, json)
Hash identifier:          f3cMHoNazS08ellSxa0fKqe1MlZWiIMnTsplw8dIeSI=
Subject key identifier:   0C:3E:9B:43:DF:0F:F1:8B:67:CD:21:CC:D2:6C:93:43:B1:C9:D9:A6
Certificate issuer:       /CN=e58dee25-2204-469c-b0eb-da831443b959
Certificate serial:       010D0C9F4328584CAE5E9149D75AF99236AA7780
Authority key identifier: 52:75:10:E7:FD:E6:FD:17:78:27:4B:63:66:9D:69:2E:9F:B1:B6:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e58dee25-2204-469c-b0eb-da831443b959.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e58dee25-2204-469c-b0eb-da831443b959/a3cf7f4a-d049-3607-a31b-c702afeeafe2.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     40521
IP address blocks:        198.251.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e58dee25-2204-469c-b0eb-da831443b959/e58dee25-2204-469c-b0eb-da831443b959.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e58dee25-2204-469c-b0eb-da831443b959/e58dee25-2204-469c-b0eb-da831443b959.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e58dee25-2204-469c-b0eb-da831443b959.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Feb 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:5e:91:49:d7:5a:f9:92:36:aa:77:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e58dee25-2204-469c-b0eb-da831443b959
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=4de1e4f1-9b0e-49ee-8ff9-d0b3ef220cba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f2:dd:62:07:55:8f:65:d9:e9:02:4f:7d:71:
                    e1:22:32:27:c1:36:22:5e:86:ff:7b:07:8e:c5:73:
                    5d:3c:fe:ec:6f:61:35:2d:93:62:41:4a:50:c9:56:
                    74:2b:d5:41:6a:5e:51:19:3e:35:8e:d8:87:d0:98:
                    ee:a9:bf:35:44:7a:d0:c9:8f:f9:9a:a9:ae:a1:c2:
                    d6:ec:e7:fe:8b:79:a9:57:c0:45:a7:47:9d:1b:bd:
                    ab:33:d2:79:ed:d3:52:0d:49:7a:a3:3c:d4:3c:cb:
                    84:3b:39:0b:f2:f4:94:9a:b4:a1:41:d0:ad:7b:a9:
                    f4:2b:29:b6:3f:cd:67:e2:27:46:90:70:bf:68:a1:
                    25:c1:c0:41:1b:5d:34:86:30:8b:b6:d5:4a:a5:6d:
                    36:da:c1:c1:2a:a1:4a:46:f2:ba:52:ca:03:c3:62:
                    19:82:6d:35:72:15:7a:0c:b3:44:e5:b9:91:12:d2:
                    89:5d:53:dc:0f:65:c0:60:aa:d3:9b:f1:b1:ff:43:
                    6c:76:3b:88:38:1e:bc:22:70:0e:dc:ba:62:3d:43:
                    85:41:ea:de:69:6e:6c:76:c1:fb:17:f5:d8:a2:a4:
                    5d:a4:52:2b:e2:11:76:d2:8a:de:11:3a:e6:0a:5e:
                    ef:f2:6c:28:7a:fe:47:5c:3e:85:2a:58:e6:46:92:
                    76:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:3E:9B:43:DF:0F:F1:8B:67:CD:21:CC:D2:6C:93:43:B1:C9:D9:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e58dee25-2204-469c-b0eb-da831443b959/a3cf7f4a-d049-3607-a31b-c702afeeafe2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e58dee25-2204-469c-b0eb-da831443b959/e58dee25-2204-469c-b0eb-da831443b959.crl

            X509v3 Authority Key Identifier:
                keyid:52:75:10:E7:FD:E6:FD:17:78:27:4B:63:66:9D:69:2E:9F:B1:B6:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e58dee25-2204-469c-b0eb-da831443b959.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.251.31.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:63:e1:b2:5f:85:74:37:34:24:75:b1:68:34:b3:77:0a:56:
         f4:a7:41:30:61:75:ee:18:6f:de:97:62:ae:f1:cc:c5:b3:d4:
         65:b0:05:1e:e0:6e:70:e7:fe:1a:7a:f8:61:f1:52:3d:12:dd:
         8d:1a:c9:b4:64:a5:99:fd:3f:55:7c:5f:0b:9c:3e:42:95:7e:
         dc:a5:5e:12:9d:43:cf:7d:99:bf:e7:f1:2f:6a:81:a8:3c:92:
         9f:44:8e:09:d4:39:46:30:de:b8:ad:f0:3e:fc:cc:e5:c8:0e:
         ed:b4:76:72:e9:fe:e9:16:35:30:5d:b1:cc:e9:9f:4f:96:f4:
         42:ed:83:b9:77:0b:ad:13:ea:41:80:db:58:26:9b:25:42:c4:
         fa:52:67:89:e1:e8:db:5b:5a:d1:a5:fb:c4:1c:46:89:92:ef:
         38:c5:50:43:7d:2e:e6:2c:cd:91:f4:3f:5c:df:22:7e:c1:e7:
         a5:78:30:8b:4e:3d:d1:d1:7c:7b:18:c0:64:19:35:6a:ee:15:
         c4:93:cd:40:38:d0:b8:6f:2a:04:85:13:90:af:ad:53:9c:64:
         65:40:ad:d8:fd:e7:3a:91:58:91:6f:cd:cd:16:bc:0c:7b:90:
         51:a7:00:28:33:81:39:96:88:65:72:4d:df:51:da:b4:ea:3e:
         82:71:f0:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 12:31:27 2026 by rpki-client