Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7fbc407-59cf-4c36-bec1-9e46479af77b/9279ec8c-949c-346a-89f2-5cf679fad74b.roa
File:                     9279ec8c-949c-346a-89f2-5cf679fad74b.roa (raw, json)
Hash identifier:          HxF+37d1oJORx8rms4tkSRgncPABjs+fQQZoXS0Dweo=
Subject key identifier:   4D:6E:25:21:A5:62:80:03:DC:9C:67:E8:BA:5D:E4:F4:9B:37:F3:68
Certificate issuer:       /CN=c7fbc407-59cf-4c36-bec1-9e46479af77b
Certificate serial:       010D0C9F4328584D300A5F10611E7DB2EB4C9800
Authority key identifier: 74:04:09:AD:2D:F2:49:45:91:01:07:8B:D6:68:BD:6D:11:73:6E:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7fbc407-59cf-4c36-bec1-9e46479af77b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7fbc407-59cf-4c36-bec1-9e46479af77b/9279ec8c-949c-346a-89f2-5cf679fad74b.roa
Signing time:             Mon 16 Mar 2026 13:00:40 +0000
ROA not before:           Mon 16 Mar 2026 13:00:40 +0000
ROA not after:            Sun 14 Jun 2026 13:00:40 +0000
asID:                     25710
IP address blocks:        24.38.160.0/19 maxlen: 19
                          2606:af80::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7fbc407-59cf-4c36-bec1-9e46479af77b/c7fbc407-59cf-4c36-bec1-9e46479af77b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7fbc407-59cf-4c36-bec1-9e46479af77b/c7fbc407-59cf-4c36-bec1-9e46479af77b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7fbc407-59cf-4c36-bec1-9e46479af77b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:30:0a:5f:10:61:1e:7d:b2:eb:4c:98:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7fbc407-59cf-4c36-bec1-9e46479af77b
        Validity
            Not Before: Mar 16 13:00:40 2026 GMT
            Not After : Jun 14 13:00:40 2026 GMT
        Subject: CN=97821995-471a-4a7b-904d-5bf3cc766707
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:70:6a:4a:e1:b5:b0:e3:8d:7e:5b:1e:e8:e5:
                    59:ba:08:99:7d:c0:14:a5:77:07:c1:e2:5d:91:c5:
                    b9:3b:da:2d:22:60:0e:21:8a:1c:15:03:be:47:d5:
                    6a:af:7e:47:b6:74:1b:e3:7c:f4:98:04:fd:6b:f5:
                    5c:c6:36:b5:76:3a:4d:7d:cb:8c:84:97:83:92:56:
                    2a:bb:22:f0:dc:f0:48:66:56:59:05:24:a2:cc:a5:
                    36:b0:50:ca:9c:f0:9a:b5:36:d8:4d:6a:79:27:b0:
                    ac:a3:ab:32:c2:c4:79:86:ff:35:01:a5:7a:a9:a4:
                    37:be:0a:48:57:77:e1:5f:aa:d1:05:75:91:a9:76:
                    fb:e3:00:e9:9b:42:d3:76:ab:ca:29:8e:ee:1e:4b:
                    d1:d5:34:1a:e1:ac:fc:f9:ae:29:6e:ba:24:40:27:
                    9d:ef:d1:78:6f:2e:cb:93:c0:25:8d:ff:ca:a9:0b:
                    d8:18:3c:bb:5f:6a:82:a3:63:39:52:4e:51:6a:0f:
                    3b:9d:32:a1:07:55:7e:66:af:14:bd:0b:48:63:74:
                    78:41:5a:f4:56:44:42:3a:d4:62:3f:fd:1a:cb:be:
                    14:5c:be:0a:ef:fb:34:44:02:de:5d:6c:02:0b:18:
                    16:ca:4c:3a:55:a0:a5:2e:4d:9c:43:8b:5c:14:99:
                    80:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:6E:25:21:A5:62:80:03:DC:9C:67:E8:BA:5D:E4:F4:9B:37:F3:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7fbc407-59cf-4c36-bec1-9e46479af77b/9279ec8c-949c-346a-89f2-5cf679fad74b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7fbc407-59cf-4c36-bec1-9e46479af77b/c7fbc407-59cf-4c36-bec1-9e46479af77b.crl

            X509v3 Authority Key Identifier:
                keyid:74:04:09:AD:2D:F2:49:45:91:01:07:8B:D6:68:BD:6D:11:73:6E:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7fbc407-59cf-4c36-bec1-9e46479af77b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.38.160.0/19
                IPv6:
                  2606:af80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:28:45:62:40:2a:80:36:2b:48:ae:59:e3:98:34:ea:a2:12:
         c6:10:cb:7f:58:2c:ee:b3:0e:d8:c5:ad:54:7c:06:53:1a:f8:
         52:d7:49:b4:b0:a1:7b:2e:d9:51:61:35:02:e5:b0:a7:36:76:
         94:b6:ca:81:aa:0c:af:37:2d:9b:46:1e:0b:1a:87:79:2d:b2:
         24:a3:48:d6:22:e4:c8:7e:5f:87:23:22:ee:d8:77:23:d7:94:
         bc:c4:27:a9:2d:35:24:3c:29:68:a5:f8:fc:3e:3c:dc:2b:f5:
         33:d7:3b:d9:aa:53:7d:fb:88:29:d2:21:36:9d:7d:cd:d5:73:
         7b:66:7b:dc:48:49:5c:d6:b6:e6:89:c7:98:fd:55:78:fc:46:
         34:76:62:38:bb:aa:29:f5:f2:e4:51:ed:ba:75:29:6b:5e:47:
         6c:02:91:6e:52:97:bd:e5:f6:20:17:43:a4:c2:47:f7:12:48:
         77:f9:d2:13:88:9f:3c:7f:4c:4e:b3:0f:89:a7:cb:d8:40:e0:
         7b:d6:14:bf:4d:90:3e:d7:fa:d4:60:84:be:42:03:a2:a2:7f:
         33:01:2c:73:68:c4:9f:8a:25:b7:87:1f:5a:e5:63:f7:28:80:
         02:53:42:a3:b7:22:42:82:1a:51:83:fc:41:4c:16:ef:df:a0:
         01:a5:bd:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 17 00:46:00 2026 by rpki-client