Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/6f81cc44-a7fe-36e6-a639-96dab6980bdd.roa
File:                     6f81cc44-a7fe-36e6-a639-96dab6980bdd.roa (raw, json)
Hash identifier:          4DHOrHas+IWkB7vbzGjqPQijafXKJW3Zur4/cDFmTWM=
Subject key identifier:   1C:D5:CB:CF:21:43:46:6B:4F:A4:54:43:AE:C3:6B:AA:2E:A8:A1:95
Certificate issuer:       /CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06
Certificate serial:       010D0C9F4328584D35E1A918CAD57045D38B9A80
Authority key identifier: 16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/6f81cc44-a7fe-36e6-a639-96dab6980bdd.roa
Signing time:             Wed 18 Mar 2026 15:14:06 +0000
ROA not before:           Wed 18 Mar 2026 15:14:06 +0000
ROA not after:            Tue 16 Jun 2026 15:14:06 +0000
asID:                     396982
IP address blocks:        147.124.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:35:e1:a9:18:ca:d5:70:45:d3:8b:9a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06
        Validity
            Not Before: Mar 18 15:14:06 2026 GMT
            Not After : Jun 16 15:14:06 2026 GMT
        Subject: CN=ff14d7a3-003a-4170-a532-091214e168c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:d6:00:bf:ed:0f:39:df:00:25:82:8c:82:89:
                    22:ca:fd:92:b1:eb:ee:b6:b2:00:8b:ba:a0:25:36:
                    5d:64:8a:d1:b1:6d:2f:13:b3:67:a5:40:3a:6d:d1:
                    ba:fa:81:ad:2c:f7:9d:ca:66:47:c9:39:b6:6a:a7:
                    20:01:79:29:c4:4e:24:98:4b:e2:29:cd:af:20:9a:
                    68:e4:b8:10:b5:f0:85:a2:30:4b:7d:01:e0:bb:6a:
                    ed:40:6b:86:73:0e:4e:0f:9f:1b:03:e5:2e:b1:75:
                    3b:0d:06:72:dc:9d:ac:64:9e:0f:0c:0d:7e:4f:3f:
                    62:a8:4e:f9:83:03:e8:01:61:88:5f:18:27:58:68:
                    6a:43:97:d4:97:5a:da:c9:d6:7a:19:17:09:03:12:
                    28:ee:de:f3:9f:13:30:3c:5c:f2:4a:2d:91:dd:e8:
                    43:6c:71:cf:45:65:6f:5d:6d:86:b0:27:67:45:2b:
                    69:68:ca:d9:86:a2:2d:f1:aa:4e:a1:59:66:73:56:
                    64:a5:99:f1:33:49:bc:78:ab:43:2d:f5:28:ec:12:
                    19:c2:6a:76:d4:ae:c3:c2:c5:00:07:8c:86:7b:58:
                    72:59:16:61:b4:4d:15:60:4d:8c:71:7a:dd:7f:d2:
                    ff:05:dc:50:39:66:38:f2:d1:c1:0f:84:6f:2e:da:
                    5c:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:D5:CB:CF:21:43:46:6B:4F:A4:54:43:AE:C3:6B:AA:2E:A8:A1:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/6f81cc44-a7fe-36e6-a639-96dab6980bdd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl

            X509v3 Authority Key Identifier:
                keyid:16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.124.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:39:c4:fc:92:b9:34:37:5d:a7:b0:97:6c:de:4c:84:14:ed:
         49:53:dc:a4:e4:f6:4f:72:72:ac:8a:f1:df:1e:d5:3d:46:57:
         5c:51:bd:28:e2:e3:32:44:15:f7:93:3a:49:77:c9:8e:05:9c:
         c6:75:67:b8:c7:fe:ce:de:f9:55:20:8f:96:4d:01:f5:c6:6a:
         41:08:57:0e:8f:dd:80:3d:7b:b1:28:61:db:b4:3d:0b:67:0e:
         3e:9a:a8:1c:1c:ae:3a:07:13:4f:0b:e5:4a:ca:94:7c:dc:61:
         89:ec:65:36:1c:17:97:21:f7:27:fe:3e:2f:15:08:d1:5f:33:
         19:e0:4d:a8:82:4b:41:ec:b3:f6:e3:cf:91:f4:95:86:ac:de:
         c2:25:43:5e:a7:b9:34:5b:6c:81:f9:ce:98:0b:22:9a:0c:cc:
         18:13:82:7c:a4:12:73:27:e0:c3:57:e8:22:2e:ed:fd:28:b9:
         4d:92:85:e6:d4:4d:1e:16:f8:86:df:9f:ee:e0:02:50:93:bb:
         b2:7b:35:78:fc:e3:21:05:0a:5b:18:c2:6b:79:0e:7d:61:fd:
         54:0c:10:b1:74:0f:48:65:42:99:5d:8b:c7:af:16:81:5a:a3:
         1c:8e:ce:66:c4:e9:b5:5f:7d:fa:6e:e0:8d:69:02:ea:07:b5:
         35:cf:3c:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 15:37:31 2026 by rpki-client