Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/46ab1af1-a77c-32bc-ad68-faa4060a7937.roa
File:                     46ab1af1-a77c-32bc-ad68-faa4060a7937.roa (raw, json)
Hash identifier:          6FdqF3G8UbXFWYz6tfXjTGvXUJ+K97uX3EIVxFhOtbA=
Subject key identifier:   5C:93:65:68:FC:56:2F:B1:EA:18:78:B7:00:76:54:2B:22:3F:E5:0B
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584D1B19F2320EA38529974AB080
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/46ab1af1-a77c-32bc-ad68-faa4060a7937.roa
Signing time:             Mon 09 Mar 2026 01:00:32 +0000
ROA not before:           Mon 09 Mar 2026 01:00:32 +0000
ROA not after:            Sun 07 Jun 2026 01:00:32 +0000
asID:                     32043
IP address blocks:        173.213.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 11 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1b:19:f2:32:0e:a3:85:29:97:4a:b0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Mar  9 01:00:32 2026 GMT
            Not After : Jun  7 01:00:32 2026 GMT
        Subject: CN=e4b9af4a-5e57-4f25-b9d9-9151ceda04f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:e6:7f:ab:71:fb:44:5f:7c:f5:dd:50:eb:4e:
                    99:ed:79:90:74:44:d3:81:5a:84:03:0f:2b:bf:89:
                    f2:65:12:fa:bc:27:20:83:fb:fe:f4:e2:8d:e8:34:
                    10:9a:8d:c9:1f:c4:af:35:ae:a9:45:30:4e:74:d5:
                    9b:b5:70:66:eb:92:34:16:e9:f8:e6:9a:c7:bb:7d:
                    90:49:10:f6:84:36:b6:f3:a9:6e:32:d1:25:d3:14:
                    67:78:21:32:f7:25:00:03:d8:e6:4a:47:6b:ae:d1:
                    d1:e2:2d:b0:11:a8:44:9e:d1:49:25:f4:0c:93:40:
                    67:3f:91:74:8d:54:92:70:18:0f:78:d8:a9:04:f0:
                    d0:eb:9e:0f:91:c4:1c:07:51:75:1c:40:64:92:08:
                    3b:db:2a:fe:b5:29:15:f2:0b:1b:0d:a5:31:9d:c5:
                    d5:38:c6:7f:0b:54:70:fc:f3:ef:21:4e:fa:81:27:
                    0b:47:3b:eb:f5:3f:89:3e:1d:a7:b2:b0:52:05:02:
                    01:72:ee:72:3b:98:32:4f:aa:a9:94:cd:6c:f2:68:
                    45:a8:ea:e2:2f:7a:38:1b:b5:59:d9:e9:b9:c7:3f:
                    db:81:77:c5:b7:d1:bf:0e:ac:c0:d1:b8:0c:37:99:
                    7d:48:bb:44:d5:b6:f0:e0:71:0f:e9:90:d0:18:16:
                    c6:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:93:65:68:FC:56:2F:B1:EA:18:78:B7:00:76:54:2B:22:3F:E5:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/46ab1af1-a77c-32bc-ad68-faa4060a7937.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.213.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:0b:7b:83:a7:36:8d:ef:82:4d:06:c3:d1:d4:6e:b9:41:f8:
         84:df:f3:7e:60:b2:9e:85:e4:41:35:f7:df:ba:65:7c:4d:08:
         cf:98:19:c9:a7:46:f0:7b:0c:9f:43:17:99:df:62:42:a4:77:
         65:33:8c:14:86:86:5c:e7:d0:e5:96:f7:50:3d:80:45:ba:86:
         2f:c3:dc:0c:04:1f:27:b4:28:d8:7a:19:1a:98:86:86:4f:46:
         7e:78:38:91:f8:71:c4:b0:91:b5:7f:7c:19:a0:99:70:e3:d9:
         bd:c4:ae:f8:45:f7:fc:2d:9b:a4:70:76:10:88:64:7d:a2:12:
         99:47:4f:17:3b:94:db:aa:75:09:fd:a3:06:5b:57:04:5d:d6:
         61:15:5a:db:1e:5a:f8:dd:34:0d:bf:4f:23:c7:cc:df:48:a8:
         14:18:10:6b:9d:18:04:0c:b5:ab:29:ba:a3:2e:df:79:33:d4:
         94:90:e6:5f:3b:c3:d7:09:f1:e6:a5:97:84:ec:46:a8:ec:6f:
         90:02:8c:42:8d:01:b2:72:95:95:aa:28:c1:59:09:a8:4b:a8:
         8c:b2:98:6a:7a:b1:3b:68:9e:d1:ff:15:57:9a:34:71:4c:33:
         92:01:d4:cc:1a:15:18:dd:33:06:e9:63:3c:e0:00:4d:21:d3:
         e5:6e:e8:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 10 11:59:52 2026 by rpki-client