Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/87c18001-5e2c-3f8c-8137-d60bdacd9c38.roa
File:                     87c18001-5e2c-3f8c-8137-d60bdacd9c38.roa (raw, json)
Hash identifier:          9GpYK7WXqXLlQ/yB2b8hd++L7et3MJWsEs/wXP5edjs=
Subject key identifier:   92:9D:9F:33:F6:33:07:86:1D:35:B1:2B:3B:A3:34:9D:F9:13:87:99
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584D15A258B8D41F94BBC90F7900
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/87c18001-5e2c-3f8c-8137-d60bdacd9c38.roa
Signing time:             Sat 07 Mar 2026 02:00:32 +0000
ROA not before:           Sat 07 Mar 2026 02:00:32 +0000
ROA not after:            Fri 05 Jun 2026 01:00:32 +0000
asID:                     852
IP address blocks:        207.219.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:15:a2:58:b8:d4:1f:94:bb:c9:0f:79:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Mar  7 02:00:32 2026 GMT
            Not After : Jun  5 01:00:32 2026 GMT
        Subject: CN=2442bb09-c39a-4b95-9461-c9617d739bdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:b9:16:8d:28:ad:5a:79:a6:41:15:15:fe:26:
                    0d:03:bb:ce:61:cf:7c:5a:3e:3a:0b:54:41:be:1e:
                    8e:93:c4:02:65:e0:4e:2f:6d:2c:b3:97:a3:4f:1f:
                    a2:a2:5e:b1:9f:72:0e:f2:40:07:ca:13:80:44:72:
                    ab:3f:e5:ea:f1:b1:ca:14:58:c9:95:b9:3d:2e:6a:
                    82:99:de:19:07:ea:52:39:56:6d:a9:8d:5c:94:e5:
                    0a:09:fe:0e:fc:8f:7d:e5:fe:2c:94:57:99:f7:fd:
                    c0:ea:d1:ba:59:29:f1:77:14:33:1f:0d:01:e5:16:
                    97:2b:2f:a6:d4:ed:75:e2:36:af:a8:0c:da:13:88:
                    46:b2:f4:1b:c4:5e:01:f9:da:10:cf:77:a5:bf:e8:
                    be:51:c5:8a:32:22:9b:e5:3c:9e:d7:9a:7d:68:e6:
                    dd:17:d9:cd:43:5a:3f:69:a0:28:75:46:f0:89:28:
                    92:bc:05:c6:94:01:8d:c7:37:8c:ef:ac:46:48:3e:
                    17:e9:ea:8c:7e:ba:bf:65:3f:93:53:ab:b4:61:ee:
                    22:43:df:99:7a:de:f5:06:bb:a2:b6:e3:29:d1:e3:
                    a6:28:a3:3c:b9:62:ee:19:16:55:50:9d:8b:da:6a:
                    c4:12:06:b2:66:50:5b:95:c7:7b:f1:12:84:6c:02:
                    79:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:9D:9F:33:F6:33:07:86:1D:35:B1:2B:3B:A3:34:9D:F9:13:87:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/87c18001-5e2c-3f8c-8137-d60bdacd9c38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.219.233.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:1e:d7:4c:5a:98:91:70:c8:a1:b6:2d:aa:51:be:c5:e9:73:
         00:05:7a:b0:2e:6d:11:2d:a6:45:aa:08:b0:92:18:3e:a0:cf:
         0f:22:c8:12:20:97:79:98:3f:54:a8:bd:ff:46:0a:c0:9f:dc:
         64:95:8e:1f:52:21:fe:b5:26:62:29:90:e9:47:0e:95:6f:18:
         49:c3:9c:c8:8e:3d:44:2f:04:7e:a1:be:65:33:34:aa:5e:35:
         a8:63:15:83:35:f6:1a:a7:de:f6:bc:e4:3d:83:41:1d:b9:92:
         1e:83:ab:03:7c:d6:61:89:3b:44:4d:4d:fe:02:4e:f1:cb:e8:
         66:bd:4e:55:61:86:a2:62:19:e1:b3:ee:c0:4c:e9:44:85:dd:
         12:94:6a:6b:4e:cb:7c:de:4d:50:50:31:2f:31:d0:4d:db:4f:
         71:32:3d:3c:87:12:a6:e1:f9:92:d8:eb:71:13:ed:a9:24:f0:
         31:c8:1e:a5:8a:00:aa:0c:16:13:b8:82:30:ed:50:70:1e:37:
         7a:9c:92:49:5b:59:c8:a5:ce:79:92:11:98:5e:18:a7:2a:30:
         45:37:40:c7:03:3d:50:c1:27:85:4f:99:07:d9:ec:8e:29:6b:
         d5:40:ac:38:1c:3b:68:9b:32:78:ee:bc:e6:c4:f2:7b:04:af:
         75:38:1b:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 23:54:21 2026 by rpki-client