Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/cfe30a3e-6848-31b6-a719-3e153eca3494.roa
File:                     cfe30a3e-6848-31b6-a719-3e153eca3494.roa (raw, json)
Hash identifier:          TnfqpY4ZmQeU3rTfYUdpWzjp6vt20QEPIkEZaiQnu84=
Subject key identifier:   4E:07:C5:D8:68:2D:AF:4D:5E:72:AE:BE:76:CE:DE:12:CE:D8:26:4D
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584D204C8A54BD15B785397FFCF0
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/cfe30a3e-6848-31b6-a719-3e153eca3494.roa
Signing time:             Tue 10 Mar 2026 21:41:40 +0000
ROA not before:           Tue 10 Mar 2026 21:41:40 +0000
ROA not after:            Mon 08 Jun 2026 21:41:40 +0000
asID:                     271562
IP address blocks:        205.164.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:20:4c:8a:54:bd:15:b7:85:39:7f:fc:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Mar 10 21:41:40 2026 GMT
            Not After : Jun  8 21:41:40 2026 GMT
        Subject: CN=139930ac-e9c7-43d7-8d94-7ab54e6f7de7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ad:d4:3b:ca:f2:84:df:8c:38:fe:25:66:ed:
                    a5:38:ef:cd:47:7b:50:4c:9c:ab:90:4c:cd:f4:75:
                    64:a9:78:81:c2:53:43:5b:33:b7:60:f6:19:15:99:
                    43:55:eb:96:96:82:8d:58:de:c0:1f:78:ce:b1:be:
                    5c:86:8a:58:f4:4c:c3:db:22:8a:51:d0:14:19:f9:
                    72:85:15:84:f3:89:70:be:83:e5:8e:ca:4d:db:bf:
                    61:1d:3a:a1:1e:ab:ce:ef:8e:40:d9:6d:93:6f:36:
                    1e:76:46:6f:39:36:8e:d4:b6:a7:3e:f9:9c:fb:b7:
                    e6:20:d6:5a:78:0b:ad:72:f4:0c:0a:99:fb:5f:a7:
                    81:86:2f:4b:51:92:4c:81:e4:82:be:f6:12:65:7f:
                    89:d6:38:8f:e8:91:31:f3:5c:0f:d6:bb:3f:a1:73:
                    ce:c0:f3:bf:f1:58:7c:e7:0d:10:4b:50:e3:0d:de:
                    44:cf:af:4c:47:8a:d2:66:53:1e:e8:9b:6e:3b:da:
                    aa:4b:62:a0:13:73:bb:9d:7a:0d:51:c0:a6:19:8c:
                    36:b6:da:4d:14:4c:04:dd:73:0f:2d:ef:57:07:2b:
                    5d:0d:53:29:97:22:bb:c9:51:b8:2e:9d:70:5e:8d:
                    71:20:31:ca:5f:46:70:8e:c5:79:80:97:d6:11:83:
                    bd:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:07:C5:D8:68:2D:AF:4D:5E:72:AE:BE:76:CE:DE:12:CE:D8:26:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/cfe30a3e-6848-31b6-a719-3e153eca3494.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.164.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:4f:f7:07:b7:3f:b6:48:e8:cf:2e:5e:29:12:5d:dd:4c:62:
         17:d9:4b:4b:e5:a5:fd:95:ee:52:a4:69:3f:76:ff:92:92:56:
         ec:de:d2:69:fe:c4:2f:2d:9d:9f:ad:c0:11:73:44:9f:7b:fb:
         e3:1d:10:d7:29:ba:4b:70:f0:68:94:12:fe:44:b0:91:a3:dc:
         6c:24:f9:78:75:3a:54:45:39:cc:c9:44:b0:3a:c2:c9:07:ee:
         00:23:c5:b3:3b:a9:af:92:2f:2f:15:e3:2b:b0:73:5c:6f:27:
         c3:ef:97:0e:66:2f:64:28:36:7e:51:4a:71:ec:73:55:3b:43:
         b4:92:88:72:cc:9e:69:32:ad:71:d9:6d:cd:1b:ae:c8:e5:d6:
         4d:56:c1:65:db:b3:23:b3:51:8d:dc:cc:8a:43:ef:9a:dc:5f:
         b5:df:8f:ef:fd:12:aa:fe:1f:4b:a9:36:a9:f7:f6:0a:e8:56:
         3e:dc:56:8a:14:80:4e:b5:30:6b:44:bc:31:78:62:e5:24:8d:
         0e:c6:85:a0:e9:4a:ea:cf:c2:09:ff:26:57:5b:38:72:2b:97:
         80:3c:65:ea:a9:ab:d1:4a:52:b4:bc:e4:07:63:3e:0c:4b:ce:
         3c:7b:d5:21:f1:6c:f1:56:aa:b9:23:3e:5b:07:42:cc:87:10:
         91:0b:33:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 18:25:40 2026 by rpki-client