Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/47a42df1-d50c-313d-8a6e-037b0cbad1a0.roa
File:                     47a42df1-d50c-313d-8a6e-037b0cbad1a0.roa (raw, json)
Hash identifier:          m1GjJhcjPFtrSHPJHG4LMpUCcroYjme759k7HsNqGCE=
Subject key identifier:   3C:F0:30:D2:C9:FF:0E:F7:51:76:43:09:01:42:0D:23:C2:8B:2A:85
Certificate issuer:       /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
Certificate serial:       010D0C9F4328584D0E3A26E4D6834685B4B4A5B4
Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/47a42df1-d50c-313d-8a6e-037b0cbad1a0.roa
Signing time:             Wed 04 Mar 2026 10:20:04 +0000
ROA not before:           Wed 04 Mar 2026 10:20:04 +0000
ROA not after:            Tue 02 Jun 2026 09:20:04 +0000
asID:                     54994
IP address blocks:        153.43.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0e:3a:26:e4:d6:83:46:85:b4:b4:a5:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
        Validity
            Not Before: Mar  4 10:20:04 2026 GMT
            Not After : Jun  2 09:20:04 2026 GMT
        Subject: CN=2abc6b0f-9dc7-49fc-bb7c-e2b114043882
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:9f:3e:63:b0:43:d3:2d:4f:df:55:05:f9:ae:
                    52:3f:c8:4a:03:40:ec:d7:0f:12:74:ba:bd:3e:85:
                    75:99:2d:6a:e4:33:41:27:82:f9:11:8f:6a:ed:f3:
                    f6:9c:f0:75:14:e8:80:2e:eb:c8:de:0d:e0:98:7b:
                    01:bc:49:05:19:31:d5:fc:82:88:0b:b6:dc:bc:b3:
                    d4:ca:9a:ef:94:1f:e7:47:10:25:13:c9:19:6d:3f:
                    1e:2d:d9:82:54:c5:66:72:e0:97:bb:b8:5c:c9:fc:
                    9a:76:80:b8:d6:7f:3a:bc:89:a7:b0:04:da:5b:85:
                    85:8d:9a:f5:2e:9b:68:f5:5b:47:83:33:22:d4:04:
                    0f:de:f4:74:7f:33:45:02:59:89:bd:a7:28:1b:24:
                    5e:a8:52:09:44:df:a7:de:c7:1f:b4:bd:1e:a7:88:
                    95:e6:23:5d:2b:b2:1b:35:83:f7:f6:f4:97:67:f8:
                    21:49:21:fb:af:46:9c:7a:fa:0c:af:5b:5f:59:12:
                    6c:05:dd:ff:30:af:c5:19:77:cd:c0:1d:df:0d:b1:
                    16:0c:f8:2a:17:e2:4a:81:a4:51:ab:fb:5f:e1:39:
                    5d:fa:ad:b0:88:7e:7d:26:51:7e:ba:0f:64:40:ef:
                    9a:03:e4:30:d7:ef:77:a4:fc:a4:ba:70:2e:44:aa:
                    d8:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:F0:30:D2:C9:FF:0E:F7:51:76:43:09:01:42:0D:23:C2:8B:2A:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/47a42df1-d50c-313d-8a6e-037b0cbad1a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl

            X509v3 Authority Key Identifier:
                keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.43.39.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:42:89:be:26:e5:c8:a0:45:40:ce:f0:0b:b1:75:b7:40:4d:
         3a:30:d3:9e:9b:b6:d7:79:85:80:55:a0:65:95:e1:17:6b:6d:
         e4:6f:97:b3:98:bd:90:4e:11:cd:8e:38:40:51:7b:d1:3e:9c:
         24:a4:0c:82:81:54:46:9c:b6:0e:ea:8a:5a:b0:94:3a:75:d9:
         fd:80:b5:32:62:d5:ca:7d:83:de:8a:f1:8a:57:df:92:2b:ce:
         6a:38:6d:a3:8a:65:e1:b4:ef:a2:72:99:75:c4:81:21:e2:7d:
         ca:c3:65:a4:dd:f4:a9:4d:73:26:30:34:3d:5e:a6:a2:55:4b:
         b3:98:61:b5:53:b5:64:ec:2b:a8:bc:60:34:6a:71:5a:ea:89:
         ed:e4:af:0a:92:f0:b9:39:98:0b:04:7d:6b:55:e5:4f:41:50:
         96:54:1b:66:b9:fd:e2:db:a6:2a:60:22:38:c3:60:8f:01:08:
         af:01:2b:f2:e8:53:56:25:fd:ef:da:80:2b:bc:74:ba:ba:41:
         65:72:4c:0f:d4:ac:4c:01:d5:1e:32:6b:c7:9f:0d:61:ec:c3:
         87:36:d8:5f:d7:fa:22:46:52:18:0a:23:19:bd:1c:d3:4f:35:
         77:67:ea:63:4a:3a:11:b0:05:c8:ee:fc:8d:8f:a5:97:f5:3e:
         b8:aa:1f:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 6 19:36:18 2026 by rpki-client