Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e5c2b906-947b-452e-a546-6011e1a0e535/d5fe870a-1fd2-3fbb-8dec-9246ffc8bcbf.roa
File:                     d5fe870a-1fd2-3fbb-8dec-9246ffc8bcbf.roa (raw, json)
Hash identifier:          te+hxaEu0ypG9w/xKB5q8NgG8FV94pZuyVCXaLqtHyo=
Subject key identifier:   9F:27:EA:6B:78:EA:6B:07:27:94:89:6F:AB:E2:53:26:30:56:80:B6
Certificate issuer:       /CN=e5c2b906-947b-452e-a546-6011e1a0e535
Certificate serial:       010D0C9F4328584D60E4FECA81C701034F442540
Authority key identifier: 07:4F:E3:D0:AA:F0:11:BF:7A:CB:C8:51:6B:21:E5:BC:9E:5E:9F:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e5c2b906-947b-452e-a546-6011e1a0e535.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e5c2b906-947b-452e-a546-6011e1a0e535/d5fe870a-1fd2-3fbb-8dec-9246ffc8bcbf.roa
Signing time:             Fri 03 Apr 2026 01:00:24 +0000
ROA not before:           Fri 03 Apr 2026 01:00:24 +0000
ROA not after:            Thu 02 Jul 2026 01:00:24 +0000
asID:                     101
IP address blocks:        207.231.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e5c2b906-947b-452e-a546-6011e1a0e535/e5c2b906-947b-452e-a546-6011e1a0e535.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e5c2b906-947b-452e-a546-6011e1a0e535/e5c2b906-947b-452e-a546-6011e1a0e535.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e5c2b906-947b-452e-a546-6011e1a0e535.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:60:e4:fe:ca:81:c7:01:03:4f:44:25:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5c2b906-947b-452e-a546-6011e1a0e535
        Validity
            Not Before: Apr  3 01:00:24 2026 GMT
            Not After : Jul  2 01:00:24 2026 GMT
        Subject: CN=167cb1ce-e93b-4ee1-a53e-e5dee7f317c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:12:e4:24:68:e5:f4:62:08:3f:be:2b:99:d7:
                    83:6e:4d:1c:b0:07:7e:8e:15:70:0e:d9:3a:78:fe:
                    2c:1f:3a:5e:cd:ed:c5:80:18:1a:39:93:51:d7:a2:
                    43:3a:84:d6:f8:bf:12:4e:bd:65:76:73:16:b3:b6:
                    27:02:35:d2:93:a7:04:ac:05:bc:64:72:ea:df:c3:
                    c3:c0:b5:ba:8c:51:b5:47:dc:ed:34:04:c4:bf:c5:
                    ad:51:00:a9:52:a0:5e:fc:24:b5:da:ac:2c:03:52:
                    70:54:d9:5d:b7:29:78:6c:4f:32:87:c5:34:34:f0:
                    2d:40:5c:cf:9f:ef:fd:91:e7:08:40:7b:90:75:68:
                    3a:09:b1:f8:3c:f3:c8:d3:05:76:9e:df:49:36:d1:
                    03:bc:cc:8c:d7:df:72:82:de:27:5a:bb:35:d4:b1:
                    02:38:f6:59:3e:0f:dc:8d:e8:9a:3b:cf:2e:45:61:
                    68:a4:66:7b:b0:ca:b3:72:2e:c4:c8:14:0f:98:72:
                    9b:b8:63:0b:1d:76:08:49:a2:fb:59:4b:56:06:03:
                    75:5d:be:42:27:34:8d:af:d1:6d:67:0d:de:c8:63:
                    6a:8d:fd:99:06:a3:a8:af:f1:39:5e:26:6c:89:02:
                    f8:6f:95:1e:17:e8:f0:17:c1:8d:30:7d:be:1e:b4:
                    01:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:27:EA:6B:78:EA:6B:07:27:94:89:6F:AB:E2:53:26:30:56:80:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e5c2b906-947b-452e-a546-6011e1a0e535/d5fe870a-1fd2-3fbb-8dec-9246ffc8bcbf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e5c2b906-947b-452e-a546-6011e1a0e535/e5c2b906-947b-452e-a546-6011e1a0e535.crl

            X509v3 Authority Key Identifier:
                keyid:07:4F:E3:D0:AA:F0:11:BF:7A:CB:C8:51:6B:21:E5:BC:9E:5E:9F:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e5c2b906-947b-452e-a546-6011e1a0e535.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.231.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:a6:ac:9a:10:b0:4a:0f:de:a9:6f:80:98:36:b8:99:c1:27:
         0a:7a:0a:79:9e:1a:8c:91:d8:0e:d1:14:f6:63:79:bb:72:42:
         d8:02:70:33:6d:2d:cc:78:ed:46:1e:21:43:bf:dd:ba:ad:b4:
         0b:6e:c9:64:6f:b8:27:a3:51:d2:78:f3:0c:74:00:23:95:a2:
         e7:36:63:b0:54:40:a8:80:0b:ad:a9:93:5f:ed:9e:8e:8d:3e:
         c4:f3:79:5e:93:f2:9b:18:e5:f8:8c:08:4a:d5:0c:ed:fa:a3:
         3e:dd:fe:87:25:6b:91:87:07:61:cf:af:cb:b9:d5:1d:23:11:
         f4:e8:9a:4a:d6:a6:f6:9a:93:75:fb:30:4f:b2:1a:ac:fb:eb:
         cc:68:84:01:68:59:70:a6:a4:b0:ef:94:af:ff:d1:ef:58:04:
         96:e2:c6:3d:9f:65:b4:7d:0f:0c:18:95:16:ec:b6:56:55:1d:
         4b:b6:11:88:d0:66:ea:e1:57:64:93:b4:d0:75:41:56:f7:7f:
         14:40:26:24:a4:f5:3d:2b:ff:1f:7e:d1:8b:43:a4:40:bf:55:
         0e:8c:74:16:5b:e4:08:0f:ca:06:9c:e1:ef:ee:df:e8:d5:d1:
         66:94:01:6e:f0:8e:d4:20:a2:8c:8d:83:bc:77:ce:1f:0f:39:
         13:45:f6:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 02:26:47 2026 by rpki-client