Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/fdcbf216-35db-3da8-a2aa-3033c0f09bec.roa
File:                     fdcbf216-35db-3da8-a2aa-3033c0f09bec.roa (raw, json)
Hash identifier:          8u+yo/7RQzBgZHWT4sU+FNYPg6XuomWRWeXHVnxx5Hc=
Subject key identifier:   38:F6:68:37:2B:AF:67:04:D2:E8:E6:F0:1A:F9:7D:92:EA:23:F6:9A
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584D15A258ED64EEC4A670BA4D20
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/fdcbf216-35db-3da8-a2aa-3033c0f09bec.roa
Signing time:             Sat 07 Mar 2026 02:00:32 +0000
ROA not before:           Sat 07 Mar 2026 02:00:32 +0000
ROA not after:            Fri 05 Jun 2026 01:00:32 +0000
asID:                     852
IP address blocks:        204.174.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:15:a2:58:ed:64:ee:c4:a6:70:ba:4d:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Mar  7 02:00:32 2026 GMT
            Not After : Jun  5 01:00:32 2026 GMT
        Subject: CN=651436b8-acf9-4e07-bce5-c7629c1b81c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:19:c3:06:a9:4e:74:49:e4:31:8f:0e:64:e5:
                    8d:34:0e:3c:47:ba:bd:81:6f:3d:0b:11:07:d7:84:
                    9e:f8:5d:f0:f7:98:e8:1f:d7:b8:1d:39:b9:57:42:
                    8b:cb:ce:a5:85:a5:fb:71:dd:69:78:1d:a1:5c:b0:
                    a9:39:09:bf:9d:22:27:c3:74:a3:b3:d0:62:fd:59:
                    97:d9:44:91:64:a1:e5:2c:2f:62:55:7b:2d:ea:c3:
                    e3:0d:cc:e5:31:00:90:11:d1:5f:a3:ff:8c:7a:a4:
                    a6:4d:31:05:16:ba:d9:27:8e:d5:d8:76:7e:21:89:
                    76:b8:f4:92:bf:e5:04:70:13:de:90:29:6b:13:b5:
                    d9:1a:2e:4e:66:e2:c0:9b:0f:84:18:bb:c5:59:8e:
                    b2:21:44:91:39:90:20:60:ad:8d:38:03:09:17:25:
                    60:11:79:e8:3f:e3:45:ab:e7:46:dd:d5:9d:cf:a1:
                    cb:29:6b:d6:48:cf:03:4c:a4:3b:c5:9a:47:56:7b:
                    c7:f6:15:ff:2f:06:0b:3f:f1:ce:75:f9:18:47:30:
                    0a:b2:fa:c4:22:2d:30:63:22:59:75:94:53:b5:9d:
                    1f:cf:46:9f:b5:2f:59:86:92:c7:4e:28:8a:31:dc:
                    e6:3b:fc:fa:7a:f5:f7:2c:42:04:28:1d:3d:01:e8:
                    d3:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:F6:68:37:2B:AF:67:04:D2:E8:E6:F0:1A:F9:7D:92:EA:23:F6:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/fdcbf216-35db-3da8-a2aa-3033c0f09bec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.174.123.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:92:b6:66:93:3e:91:ed:d7:4a:32:ea:de:cc:77:ee:87:e9:
         3f:74:d4:bb:36:87:58:55:0d:c0:03:d5:dd:f8:f7:c4:5e:0d:
         9d:95:48:43:dc:6e:12:6f:a6:77:e3:0c:3d:98:b2:14:3e:0f:
         ed:76:70:79:61:4d:99:d3:71:09:8b:d2:e9:10:ab:20:16:03:
         dd:a9:da:a8:0c:1f:60:49:b9:47:8e:14:49:58:16:ae:54:56:
         d4:11:80:e0:c7:27:b4:b3:29:5b:48:31:7a:0d:25:9c:cc:4d:
         f1:62:83:ce:b6:99:5a:5d:c3:25:a7:2c:ee:de:7b:47:4d:35:
         4c:3d:21:5c:19:ab:3c:d0:7e:8f:4d:a4:8d:dd:f9:dd:25:f6:
         45:2b:03:71:75:73:27:23:ed:57:bd:30:14:6e:89:55:48:d4:
         57:c5:8f:70:af:1c:1e:2a:dd:ec:4c:2c:ed:f6:ac:4e:e8:8b:
         4c:4c:3e:3e:fc:27:ef:58:19:34:e2:fc:8e:11:06:b0:cf:9d:
         b6:a2:30:6e:6a:d3:2f:1c:4d:99:84:0b:40:99:80:22:1b:b9:
         25:89:d7:41:40:db:88:50:8c:75:4f:e6:a4:c4:4b:b3:a3:d4:
         1f:c1:b9:06:ab:45:c4:f6:76:96:51:43:f9:e3:38:df:54:2a:
         7f:5f:b3:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 23:52:40 2026 by rpki-client