Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/8bce7e7d-dd2c-3ff4-8e48-f3523ba2f9d3.roa
File:                     8bce7e7d-dd2c-3ff4-8e48-f3523ba2f9d3.roa (raw, json)
Hash identifier:          R1c5xThW2GjY5pn4wyO2nOFvLcLFSJfjIaYECxGJdGA=
Subject key identifier:   33:93:C8:FF:4D:3B:9B:8A:43:FE:38:12:68:5B:B2:DD:B1:75:C0:6A
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584D1B19F69206E6353100D38800
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/8bce7e7d-dd2c-3ff4-8e48-f3523ba2f9d3.roa
Signing time:             Mon 09 Mar 2026 01:00:32 +0000
ROA not before:           Mon 09 Mar 2026 01:00:32 +0000
ROA not after:            Sun 07 Jun 2026 01:00:32 +0000
asID:                     852
IP address blocks:        207.102.112.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1b:19:f6:92:06:e6:35:31:00:d3:88:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Mar  9 01:00:32 2026 GMT
            Not After : Jun  7 01:00:32 2026 GMT
        Subject: CN=7f40706c-9da1-4903-8cc7-8460f0c6adf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:85:c7:f1:87:9b:37:3c:7b:26:a4:e5:59:08:
                    56:23:7c:50:81:14:ee:66:ae:fb:57:6d:e5:fc:a1:
                    f7:8e:56:46:d0:2b:b4:38:f3:90:d3:38:72:b8:88:
                    bd:4d:23:6e:93:57:03:ff:f2:f6:22:ee:13:49:e3:
                    2d:54:cd:a6:3a:ea:8a:ee:5b:01:2f:ee:07:a5:91:
                    bb:95:1c:f4:2e:a3:76:05:19:44:a9:67:38:27:15:
                    df:81:b3:fc:c0:1f:19:23:79:f1:4f:21:84:c7:e8:
                    b5:c8:9d:7f:bc:c2:6a:34:7d:45:5b:1a:d8:9d:11:
                    75:d7:a9:4c:01:9e:26:ad:6b:d0:fc:03:51:66:a0:
                    8a:6e:5a:77:4c:8d:d5:f9:e8:0e:b0:36:93:70:19:
                    5f:39:72:58:9a:f7:ab:cf:c1:4f:1e:a7:1f:95:25:
                    f7:f0:ff:df:9b:88:df:e3:41:56:9a:d1:ac:3b:7b:
                    50:21:36:e0:a9:2f:1a:40:5e:0d:b0:cf:1e:e7:24:
                    6e:c6:38:87:c3:53:b2:af:1c:b5:f2:25:3b:d8:12:
                    81:65:27:76:d7:26:9c:bf:6f:84:40:9f:f1:5c:e6:
                    85:94:d6:a8:b3:21:6c:4a:6a:e7:ea:9e:b0:cb:65:
                    c2:c7:be:fe:13:ad:38:ba:af:5f:bd:d3:1a:13:27:
                    8f:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:93:C8:FF:4D:3B:9B:8A:43:FE:38:12:68:5B:B2:DD:B1:75:C0:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/8bce7e7d-dd2c-3ff4-8e48-f3523ba2f9d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.102.112.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e9:49:27:12:e3:39:34:8c:0c:f3:f3:96:6a:39:14:85:85:7d:
         75:e1:84:36:c1:06:2e:32:6b:a0:3d:0c:d9:8e:47:88:00:25:
         e1:4a:e4:fd:a7:d2:0a:13:82:e6:39:b3:d2:f2:82:ee:7e:5e:
         f5:81:12:57:fe:b9:75:7c:67:8d:46:fa:03:43:a5:c0:79:ca:
         2f:d9:3a:14:37:de:81:ce:4d:1e:b3:a6:14:f6:38:b5:2a:98:
         c4:14:fb:9d:e5:51:85:83:c2:ef:28:df:9c:40:d6:9e:99:6c:
         20:d7:45:4a:b3:5d:95:86:09:9c:c1:ca:6b:f7:d3:e2:9a:f0:
         76:0f:5e:82:24:78:0d:79:ae:ac:32:36:11:5d:48:82:1f:c3:
         47:fc:83:81:eb:dd:a9:66:6d:b8:2e:d4:8f:0f:13:47:cf:6c:
         9c:23:4e:59:55:85:d1:7e:83:9f:9e:f8:e3:45:8f:71:c9:33:
         f2:98:81:17:72:39:b9:9b:e0:dc:1f:f5:49:3d:41:b2:f5:98:
         7c:67:73:05:a5:65:75:11:49:cc:85:ae:02:10:d7:54:27:b7:
         e3:5d:7a:37:76:23:0c:a8:75:05:02:85:f2:11:08:38:32:39:
         47:e9:64:9c:46:b1:81:1f:d1:29:c5:37:28:2d:d0:78:86:45:
         8a:92:1f:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 23:52:36 2026 by rpki-client