Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/5e386efa-6a0a-3a93-a17d-6222299df7c6.roa
File:                     5e386efa-6a0a-3a93-a17d-6222299df7c6.roa (raw, json)
Hash identifier:          ws45cUpNexUCbi5SwJeCZaxLps5rnJO1gB1z5Y6P+84=
Subject key identifier:   5E:AC:F5:CD:36:35:EA:BB:93:1D:55:42:B0:8D:69:C1:5C:4E:CF:B7
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584D19B4AC031327F74990762A40
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/5e386efa-6a0a-3a93-a17d-6222299df7c6.roa
Signing time:             Sun 08 Mar 2026 13:00:40 +0000
ROA not before:           Sun 08 Mar 2026 13:00:40 +0000
ROA not after:            Sat 06 Jun 2026 13:00:40 +0000
asID:                     852
IP address blocks:        207.194.176.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:19:b4:ac:03:13:27:f7:49:90:76:2a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Mar  8 13:00:40 2026 GMT
            Not After : Jun  6 13:00:40 2026 GMT
        Subject: CN=259f90f0-e422-43ea-bbce-d51dd4cb1e7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:0c:57:4a:63:82:5c:d0:1d:53:95:f5:ab:25:
                    22:b2:7f:4f:ab:da:26:d8:2c:67:80:2e:3c:31:08:
                    70:c3:d0:b9:e0:d5:ff:2c:95:77:7b:0a:e8:63:ef:
                    44:23:9f:56:88:c6:90:73:a9:21:c1:0f:09:4b:37:
                    43:8b:a4:fe:06:1e:76:a2:87:31:12:ac:41:d7:d5:
                    64:d1:d8:c0:90:92:02:3f:3d:e1:cb:80:dc:83:0c:
                    e3:d4:64:85:11:c7:49:14:83:6e:c9:f0:7e:13:a0:
                    0a:34:e0:5b:02:98:f9:63:21:ab:77:75:1a:c5:48:
                    4b:bf:06:63:d7:5c:be:2c:9b:22:b4:1d:b0:f6:77:
                    f8:2b:40:c5:7d:fd:e5:57:e5:ae:79:b3:96:56:3d:
                    54:6c:0f:d8:53:a1:f0:20:67:5e:dc:cb:9d:6c:59:
                    4d:ee:61:26:51:9e:f1:56:b2:fa:bb:96:19:f0:f1:
                    53:79:c6:d4:96:a9:d8:d0:24:f7:15:ac:2d:8d:c2:
                    a8:68:55:01:aa:dd:2f:44:7a:bd:38:de:d5:8e:c5:
                    0c:de:7b:5b:29:06:6d:2f:18:0f:ea:f9:6c:6e:23:
                    70:aa:f7:3b:f7:01:5c:4a:a7:84:eb:ae:df:f9:eb:
                    f8:86:d5:2f:ec:29:6e:a8:8d:04:e8:2d:60:ed:57:
                    cb:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:AC:F5:CD:36:35:EA:BB:93:1D:55:42:B0:8D:69:C1:5C:4E:CF:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/5e386efa-6a0a-3a93-a17d-6222299df7c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.194.176.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:b2:47:cb:1a:0b:58:06:8c:b5:75:4c:98:39:8a:8e:ce:5f:
         25:37:a7:f3:55:9d:4c:21:c0:b6:ec:bb:ff:07:49:25:5f:f0:
         d0:57:bb:59:27:9f:b4:8f:90:1a:84:6a:d1:d1:d3:d6:59:eb:
         b8:56:17:20:3c:a7:84:7f:49:08:0a:58:e0:26:e2:48:7c:d9:
         9e:80:84:0e:4f:3c:37:09:d4:d6:d4:2f:d5:b5:82:4b:08:cd:
         fd:df:1f:9d:a9:0e:b2:eb:3a:10:b5:28:89:dc:d3:d4:d9:d6:
         56:ec:7e:74:b9:ea:7a:4a:38:90:e5:18:a1:3c:6d:6e:28:74:
         f7:03:49:fd:c2:a6:3d:23:99:48:42:14:37:b5:ba:27:85:bb:
         4e:7a:e7:45:8f:65:e8:9a:8b:b1:36:b7:8d:13:40:7e:ed:71:
         f0:41:64:fd:d3:81:36:b7:35:d1:00:8f:b3:55:27:50:5a:8a:
         8c:07:5e:27:c9:2c:78:c3:a3:08:f3:be:ee:2e:d2:39:e3:35:
         91:29:54:9b:8c:4d:f6:82:f0:4d:21:d2:a3:7d:34:c1:71:2a:
         8e:1b:34:b6:ec:43:2a:0d:1a:20:6b:25:d1:34:97:21:c7:f4:
         c2:1c:57:5c:1e:49:13:02:2f:7b:1b:18:91:84:85:2b:94:6c:
         17:51:29:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 23:55:35 2026 by rpki-client