Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d46af16d-de13-3757-ae8b-31c2583baa88.roa
File:                     d46af16d-de13-3757-ae8b-31c2583baa88.roa (raw, json)
Hash identifier:          ro2Mfx3cCt/Jb/Ld0ZSlK/x5vvk3Rg8bQzw5okAyUM8=
Subject key identifier:   AA:C1:B0:63:75:F1:C1:B5:23:75:1F:E1:83:6B:CA:19:88:FF:B1:F1
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584D15A257A22DBAF101DD15AB80
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d46af16d-de13-3757-ae8b-31c2583baa88.roa
Signing time:             Sat 07 Mar 2026 02:00:32 +0000
ROA not before:           Sat 07 Mar 2026 02:00:32 +0000
ROA not after:            Fri 05 Jun 2026 01:00:32 +0000
asID:                     852
IP address blocks:        207.194.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:15:a2:57:a2:2d:ba:f1:01:dd:15:ab:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Mar  7 02:00:32 2026 GMT
            Not After : Jun  5 01:00:32 2026 GMT
        Subject: CN=04c898ed-d2e9-4d4d-af98-93a86fb89152
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:c7:f2:bb:7c:c5:e9:e3:84:5e:06:fa:21:50:
                    f1:3e:fa:cd:f5:56:d0:02:66:38:62:50:68:df:1d:
                    b8:33:cf:0a:db:80:f2:92:f3:1d:f5:fc:e8:45:13:
                    a2:75:f7:61:2c:16:5d:6c:34:fa:0a:e5:eb:9d:04:
                    6f:a2:68:a4:59:68:c5:61:d5:04:0d:dc:bb:65:2d:
                    01:58:db:ac:73:71:7e:49:b0:fe:91:d5:37:f0:01:
                    ea:1f:a8:f6:27:6c:57:71:5f:09:16:91:74:c2:a0:
                    af:6c:2e:a8:e7:0f:7a:68:d4:b1:fa:30:2b:e6:6c:
                    8f:a6:d7:8d:fd:49:be:25:3a:c4:ca:12:48:27:47:
                    ab:39:1e:76:64:ce:aa:cc:60:bd:a4:a6:00:2e:6e:
                    3e:55:95:8a:b7:aa:7c:ca:fc:a6:63:61:66:32:b7:
                    af:19:53:fb:5e:96:c3:09:91:fc:c0:b0:cc:e7:11:
                    7e:8c:90:a8:d6:b6:e2:01:ad:4a:5c:e8:e9:50:fd:
                    f3:e6:15:a3:07:d4:04:a1:b1:1b:00:f6:24:e9:9b:
                    cf:e5:3c:de:63:72:57:9b:e6:11:6d:bc:3e:b3:e2:
                    c8:ef:c7:bb:5e:fc:18:43:b2:68:e6:e0:08:97:0d:
                    56:fe:55:65:46:d7:36:77:b2:2b:84:b4:4d:c9:12:
                    a9:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:C1:B0:63:75:F1:C1:B5:23:75:1F:E1:83:6B:CA:19:88:FF:B1:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d46af16d-de13-3757-ae8b-31c2583baa88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.194.33.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:88:56:09:9b:1b:16:88:5f:7e:84:80:5c:5e:ed:e3:aa:e7:
         8c:08:ea:7d:a9:6c:4d:48:6c:e3:ac:3c:c3:1e:05:06:50:ce:
         d1:b9:40:15:9e:d2:59:cf:e9:0b:fc:b0:e3:0f:24:46:cd:37:
         7e:93:a4:67:10:91:f7:72:e9:a3:cc:78:1e:8c:13:d3:e1:1c:
         2b:da:96:eb:77:cf:aa:38:d3:28:1c:ee:7b:f7:6c:8d:03:88:
         2f:91:30:19:8a:5f:bc:12:ef:d4:30:ed:9c:86:e5:a9:6c:f1:
         c6:f1:28:8b:8d:0c:76:49:0a:d6:4d:fc:c5:6b:bb:ad:f9:ee:
         95:40:bc:91:87:22:10:b5:5e:b4:2c:61:a7:7f:27:de:56:cd:
         d1:d0:9d:7a:8a:10:18:8e:59:f5:88:17:11:67:8b:a6:4e:4c:
         24:ad:9f:e8:19:30:ca:d9:f9:53:15:44:94:5e:04:e5:ef:22:
         35:75:12:77:a5:21:94:62:86:53:03:bb:6d:79:66:68:9c:d5:
         3d:c4:7b:ac:00:dd:9c:6b:8c:4d:fc:f5:c8:7a:d4:71:95:67:
         c8:ff:6a:92:0c:39:f6:b0:1f:e1:3c:58:f0:27:a1:09:29:cb:
         48:d5:43:58:41:b7:48:39:75:87:78:88:f4:18:70:29:e2:c8:
         bc:a2:5c:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 23:54:20 2026 by rpki-client