Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/af1bdc93-eb50-36ac-b702-f79bcfc84339.roa
File:                     af1bdc93-eb50-36ac-b702-f79bcfc84339.roa (raw, json)
Hash identifier:          acatevTvg4lRbtU2Ahqo+aFNaSl0uzVHs6AjUr0mqN8=
Subject key identifier:   B5:FD:D4:13:2A:36:15:11:37:C6:AB:5B:CC:D5:35:27:81:40:A6:71
Certificate issuer:       /CN=3bf2109e-61f7-446d-8833-c7bd1c35ea08
Certificate serial:       010D0C9F4328584CDFEA642DA46F6B226D7F9B38
Authority key identifier: 7F:05:48:53:91:7D:90:BB:7C:0D:52:B3:50:23:42:8D:7D:70:E7:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/af1bdc93-eb50-36ac-b702-f79bcfc84339.roa
Signing time:             Sun 15 Feb 2026 20:12:10 +0000
ROA not before:           Sun 15 Feb 2026 20:12:10 +0000
ROA not after:            Sat 16 May 2026 19:12:10 +0000
asID:                     202736
IP address blocks:        207.180.30.0/24 maxlen: 24
                          207.180.56.0/24 maxlen: 24
                          207.180.59.0/24 maxlen: 24
                          207.180.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/3bf2109e-61f7-446d-8833-c7bd1c35ea08.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/3bf2109e-61f7-446d-8833-c7bd1c35ea08.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:df:ea:64:2d:a4:6f:6b:22:6d:7f:9b:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3bf2109e-61f7-446d-8833-c7bd1c35ea08
        Validity
            Not Before: Feb 15 20:12:10 2026 GMT
            Not After : May 16 19:12:10 2026 GMT
        Subject: CN=114544fd-be4f-47bf-9f28-36fd8ab35df6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:7d:b7:6a:c0:5c:b4:48:fe:a7:9f:2c:8c:4d:
                    52:ea:c9:01:d5:4c:a1:2e:dd:32:fe:2e:c0:54:33:
                    b7:03:fe:b4:86:ce:ef:87:08:86:75:13:a6:b2:19:
                    de:f4:dc:c7:88:9d:e5:d6:36:f6:43:57:98:24:d6:
                    a4:e1:67:02:55:bf:78:df:df:96:8d:78:82:f2:27:
                    18:b4:c9:0e:21:68:d4:32:f0:be:c0:4d:a3:36:c7:
                    13:dd:ab:88:65:a2:da:bb:88:ba:11:f9:1c:36:30:
                    ef:2d:5d:0d:89:36:ef:37:10:71:cf:b9:c1:73:82:
                    68:08:89:de:f6:92:c6:e9:a7:2d:ca:d2:75:30:ec:
                    f5:0e:1a:53:35:a4:db:af:51:e5:b4:fa:f3:2b:8c:
                    bb:e4:f0:fb:4b:fa:84:90:ce:2c:92:49:a6:47:be:
                    db:da:43:87:fd:ac:8c:38:24:e2:60:05:30:ca:39:
                    e7:b2:7b:16:19:9e:33:81:b1:5e:9c:c9:1b:04:ed:
                    79:91:26:e9:0b:48:97:50:39:e4:11:6a:da:03:0a:
                    75:5f:87:7c:a1:f7:bc:01:ff:cd:84:87:5d:38:2e:
                    80:d8:c8:1c:ca:a1:2b:80:0a:a9:c7:84:7f:92:9a:
                    47:0f:9e:ae:a9:13:93:d6:a4:ea:f4:bb:27:16:49:
                    19:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:FD:D4:13:2A:36:15:11:37:C6:AB:5B:CC:D5:35:27:81:40:A6:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/af1bdc93-eb50-36ac-b702-f79bcfc84339.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/3bf2109e-61f7-446d-8833-c7bd1c35ea08.crl

            X509v3 Authority Key Identifier:
                keyid:7F:05:48:53:91:7D:90:BB:7C:0D:52:B3:50:23:42:8D:7D:70:E7:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.180.30.0/24
                  207.180.56.0/24
                  207.180.59.0/24
                  207.180.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:4e:a0:56:c8:94:6e:f3:d5:87:2e:b2:94:b7:e6:7b:5f:1c:
         cd:23:b2:46:fb:40:d5:e0:e8:71:29:d8:90:b2:60:fc:6e:d7:
         9e:1d:5a:1f:cc:9a:35:6c:ab:b6:1d:2c:c0:a5:be:0b:f2:7e:
         85:92:84:d9:b2:ea:0b:ce:10:c5:5f:4e:78:d6:1e:2c:d4:01:
         cd:f1:02:7f:ae:91:c1:80:3b:1f:ad:0e:78:e1:98:be:a8:c0:
         5a:d5:47:e1:6f:1a:3b:2e:bf:08:97:f3:70:98:fb:92:16:68:
         23:41:2d:8a:03:04:79:67:a1:10:77:13:6a:77:bb:ec:22:78:
         23:dd:bc:c6:82:69:a5:66:cb:0a:2d:e7:d4:b7:63:39:fa:19:
         cd:0d:b5:7e:d8:9f:5f:c6:11:0d:07:94:64:98:91:c8:f0:6e:
         e6:68:83:2c:80:da:18:1d:02:ec:22:76:c4:bd:7c:5f:06:6b:
         8c:3b:aa:72:48:41:b5:74:16:32:50:a5:6a:58:6f:d4:7f:a4:
         57:2e:95:a6:56:a6:8a:48:37:2d:f5:ab:8c:b9:7e:26:97:26:
         37:84:14:12:f2:e5:0a:39:c5:29:6e:ce:c9:70:d8:4f:30:92:
         b7:2e:a8:54:66:a0:95:3f:a6:e4:fd:cf:c2:64:fc:3c:83:e1:
         6e:e5:da:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 15:35:43 2026 by rpki-client