Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c0956932-10e1-36f9-ba96-67345e1ea32e.roa
File:                     c0956932-10e1-36f9-ba96-67345e1ea32e.roa (raw, json)
Hash identifier:          v79MGrbaAnX93P73iC4W/mo9UwohwRvyYpp/3EwAxz4=
Subject key identifier:   A2:05:D1:B8:3B:18:C4:5D:8C:E2:55:8C:3D:F9:0F:D3:05:B3:E0:5A
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584D1F4A09985FDF731D059C3500
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c0956932-10e1-36f9-ba96-67345e1ea32e.roa
Signing time:             Tue 10 Mar 2026 13:00:41 +0000
ROA not before:           Tue 10 Mar 2026 13:00:41 +0000
ROA not after:            Mon 08 Jun 2026 13:00:41 +0000
asID:                     852
IP address blocks:        204.191.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:4a:09:98:5f:df:73:1d:05:9c:35:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Mar 10 13:00:41 2026 GMT
            Not After : Jun  8 13:00:41 2026 GMT
        Subject: CN=4bb4d1ed-986a-4da5-a2b2-23927a5dbaec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:76:60:7a:35:6c:1e:50:bf:8a:fc:af:11:d0:
                    7f:0a:dd:64:21:37:09:3e:5e:f8:59:70:de:57:16:
                    c4:ae:1b:c3:ea:34:a0:fa:91:2e:f7:f0:3f:13:6b:
                    7a:8b:52:fe:8a:33:f6:0c:ba:7a:87:be:23:fb:5f:
                    89:db:41:dc:a6:7f:ce:d6:3a:af:8e:e9:72:3f:ad:
                    b1:d3:5e:f1:57:26:91:66:71:d6:24:06:ac:13:8d:
                    20:46:7e:d7:8b:47:42:d7:7e:36:30:e6:c0:43:cf:
                    48:20:5b:6c:0f:cb:28:3e:1b:a3:9c:f6:b1:1a:75:
                    66:fd:09:29:42:89:35:a3:4c:b2:a7:d6:bb:6e:88:
                    0e:ea:1a:13:08:16:b8:b2:a3:9c:61:7d:de:71:e1:
                    7d:fa:b4:a6:64:95:a9:c4:dd:81:91:19:30:59:da:
                    d1:eb:b3:a1:15:71:27:9d:6b:1b:0c:7f:8d:36:0e:
                    d0:5a:9f:cf:3c:85:4b:88:43:c3:19:01:ac:fe:65:
                    a5:81:88:57:0d:a5:4d:7c:6a:6c:e7:70:94:78:d5:
                    6f:fe:ea:de:76:74:3b:14:15:88:ec:df:84:8e:d4:
                    8b:a8:53:f7:c1:0a:a3:6d:51:0d:cd:99:79:30:0a:
                    67:5a:1b:be:15:8c:a4:55:f8:0c:cf:5e:3e:1f:c1:
                    7f:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:05:D1:B8:3B:18:C4:5D:8C:E2:55:8C:3D:F9:0F:D3:05:B3:E0:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c0956932-10e1-36f9-ba96-67345e1ea32e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.191.32.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:e0:85:14:e7:63:dd:f5:bd:99:4e:2b:35:a9:49:c0:92:db:
         76:01:6f:66:fd:fe:96:8f:de:0f:7b:5c:eb:8e:f7:7a:7f:c7:
         e7:bc:41:98:09:17:2f:c6:5e:4f:fa:d3:28:cd:47:d0:c0:93:
         3c:55:1b:ee:23:07:64:d7:a1:36:c0:43:70:4b:70:9d:18:25:
         23:70:a6:3e:dc:94:d1:d6:b6:6c:8f:cf:de:52:47:7d:f5:cd:
         a6:8d:36:06:96:ca:f7:a7:4d:9d:ca:e8:6d:3b:aa:4b:ae:33:
         08:5c:59:b2:6e:1b:e5:49:37:82:86:49:c1:95:12:15:18:9a:
         d3:4b:e7:bc:b0:61:84:01:0b:b7:c1:d0:c1:14:a4:1b:d4:3c:
         49:9c:1d:dc:92:d7:c7:68:b8:7f:59:25:c5:0a:a6:17:74:89:
         f0:41:a7:c8:a5:4b:a5:0a:8c:34:53:a0:cc:b2:1b:6e:b1:68:
         01:6e:fc:32:2d:83:64:88:ec:80:8d:45:d6:2e:e1:ba:17:80:
         e5:42:ad:ab:dc:31:b1:a5:64:a3:39:2f:08:a9:99:03:bb:76:
         d6:17:eb:f0:7d:56:3c:f5:7f:bd:7e:f4:66:52:e6:3f:b2:45:
         31:3a:51:9d:fd:9d:9a:64:7c:35:20:2f:d9:ff:18:05:ac:10:
         17:87:eb:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 23:54:15 2026 by rpki-client