Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/7ff8f5ad-c373-3172-a8a8-8c2d336d2346.roa
File:                     7ff8f5ad-c373-3172-a8a8-8c2d336d2346.roa (raw, json)
Hash identifier:          cI1FBNffMWqrq2tnITr5SnqQG30EpeJs/Q1g+Yh1F7M=
Subject key identifier:   82:9B:C4:AE:5C:6E:22:6A:93:3A:A6:28:20:8E:4B:0B:41:EF:E2:8A
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584D0D4257148A419864F30B3A40
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/7ff8f5ad-c373-3172-a8a8-8c2d336d2346.roa
Signing time:             Wed 04 Mar 2026 02:00:32 +0000
ROA not before:           Wed 04 Mar 2026 02:00:32 +0000
ROA not after:            Tue 02 Jun 2026 01:00:32 +0000
asID:                     15247
IP address blocks:        209.53.170.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0d:42:57:14:8a:41:98:64:f3:0b:3a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Mar  4 02:00:32 2026 GMT
            Not After : Jun  2 01:00:32 2026 GMT
        Subject: CN=7f26866a-4f9d-44a7-9903-a2f6eeff6995
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:d5:d8:94:11:6a:72:f8:26:d9:88:0f:dc:df:
                    01:54:95:db:59:b6:20:d6:66:82:73:bd:fb:ea:5b:
                    94:c1:6e:ce:66:29:64:40:1d:de:7c:a6:24:1e:8e:
                    f8:72:84:8a:cd:f0:4b:3c:58:92:ef:bf:c7:80:23:
                    c5:27:b4:cd:cb:8b:63:73:a6:b0:25:7d:bf:30:b2:
                    6a:e1:24:9d:56:7f:e7:a0:52:91:6d:38:33:d8:a4:
                    d4:b6:16:3c:d3:9e:7a:f9:a6:8d:d8:54:13:58:56:
                    e7:09:c9:55:e5:b2:0a:a3:2b:5c:39:ab:36:a7:28:
                    84:bf:33:f6:d5:e3:0f:31:2e:03:bc:af:7e:ee:2d:
                    ea:9b:27:a2:09:04:94:58:67:43:4b:14:72:74:37:
                    fb:7c:91:5a:35:90:11:fb:23:57:91:e0:c2:90:6d:
                    69:f8:6e:a6:09:2c:ad:1d:60:26:52:1f:63:a3:3f:
                    08:62:31:e7:7f:09:c5:58:dd:9d:23:97:bb:6a:92:
                    b8:ff:24:a2:af:b2:f1:57:df:f1:f9:e3:d4:ab:a2:
                    a2:9f:08:cb:8b:35:20:77:32:c7:b2:e8:2d:8d:10:
                    12:9c:34:86:07:69:fb:86:32:7b:a5:3d:21:ed:a6:
                    08:d6:02:1c:df:fe:a0:68:9f:61:0f:e3:48:3f:2c:
                    a3:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:9B:C4:AE:5C:6E:22:6A:93:3A:A6:28:20:8E:4B:0B:41:EF:E2:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/7ff8f5ad-c373-3172-a8a8-8c2d336d2346.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.53.170.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:05:57:f0:d5:1c:d5:3b:05:03:c8:78:48:8d:98:54:2d:65:
         16:95:6d:cd:20:59:87:e5:ed:84:d7:1e:e0:00:cb:c2:9e:57:
         15:ef:f9:65:f6:96:78:c7:1b:de:00:d2:85:41:55:e3:09:1b:
         f2:0e:8f:b2:f9:7a:d8:c4:56:73:79:5b:d7:65:d6:4c:bd:9e:
         e4:dc:d2:0b:25:b1:29:cd:a7:bb:6f:86:27:dd:77:51:2e:1f:
         96:07:31:8e:1f:36:1a:94:43:53:97:3b:3d:2c:23:d6:c2:d4:
         bf:20:50:97:09:de:4e:88:e5:9c:e4:ff:b7:0d:f3:be:d7:43:
         f3:77:60:6d:ab:e7:9f:86:03:5e:86:47:85:04:ef:17:f9:29:
         70:ed:9b:c0:26:b9:7b:b4:95:e2:d4:35:5d:c5:8f:39:b9:7e:
         65:03:56:8d:ef:39:ca:f9:1f:44:29:b6:f6:54:36:a8:cc:f6:
         8b:16:fc:12:e4:6e:a4:18:b4:d6:2b:ed:30:9e:2a:26:ad:00:
         c8:0c:6c:87:9e:06:47:5d:de:32:09:82:0a:f4:f7:ac:99:38:
         85:13:67:95:de:ff:13:bb:80:56:94:8c:80:32:4b:28:5a:29:
         60:d9:ce:6d:a2:e9:e5:40:0d:93:de:7a:1d:e9:f7:3f:3c:b6:
         f4:38:b3:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 23:53:56 2026 by rpki-client