Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/f9fe42ed-ff00-3a3a-ba72-72f1c4f4bc33.roa
File:                     f9fe42ed-ff00-3a3a-ba72-72f1c4f4bc33.roa (raw, json)
Hash identifier:          TK3xjBgGWK2BVnjwY9DUo3Js49PFdU/DJ+MQqTHLafQ=
Subject key identifier:   B8:CB:B4:E8:E9:B8:F4:D1:00:13:DA:FF:5E:D0:10:F1:17:A3:5A:F5
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584D1F4A09B8DF4AD7A3AFBBE0C0
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/f9fe42ed-ff00-3a3a-ba72-72f1c4f4bc33.roa
Signing time:             Tue 10 Mar 2026 13:00:41 +0000
ROA not before:           Tue 10 Mar 2026 13:00:41 +0000
ROA not after:            Mon 08 Jun 2026 13:00:41 +0000
asID:                     852
IP address blocks:        207.81.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:4a:09:b8:df:4a:d7:a3:af:bb:e0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Mar 10 13:00:41 2026 GMT
            Not After : Jun  8 13:00:41 2026 GMT
        Subject: CN=e7c13fe6-c9cc-4db0-a657-9078be264786
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:2c:ae:ca:49:71:c7:4c:19:dc:7e:02:6c:c3:
                    1f:9f:94:03:27:08:50:f5:4e:b5:a7:8a:b4:a9:0c:
                    a6:90:6c:57:59:87:63:59:f2:73:87:b9:57:96:d4:
                    43:48:41:2d:ed:c4:8d:07:92:64:e4:b4:41:94:3e:
                    18:73:4a:f4:17:1c:d0:0c:ca:8c:b7:1c:5e:f3:08:
                    01:6d:0b:7c:a2:bc:61:60:7b:c7:ab:5b:32:d6:04:
                    38:27:be:a3:af:a0:26:e3:8c:dc:d9:f4:3f:96:4b:
                    0c:1c:29:27:7b:81:c3:8b:72:01:48:6d:e3:ab:cf:
                    99:26:88:a9:df:fc:eb:ac:79:8a:c5:5e:ec:4a:38:
                    74:b9:cb:26:86:35:2a:1e:0f:7c:74:30:4d:43:c0:
                    ac:21:48:11:f3:f6:31:c9:ce:18:91:cf:0f:27:3e:
                    3c:e7:7b:71:37:ef:03:d0:9c:41:8c:4c:9d:10:c6:
                    7a:16:7c:e1:49:11:4d:32:c5:67:8f:51:37:5c:61:
                    03:9c:40:c7:4d:43:ee:f0:73:3b:29:98:43:d4:6e:
                    fb:2f:a9:ba:7e:17:93:2c:c6:27:1b:d6:f1:02:8f:
                    6c:23:b1:54:44:56:18:08:c9:d2:5b:fc:a6:09:42:
                    94:67:0f:0c:cb:cb:f2:b2:67:16:10:ce:4e:27:60:
                    c3:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:CB:B4:E8:E9:B8:F4:D1:00:13:DA:FF:5E:D0:10:F1:17:A3:5A:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/f9fe42ed-ff00-3a3a-ba72-72f1c4f4bc33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.81.197.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         df:99:c7:73:37:5e:f7:89:82:14:11:81:77:10:59:ec:ee:b2:
         80:3b:da:f5:b6:bd:c9:48:59:32:04:32:ed:cb:08:40:0b:9e:
         33:9e:dd:de:64:a8:5c:10:33:40:de:22:8c:9c:6b:a6:f6:d8:
         9a:ab:2c:50:ed:d4:63:2b:da:bb:5b:10:a6:68:14:a5:39:d9:
         87:b9:a0:e5:6a:b3:0c:67:e0:b0:b0:3c:90:b6:14:1b:15:c3:
         7e:c6:d9:86:0c:03:ee:49:c4:81:44:e4:1c:9a:b4:38:46:c7:
         6a:03:b5:69:b0:96:9c:e3:7b:a9:6f:34:a8:e2:f0:3d:d0:03:
         b1:2d:53:be:f5:1f:e8:26:3c:42:4a:5b:da:18:31:13:33:73:
         3d:10:6a:4b:67:90:53:f8:14:69:38:07:ce:ee:22:40:98:e8:
         6f:ea:bf:58:95:aa:f4:f6:2c:6a:f8:02:49:88:1d:dd:a0:68:
         04:06:c7:38:e5:97:b9:7f:47:27:85:dd:52:22:fd:03:2f:fb:
         fa:3d:7a:bd:7e:d8:87:a8:dc:1f:19:36:1e:c5:fe:98:cc:83:
         a2:4a:23:99:5f:f7:bc:7f:36:93:a4:5c:5a:81:c3:db:5a:0a:
         d4:f4:ff:d9:e1:8c:2e:9b:91:0c:62:24:29:57:b3:a7:f6:bc:
         46:c5:eb:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 23:52:37 2026 by rpki-client