Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/3fd6507f-d7b1-37d5-8221-258d1a8197a5.roa
File:                     3fd6507f-d7b1-37d5-8221-258d1a8197a5.roa (raw, json)
Hash identifier:          D2peFYlL11LJvnMREMB5A+V+FuNPRKjKBYTp4D9999g=
Subject key identifier:   BA:D5:58:6F:63:55:58:EF:5E:F3:05:7C:D2:2F:70:8B:33:BD:78:C8
Certificate issuer:       /CN=c7a240a6-7109-4cea-b4c6-82f627a534d6
Certificate serial:       010D0C9F4328584DF375E71AB5064AAD80878780
Authority key identifier: 63:B0:53:A7:E5:00:E1:A7:5E:E6:10:16:EA:3B:F1:3C:9E:CF:88:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/3fd6507f-d7b1-37d5-8221-258d1a8197a5.roa
Signing time:             Mon 25 May 2026 13:00:31 +0000
ROA not before:           Mon 25 May 2026 13:00:31 +0000
ROA not after:            Sun 23 Aug 2026 13:00:31 +0000
asID:                     834
IP address blocks:        172.84.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/c7a240a6-7109-4cea-b4c6-82f627a534d6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/c7a240a6-7109-4cea-b4c6-82f627a534d6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 04 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f3:75:e7:1a:b5:06:4a:ad:80:87:87:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7a240a6-7109-4cea-b4c6-82f627a534d6
        Validity
            Not Before: May 25 13:00:31 2026 GMT
            Not After : Aug 23 13:00:31 2026 GMT
        Subject: CN=bab398f6-df6d-4e56-92de-06c201d48d87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:ac:39:f7:cd:18:15:b5:94:d0:6e:23:bd:49:
                    53:40:1a:c4:df:e5:ab:c9:22:fc:3d:7a:a7:e7:6d:
                    10:d2:30:b0:b0:34:c6:04:8c:e3:8f:64:af:74:e0:
                    f2:e2:64:a7:72:00:85:c8:60:c9:14:64:26:4f:1c:
                    7c:fb:60:12:25:d0:e3:08:2b:8c:06:21:20:82:df:
                    8e:0e:a2:3f:e0:1b:69:4c:d5:dd:86:43:99:a6:be:
                    6e:9c:43:5d:6f:c1:2c:ca:34:1e:bb:dd:b6:06:a2:
                    e5:19:39:47:b6:78:90:7c:3e:75:18:ed:fd:d5:ec:
                    79:fb:79:7a:7f:1c:23:76:b8:9f:43:10:75:59:f9:
                    f9:9f:70:8f:6f:1c:bb:19:03:04:b8:45:52:e7:12:
                    c9:39:61:d9:35:31:6a:6b:0e:38:16:39:67:9a:34:
                    8c:ad:d9:6e:b0:63:78:4c:9d:3b:8f:56:5a:a8:a7:
                    32:37:89:55:3b:3a:f7:72:7e:d4:a9:43:9e:a8:de:
                    97:7e:6d:c5:61:80:e4:5c:35:6e:2c:ff:9e:43:f0:
                    a4:f9:2a:4e:f1:10:57:1b:80:27:2b:31:66:df:9d:
                    dc:92:cb:10:13:03:f4:bd:c8:94:83:a4:ac:70:68:
                    1d:bc:b2:be:5b:95:20:ee:94:fa:d5:fb:23:cf:42:
                    95:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:D5:58:6F:63:55:58:EF:5E:F3:05:7C:D2:2F:70:8B:33:BD:78:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/3fd6507f-d7b1-37d5-8221-258d1a8197a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/c7a240a6-7109-4cea-b4c6-82f627a534d6.crl

            X509v3 Authority Key Identifier:
                keyid:63:B0:53:A7:E5:00:E1:A7:5E:E6:10:16:EA:3B:F1:3C:9E:CF:88:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.84.93.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:28:a7:37:28:21:74:fc:37:17:1e:f3:84:73:71:2e:3b:1f:
         4b:8a:10:66:11:5c:d6:99:c8:fb:b7:cf:ab:a2:4e:e4:b3:9b:
         d4:4f:30:61:ce:f0:b9:15:30:6b:6a:f6:6b:4b:84:99:68:49:
         6f:09:8c:f9:76:94:f6:08:0f:0b:dc:c1:1f:93:d9:d6:b5:5f:
         92:a5:96:10:b4:6e:1e:d2:33:d2:50:a9:bd:55:1b:20:d0:57:
         b4:e7:25:6a:35:6a:86:a4:1b:dd:3c:5d:32:cf:62:ac:25:78:
         72:07:5d:80:42:43:ea:7a:bd:55:b7:d7:f0:e2:28:ce:33:8c:
         63:fe:ee:7b:83:55:ff:31:8c:28:06:d7:26:30:d3:15:a5:3c:
         c5:fe:cf:18:32:cb:75:08:df:63:58:9b:5b:d8:72:c1:08:1a:
         e4:de:b9:ae:e4:96:58:91:ca:cf:7c:a5:73:86:b3:1f:20:47:
         9d:74:77:e6:61:80:45:f0:70:98:e2:9a:2b:1c:94:b7:ce:40:
         be:1b:66:9a:75:e9:3b:b9:f6:64:0f:69:4d:37:ab:85:a6:37:
         1c:1c:26:83:c1:51:fa:3b:66:4c:c5:79:5c:5c:e0:49:8a:de:
         5a:34:c9:18:24:b4:13:a7:28:05:21:67:bb:16:42:46:e7:1f:
         14:cc:1b:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 08:36:10 2026 by rpki-client