Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/352d2a14-7375-334b-9c60-edebec362279.roa
File:                     352d2a14-7375-334b-9c60-edebec362279.roa (raw, json)
Hash identifier:          +DBByjzJAFqxDrkvfJICQuDqf6EH5Od1V+k8tm2ZctE=
Subject key identifier:   DA:9C:AF:D8:F8:11:D9:83:2D:82:48:F1:F3:A2:00:A0:AC:76:9D:DF
Certificate issuer:       /CN=820e56e8-763b-4037-929e-b01c8d786e75
Certificate serial:       010D0C9F4328584D1F4A22EE963BCFDECECF8F00
Authority key identifier: 3F:7D:35:DE:A5:6C:DA:0E:EC:6F:18:6E:11:03:BC:6C:87:D6:D3:2D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/352d2a14-7375-334b-9c60-edebec362279.roa
Signing time:             Tue 10 Mar 2026 13:00:41 +0000
ROA not before:           Tue 10 Mar 2026 13:00:41 +0000
ROA not after:            Mon 08 Jun 2026 13:00:41 +0000
asID:                     399275
IP address blocks:        167.253.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:4a:22:ee:96:3b:cf:de:ce:cf:8f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=820e56e8-763b-4037-929e-b01c8d786e75
        Validity
            Not Before: Mar 10 13:00:41 2026 GMT
            Not After : Jun  8 13:00:41 2026 GMT
        Subject: CN=9174a15e-f979-4ac3-87c5-fba2e352f743
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:2e:eb:f1:07:87:9a:07:ff:ea:b3:c2:d0:92:
                    ff:67:c2:21:8d:98:92:25:49:b3:69:b8:38:fe:b3:
                    d6:97:a9:ae:af:da:ee:de:5d:67:c1:3f:bc:0f:55:
                    d5:98:da:e4:05:e0:8e:b4:50:22:42:60:51:b7:37:
                    d5:39:0b:1d:19:09:f1:27:d8:8d:78:be:61:9b:97:
                    5b:9b:e7:84:c9:4b:38:79:b8:f8:0c:b5:9c:7e:21:
                    b9:c2:c0:d2:77:68:63:33:03:3b:90:09:b6:3e:af:
                    81:81:2e:95:a4:5a:2c:dc:5c:8c:93:e6:ec:38:64:
                    03:b5:c6:7f:73:f4:6f:2c:39:a5:e5:67:bb:34:89:
                    13:3f:13:98:9f:56:5b:fe:27:e7:99:cb:8e:9d:3f:
                    8b:c9:0e:ee:5c:64:74:21:49:12:da:e9:7e:9a:48:
                    3e:8f:45:52:f2:1e:aa:97:c6:13:23:8f:44:bd:b9:
                    fa:64:10:0c:7b:e9:e9:a1:d0:fb:29:88:dd:54:a0:
                    e8:de:9e:0e:97:2c:d8:0d:df:22:ee:5d:ce:de:28:
                    58:01:43:6b:5e:ff:18:09:4b:c9:55:db:95:ce:42:
                    55:ce:86:7c:5d:21:85:95:d1:5a:4a:57:a3:fa:f9:
                    94:a4:f1:4b:31:d2:43:b6:b7:35:e5:76:b5:2e:fe:
                    c3:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:9C:AF:D8:F8:11:D9:83:2D:82:48:F1:F3:A2:00:A0:AC:76:9D:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/352d2a14-7375-334b-9c60-edebec362279.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.crl

            X509v3 Authority Key Identifier:
                keyid:3F:7D:35:DE:A5:6C:DA:0E:EC:6F:18:6E:11:03:BC:6C:87:D6:D3:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.253.67.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:4b:c6:e3:02:fb:3d:e6:b4:60:3b:ea:63:83:e1:eb:27:97:
         0a:72:38:8f:ca:b9:96:e9:7d:7b:cf:c9:c1:1d:49:c0:f7:31:
         16:f2:2e:bb:6e:67:ba:32:7c:7e:5b:ed:94:67:3f:42:f9:b5:
         b8:47:3a:41:e6:d5:61:54:a5:8d:49:0d:46:cb:fb:07:8f:1a:
         c5:dd:9c:59:24:35:89:81:2c:41:0f:e4:38:5b:07:33:55:62:
         9f:fb:af:af:4c:d7:aa:83:62:68:ff:0f:87:95:33:ca:4a:08:
         43:cd:f1:1d:6a:fb:54:1b:16:fb:80:ec:fc:61:80:eb:68:e1:
         43:6f:f3:7c:a9:90:8d:87:38:04:d6:aa:eb:04:7d:57:6a:b1:
         c6:be:21:9c:10:a3:c6:de:52:f2:18:ec:be:64:9f:ef:2a:b4:
         4c:88:a7:05:a3:d6:09:76:45:d6:a6:d0:0b:29:02:84:6b:b2:
         c5:c9:c9:5a:14:a5:5a:54:9c:5f:64:62:7a:d0:03:ea:79:1a:
         58:84:b4:94:c6:35:c3:59:5d:f8:2e:fa:65:4b:86:66:60:40:
         a3:98:8f:4e:59:f7:e4:49:cb:9f:cd:2e:d6:9e:92:fe:5f:74:
         ab:2f:1e:1f:41:4b:f6:d3:24:85:af:12:d1:e6:15:b0:39:34:
         17:40:31:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 18:54:07 2026 by rpki-client