Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5eea44be-bf29-4d88-8bfd-1a1fde52ffd4/3d507360-37eb-3aee-b88b-03e98945d544.roa
File:                     3d507360-37eb-3aee-b88b-03e98945d544.roa (raw, json)
Hash identifier:          6w6fmCFgmqnZCtkKn82huqLdhEhwZAs8p0HIjVwYMLA=
Subject key identifier:   A9:07:76:02:BF:35:D1:EF:7C:62:7E:99:72:6F:45:B5:1C:17:93:2D
Certificate issuer:       /CN=5eea44be-bf29-4d88-8bfd-1a1fde52ffd4
Certificate serial:       010D0C9F4328584D2235CEBF3147061E7DD93680
Authority key identifier: 61:75:13:9B:23:C7:D7:F0:06:C0:A7:2F:F2:0E:6F:15:69:28:B7:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5eea44be-bf29-4d88-8bfd-1a1fde52ffd4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5eea44be-bf29-4d88-8bfd-1a1fde52ffd4/3d507360-37eb-3aee-b88b-03e98945d544.roa
Signing time:             Wed 11 Mar 2026 14:07:28 +0000
ROA not before:           Wed 11 Mar 2026 14:07:28 +0000
ROA not after:            Tue 09 Jun 2026 14:07:28 +0000
asID:                     21518
IP address blocks:        204.107.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5eea44be-bf29-4d88-8bfd-1a1fde52ffd4/5eea44be-bf29-4d88-8bfd-1a1fde52ffd4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5eea44be-bf29-4d88-8bfd-1a1fde52ffd4/5eea44be-bf29-4d88-8bfd-1a1fde52ffd4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5eea44be-bf29-4d88-8bfd-1a1fde52ffd4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:22:35:ce:bf:31:47:06:1e:7d:d9:36:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5eea44be-bf29-4d88-8bfd-1a1fde52ffd4
        Validity
            Not Before: Mar 11 14:07:28 2026 GMT
            Not After : Jun  9 14:07:28 2026 GMT
        Subject: CN=83543593-6235-4698-9d28-49072cd62693
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:08:2a:cb:58:33:14:ef:2e:72:4e:47:0e:c2:
                    d4:d5:b6:3d:77:20:5c:ea:21:fb:e5:ec:a0:36:fc:
                    27:9a:f0:9e:49:3c:3b:a0:78:44:00:13:cb:4c:c2:
                    64:b9:af:12:43:a8:2b:82:ad:4e:6b:ac:93:b9:51:
                    8b:28:82:2e:14:03:ae:b1:be:9d:84:b7:c1:df:a9:
                    6c:41:10:76:d6:d5:ae:79:8c:2d:c3:df:99:a1:47:
                    8b:31:75:73:20:7b:e6:99:2a:e9:eb:75:5f:95:f2:
                    04:b6:b4:4d:8a:67:51:0a:0c:9a:ef:42:ad:33:91:
                    1d:47:10:78:f1:68:53:e0:b6:a0:9e:96:90:37:97:
                    7e:5a:ff:ea:98:ec:74:fd:15:76:b4:b4:19:c2:59:
                    b4:8e:fd:6c:e7:8d:18:7a:5c:97:e4:de:aa:94:69:
                    0b:93:c6:ff:b4:89:f4:46:01:93:fb:0f:e4:e0:2c:
                    18:88:81:3a:07:7d:c3:c9:c0:3b:1f:c6:16:c7:ec:
                    fb:16:21:b7:19:eb:83:73:7d:1d:af:83:de:43:b9:
                    bf:4a:66:cb:4b:bb:95:24:b2:ff:d5:e1:87:d2:c1:
                    c9:bd:87:16:59:d7:00:fc:b6:dc:cc:fc:2c:ce:83:
                    57:d4:44:17:17:0d:16:77:49:e2:29:0d:9d:fd:01:
                    84:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:07:76:02:BF:35:D1:EF:7C:62:7E:99:72:6F:45:B5:1C:17:93:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5eea44be-bf29-4d88-8bfd-1a1fde52ffd4/3d507360-37eb-3aee-b88b-03e98945d544.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5eea44be-bf29-4d88-8bfd-1a1fde52ffd4/5eea44be-bf29-4d88-8bfd-1a1fde52ffd4.crl

            X509v3 Authority Key Identifier:
                keyid:61:75:13:9B:23:C7:D7:F0:06:C0:A7:2F:F2:0E:6F:15:69:28:B7:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5eea44be-bf29-4d88-8bfd-1a1fde52ffd4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.107.242.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:d6:07:55:43:0b:ba:ac:67:6b:6a:04:02:18:26:5b:38:8e:
         1b:47:a4:26:29:97:8c:73:e8:c8:f5:1e:85:02:4a:2a:ea:13:
         ca:f7:b4:75:b1:47:77:69:6e:70:84:f7:28:58:61:25:ca:fb:
         b2:7a:e4:68:08:9f:bf:0c:ea:cc:47:f2:29:0b:20:8d:99:aa:
         c1:66:52:bb:c8:c9:5e:ba:90:4d:d8:5a:17:f2:8c:58:a7:a6:
         9b:c0:f2:29:14:f2:85:fb:3c:f9:7d:a9:83:db:93:8e:10:c5:
         e3:2b:0f:c7:0c:58:99:8e:de:d3:3b:14:4d:f0:b4:5f:08:29:
         45:9c:e2:5a:42:6b:0a:c9:17:c4:68:7d:01:a7:64:1c:0c:42:
         b0:9d:8b:56:3e:02:78:b5:9a:df:e2:58:87:89:67:36:8c:c6:
         18:42:e9:2c:81:77:6a:07:e2:1a:81:46:d6:57:7f:8d:b8:05:
         17:d0:a3:c1:00:57:78:fe:e9:87:ce:1f:2c:6e:04:60:49:3e:
         6f:b6:5b:fb:e9:01:52:05:6b:9a:5e:f1:f9:fa:4d:6f:2e:7b:
         07:d3:a8:8c:f1:45:8a:a0:ba:5c:2a:1c:35:94:65:df:ca:fe:
         10:7f:ab:81:24:d4:ff:7e:66:a8:30:27:e6:08:37:87:4e:06:
         6a:bd:90:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 08:18:13 2026 by rpki-client