Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/35a49db3-a778-3bfc-877a-c9cea9e5abd3.roa
File:                     35a49db3-a778-3bfc-877a-c9cea9e5abd3.roa (raw, json)
Hash identifier:          VFK3cCSdlncS6miXzm/xoIUtI/UmYFm+R/sPgYfQtvE=
Subject key identifier:   91:B0:89:87:8A:2D:DC:CE:17:08:8B:E5:41:C8:92:55:D0:13:FC:14
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584D1172618169891DA0C191B880
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/35a49db3-a778-3bfc-877a-c9cea9e5abd3.roa
Signing time:             Thu 05 Mar 2026 14:00:40 +0000
ROA not before:           Thu 05 Mar 2026 14:00:40 +0000
ROA not after:            Wed 03 Jun 2026 13:00:40 +0000
asID:                     7861
IP address blocks:        209.20.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:11:72:61:81:69:89:1d:a0:c1:91:b8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Mar  5 14:00:40 2026 GMT
            Not After : Jun  3 13:00:40 2026 GMT
        Subject: CN=9d5de0e7-139e-46c7-8ef8-11b743e37f62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:54:24:bb:16:cc:61:62:21:76:85:92:1f:e1:
                    84:65:e4:01:9a:d0:5b:5a:58:f6:25:9c:42:c2:3a:
                    76:d2:40:f2:a3:80:56:eb:9f:0d:93:5e:de:81:b1:
                    29:17:35:29:f1:0f:5c:11:2f:79:25:95:07:2f:ee:
                    dc:7b:d9:2f:df:e3:dd:7f:f6:09:4b:4a:40:05:93:
                    e1:ea:06:80:a5:68:16:9d:ac:15:3e:52:83:8a:5e:
                    89:e0:bc:38:f4:a3:16:4d:9e:b6:0b:bc:08:fb:70:
                    ab:98:58:3e:7a:62:92:cc:66:d3:ad:90:ab:99:d9:
                    98:fe:db:cf:c8:ba:57:4c:60:e9:9a:9b:0f:83:8a:
                    82:47:57:e8:d6:cf:68:1e:c8:60:4d:bd:92:db:3c:
                    ae:66:8a:41:7d:8a:5e:2c:00:62:3f:bb:af:48:0b:
                    24:e8:87:f5:2a:28:fa:a3:e9:51:0b:af:d7:9b:7f:
                    15:52:00:9a:98:a2:62:5a:0c:6e:3b:5f:3b:08:7a:
                    18:fa:44:ec:f1:4c:1a:bb:70:1b:80:66:9c:13:38:
                    9b:9e:bd:c9:23:a4:1a:68:37:67:fd:f7:3f:28:51:
                    5d:cd:35:26:8d:18:bb:28:37:30:06:6d:20:ee:b4:
                    72:c8:13:21:86:c3:33:03:5b:7c:4b:fc:cb:de:9d:
                    37:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:B0:89:87:8A:2D:DC:CE:17:08:8B:E5:41:C8:92:55:D0:13:FC:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/35a49db3-a778-3bfc-877a-c9cea9e5abd3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.20.31.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:61:6d:a8:5d:60:cd:4c:1b:26:17:49:71:0e:1a:ad:af:46:
         2f:11:6d:95:cc:3b:a8:ba:73:2f:de:32:9d:31:bf:b1:0c:4d:
         00:93:70:a1:7c:67:ab:87:b5:e9:f0:02:17:1a:a4:d4:24:ec:
         b6:d3:93:c0:e6:b3:17:46:72:d3:77:e1:4b:ca:96:bd:e5:27:
         2a:fe:f8:75:63:7f:32:00:00:08:c1:dd:99:08:79:17:41:03:
         68:f4:d8:78:19:70:11:31:dd:da:c9:cc:d4:b1:24:4e:b2:27:
         78:1d:12:aa:11:67:d0:c5:97:f5:e5:02:8f:e6:77:20:7c:d9:
         26:60:10:63:6a:80:63:b1:46:aa:8e:c1:ba:bf:01:3c:e0:0e:
         fe:48:a4:80:6d:ad:01:31:69:5b:e5:da:7d:f1:71:8c:b4:3c:
         fc:26:b4:4b:ad:09:a2:8c:cf:fa:d8:f3:d7:09:91:29:35:cd:
         ae:59:cd:72:72:2d:cc:4d:d2:9b:c0:c8:2b:08:52:c3:d8:35:
         e4:45:3e:e9:96:f0:de:dd:ae:7f:11:16:37:65:22:04:81:a1:
         93:3f:80:c1:44:da:00:d9:57:90:4f:fa:3f:86:3f:ec:20:19:
         40:31:c8:03:2d:79:9e:d1:50:da:16:e1:00:7d:fc:09:7b:a4:
         1c:8f:ac:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 23:52:53 2026 by rpki-client