Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15/353f216d-9b24-3f3a-b26c-686bbb880989.roa
File:                     353f216d-9b24-3f3a-b26c-686bbb880989.roa (raw, json)
Hash identifier:          ow6/sV6gBLCTIrhDG0jZxGonXVz2WGz8iu/g2+l50fU=
Subject key identifier:   38:DE:F9:D1:44:5C:BB:C4:55:E1:DE:AF:E1:10:DE:41:F3:03:8E:1C
Certificate issuer:       /CN=e286fd28-0939-48b9-86ba-cbe791497d15
Certificate serial:       010D0C9F4328584D9E500849C4358FFD87885780
Authority key identifier: 1A:A4:9C:18:83:7A:8A:F6:9B:C9:28:DF:33:44:30:F2:DD:71:0E:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15/353f216d-9b24-3f3a-b26c-686bbb880989.roa
Signing time:             Sat 25 Apr 2026 01:00:24 +0000
ROA not before:           Sat 25 Apr 2026 01:00:24 +0000
ROA not after:            Fri 24 Jul 2026 01:00:24 +0000
asID:                     14618
IP address blocks:        207.2.117.0/24 maxlen: 24
                          207.2.118.0/24 maxlen: 24
                          207.2.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15/e286fd28-0939-48b9-86ba-cbe791497d15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15/e286fd28-0939-48b9-86ba-cbe791497d15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 01 May 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9e:50:08:49:c4:35:8f:fd:87:88:57:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e286fd28-0939-48b9-86ba-cbe791497d15
        Validity
            Not Before: Apr 25 01:00:24 2026 GMT
            Not After : Jul 24 01:00:24 2026 GMT
        Subject: CN=847978ab-634b-4afd-b131-b86860dc97ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:de:bb:36:1c:bb:6c:0e:eb:86:7f:f1:1a:82:
                    05:5e:f8:10:13:f0:28:00:b9:e4:f1:a4:29:4f:17:
                    fb:bd:b9:46:4e:e1:f7:3b:80:4d:84:01:b0:61:46:
                    b9:b6:90:9d:47:bd:01:18:d4:bf:8b:dc:d6:66:7b:
                    cd:c4:96:81:da:df:9d:53:ea:9e:46:11:67:31:6b:
                    26:f5:e8:9f:3b:b5:d7:1a:5b:1a:02:dd:78:64:6d:
                    dc:cf:69:f9:f8:2c:b5:ac:b0:05:f8:0a:45:fd:d5:
                    a8:21:80:18:55:25:da:0b:56:fc:a1:9f:ec:c5:29:
                    57:28:69:5d:b9:ae:58:21:07:8b:9f:50:51:f3:b4:
                    a7:0c:01:aa:25:12:c5:15:dd:b8:9a:16:df:b9:84:
                    79:aa:cd:65:a7:4c:0f:0f:c0:e2:b1:be:02:be:47:
                    fd:8a:bb:eb:a6:6c:c2:26:47:dc:3a:3e:72:52:86:
                    ce:fd:a0:67:b8:8a:5d:41:06:3c:d4:35:95:fe:74:
                    eb:5a:9a:59:21:b8:be:45:bd:21:b0:18:56:f2:6d:
                    ab:0d:1c:8c:c4:9a:27:c7:0b:e4:b2:b6:ba:ec:53:
                    bf:dd:fd:05:a5:fe:18:20:8f:35:a1:f2:46:3d:1b:
                    60:11:d6:aa:b4:00:9e:77:ac:34:8e:62:b9:31:85:
                    05:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:DE:F9:D1:44:5C:BB:C4:55:E1:DE:AF:E1:10:DE:41:F3:03:8E:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15/353f216d-9b24-3f3a-b26c-686bbb880989.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15/e286fd28-0939-48b9-86ba-cbe791497d15.crl

            X509v3 Authority Key Identifier:
                keyid:1A:A4:9C:18:83:7A:8A:F6:9B:C9:28:DF:33:44:30:F2:DD:71:0E:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.2.117.0-207.2.119.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:85:45:ca:a5:ed:81:22:b8:08:17:d9:e1:66:21:7b:ac:b6:
         1f:ca:ef:14:4b:ca:56:20:07:c5:66:cd:58:f9:94:8c:18:1e:
         06:46:fe:d7:c3:28:83:fe:fa:ac:e9:6b:ed:b7:8e:04:3b:0a:
         41:b6:e3:56:2a:02:4b:ee:44:d2:0d:d5:cf:1f:46:db:12:f8:
         13:44:13:f3:d7:fa:13:83:51:4b:d3:54:26:cb:7e:8b:80:f1:
         02:7f:8e:a6:10:27:69:bc:eb:6c:44:e1:db:7e:0c:23:24:67:
         13:4b:46:f3:3e:82:57:eb:b9:23:08:95:86:6b:14:61:c6:ab:
         23:d2:a4:20:98:46:fb:97:49:bf:c8:62:c0:c9:54:1d:4c:85:
         89:71:a4:6d:81:71:5e:9b:74:28:af:30:fa:27:44:22:8f:d4:
         c9:76:be:b6:bd:8c:fa:56:6f:dc:f9:08:c4:67:28:1f:be:69:
         69:35:91:60:fa:11:24:5e:48:9c:7d:c5:db:28:5d:db:6c:6b:
         59:0b:c9:ea:67:4f:16:70:57:49:d7:ac:84:1d:e6:b8:6f:8f:
         2e:91:ab:15:a9:8a:bc:84:6a:2a:b7:78:93:e7:c7:57:3c:be:
         96:63:7d:23:36:e2:c9:9f:d2:e4:44:de:9b:b2:62:db:64:55:
         aa:d4:d7:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 12:21:26 2026 by rpki-client