Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/983895e8-df06-3f3d-8231-7833f18cfb0e.roa
File:                     983895e8-df06-3f3d-8231-7833f18cfb0e.roa (raw, json)
Hash identifier:          qpx/aIwqv00/8qofQUksDHAk8QiL8jSRYE0GuZpBo7A=
Subject key identifier:   B6:4F:6D:BA:CC:34:AE:66:03:4C:8F:46:25:CA:0C:11:9F:28:89:9C
Certificate issuer:       /CN=cc0eb2de-e5e8-4108-870e-8cbbff39885d
Certificate serial:       010D0C9F4328584D6450756F3A90664D087DA550
Authority key identifier: 6C:28:11:4B:C2:E3:4A:9C:81:97:DA:33:48:7B:1E:AF:4E:77:F4:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/983895e8-df06-3f3d-8231-7833f18cfb0e.roa
Signing time:             Sat 04 Apr 2026 06:24:31 +0000
ROA not before:           Sat 04 Apr 2026 06:24:31 +0000
ROA not after:            Fri 03 Jul 2026 06:24:31 +0000
asID:                     153371
IP address blocks:        207.174.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/cc0eb2de-e5e8-4108-870e-8cbbff39885d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/cc0eb2de-e5e8-4108-870e-8cbbff39885d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:64:50:75:6f:3a:90:66:4d:08:7d:a5:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc0eb2de-e5e8-4108-870e-8cbbff39885d
        Validity
            Not Before: Apr  4 06:24:31 2026 GMT
            Not After : Jul  3 06:24:31 2026 GMT
        Subject: CN=c11ea47a-e6e2-45db-ad93-2a83708e9c29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:9e:03:f9:40:c5:14:0f:00:3d:33:c5:f6:87:
                    b0:a6:39:05:01:d6:f0:bd:49:27:9d:67:02:13:ab:
                    fc:85:3a:ae:d0:6a:9e:54:09:2b:45:e1:db:f1:2c:
                    c8:14:71:ac:60:41:4f:c5:a5:5b:c8:8e:8d:cc:25:
                    a5:8d:e9:92:4c:14:cc:95:30:ae:78:38:8a:be:a4:
                    ca:4f:b5:d6:0e:2c:2a:68:59:01:00:fb:95:19:ca:
                    ec:da:c1:9a:07:d1:00:6e:a6:42:9c:ac:c1:64:5e:
                    9a:16:f2:14:f8:f4:2f:c7:03:2c:3c:7c:19:87:5b:
                    0e:c3:e3:28:42:d2:9f:77:6d:ab:08:ba:5f:b3:94:
                    ca:ac:f5:21:b5:4e:e6:50:8a:56:5f:d6:54:e8:30:
                    80:2a:e1:89:72:5f:8a:a5:62:f1:ed:d5:7a:3a:4e:
                    28:6e:27:61:8d:a1:be:00:0a:45:04:c8:c1:ae:e4:
                    54:09:43:68:bc:fd:1a:80:6f:9d:f3:ce:c9:25:93:
                    f6:a3:4a:da:7a:cf:d8:a8:a1:b9:70:1d:c4:16:2d:
                    fc:77:55:c3:28:b2:f9:c6:d1:10:5a:13:62:30:12:
                    d7:36:0b:9a:a2:32:ed:4c:95:f0:38:0e:ae:61:ae:
                    8f:d1:42:c6:18:11:af:0f:c0:99:15:c3:62:b4:b4:
                    16:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:4F:6D:BA:CC:34:AE:66:03:4C:8F:46:25:CA:0C:11:9F:28:89:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/983895e8-df06-3f3d-8231-7833f18cfb0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/cc0eb2de-e5e8-4108-870e-8cbbff39885d.crl

            X509v3 Authority Key Identifier:
                keyid:6C:28:11:4B:C2:E3:4A:9C:81:97:DA:33:48:7B:1E:AF:4E:77:F4:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.174.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:22:10:a7:11:6e:8f:0c:6b:78:99:0c:4f:42:40:3a:e3:c3:
         fc:aa:86:93:a8:5c:c5:1d:b1:38:81:69:7b:b9:8c:45:de:18:
         af:16:30:f6:f4:21:45:ed:fd:01:f7:05:b6:f0:6f:5b:27:f9:
         59:fb:4f:3a:d6:02:95:a2:9a:f6:e2:d8:e5:63:5e:86:7f:10:
         e5:86:cc:e6:11:b3:31:89:aa:e2:cc:98:5f:35:4a:19:47:39:
         5d:89:b0:4d:95:f4:60:37:d8:08:01:85:79:c2:19:36:7e:7f:
         fd:68:78:3f:c9:c9:13:f9:9f:07:97:a5:5f:10:e3:68:8c:18:
         c2:f0:01:4b:1c:93:a4:97:d9:e1:e6:ac:8e:18:89:49:50:00:
         66:ca:eb:ed:9e:49:d7:4b:c9:f0:1c:de:4b:23:72:a3:c2:4c:
         c2:f7:2c:a5:cb:e0:75:de:0b:fd:8c:c8:4b:2e:c8:b2:b1:d9:
         c4:97:86:a1:a3:a7:2b:1c:49:9d:d7:be:e5:7c:d2:d8:a2:0b:
         05:50:50:05:b0:6c:e3:f4:14:35:13:41:52:5a:cc:e9:ad:5e:
         e6:96:ed:13:e9:5c:08:56:17:85:53:f0:94:73:a7:a0:27:1f:
         82:7c:2f:4b:c8:be:c8:3d:e1:5b:6f:d7:c2:66:9a:94:20:dc:
         00:7a:02:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:06:18 2026 by rpki-client