Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0153231e-bade-4c05-b3fd-55b65671daae/f24baf14-ab29-3ee1-a215-e6a76a61088f.roa
File:                     f24baf14-ab29-3ee1-a215-e6a76a61088f.roa (raw, json)
Hash identifier:          n/wzc0KBC1wnaMQx3YZthUgfomwyKLpkg7xyO1qz1vc=
Subject key identifier:   82:DA:32:CF:90:A4:36:3B:2E:D5:F6:F4:2C:D8:B9:2C:73:45:02:78
Certificate issuer:       /CN=0153231e-bade-4c05-b3fd-55b65671daae
Certificate serial:       010D0C9F4328584D359FBD86A74C57C735204D00
Authority key identifier: B9:A6:5D:CA:07:55:7E:11:15:64:29:15:E9:88:AC:27:C6:71:22:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0153231e-bade-4c05-b3fd-55b65671daae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0153231e-bade-4c05-b3fd-55b65671daae/f24baf14-ab29-3ee1-a215-e6a76a61088f.roa
Signing time:             Wed 18 Mar 2026 13:00:40 +0000
ROA not before:           Wed 18 Mar 2026 13:00:40 +0000
ROA not after:            Tue 16 Jun 2026 13:00:40 +0000
asID:                     395153
IP address blocks:        107.182.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0153231e-bade-4c05-b3fd-55b65671daae/0153231e-bade-4c05-b3fd-55b65671daae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0153231e-bade-4c05-b3fd-55b65671daae/0153231e-bade-4c05-b3fd-55b65671daae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0153231e-bade-4c05-b3fd-55b65671daae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:35:9f:bd:86:a7:4c:57:c7:35:20:4d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0153231e-bade-4c05-b3fd-55b65671daae
        Validity
            Not Before: Mar 18 13:00:40 2026 GMT
            Not After : Jun 16 13:00:40 2026 GMT
        Subject: CN=8108aaf6-1ffe-4ad9-8581-3f9e83b718c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:6a:38:a9:e5:f7:4f:25:b5:90:7b:be:b6:6f:
                    43:ea:7b:bd:e9:05:8b:b9:93:6c:2c:c9:b6:3b:00:
                    44:9a:83:9f:c0:2e:51:f2:59:0e:4f:8f:0c:0a:6b:
                    e5:2b:03:4f:30:34:ce:47:d8:44:98:a0:91:0d:b6:
                    8e:fe:6e:62:2f:8c:87:7f:f0:85:74:ef:63:20:1b:
                    65:67:14:7b:e6:aa:05:37:89:31:5a:4c:20:b7:41:
                    62:63:b5:de:df:3e:3f:47:aa:92:7e:fe:ec:65:c7:
                    0e:9c:8e:8e:e2:8a:a5:92:bc:cd:37:e4:cf:ef:08:
                    7c:a6:60:d7:14:8b:91:95:7f:97:df:9a:4a:bc:8c:
                    e0:1e:c3:67:8f:a5:9d:08:d8:59:24:ab:d5:16:b9:
                    a8:c6:58:e4:9d:c6:b6:1c:e6:a5:bc:6a:4b:89:81:
                    ba:50:c1:64:d4:bf:bf:ef:c0:8f:26:cb:9b:59:6e:
                    06:f2:18:07:d4:87:8d:38:66:a2:23:2a:4e:81:b0:
                    e5:1a:83:20:b2:20:a2:e7:3e:be:de:e6:eb:49:4b:
                    2e:d3:8c:fe:5c:3b:e4:85:57:7c:06:24:09:94:52:
                    c2:64:e3:31:7b:49:08:7e:91:e2:5f:ff:f7:de:21:
                    be:9f:58:c1:12:a7:30:bd:cd:40:97:e3:32:16:0e:
                    23:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:DA:32:CF:90:A4:36:3B:2E:D5:F6:F4:2C:D8:B9:2C:73:45:02:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0153231e-bade-4c05-b3fd-55b65671daae/f24baf14-ab29-3ee1-a215-e6a76a61088f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0153231e-bade-4c05-b3fd-55b65671daae/0153231e-bade-4c05-b3fd-55b65671daae.crl

            X509v3 Authority Key Identifier:
                keyid:B9:A6:5D:CA:07:55:7E:11:15:64:29:15:E9:88:AC:27:C6:71:22:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0153231e-bade-4c05-b3fd-55b65671daae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.182.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:5d:57:77:57:e9:45:4e:20:63:4a:2d:c7:6c:9a:bd:12:77:
         16:92:8c:65:16:e5:33:3e:fd:62:d8:6d:4f:6d:20:fc:91:ae:
         12:c2:68:80:59:b6:0b:33:fa:05:0e:70:00:83:c4:27:86:7f:
         c4:77:50:03:e9:95:83:4b:d9:88:4a:b5:fe:77:51:b3:e9:54:
         ea:82:ba:a3:66:a3:12:36:c3:29:81:c9:c3:93:15:12:c7:54:
         f5:1f:e4:9d:c4:fc:cb:71:43:01:a9:e8:09:a1:25:3b:0e:56:
         3c:7b:93:a5:3a:8b:18:b3:7d:74:80:44:df:34:0b:88:1d:14:
         43:0b:d3:69:19:37:e8:2e:34:1b:52:f5:75:4f:15:14:78:be:
         b0:57:f7:8d:f2:65:7e:65:dd:4e:e6:d5:c8:21:e4:cb:10:ee:
         97:03:1b:4b:01:26:e0:66:e3:51:31:6f:2a:88:b5:b2:f1:69:
         a9:76:1b:c2:62:19:53:2d:0c:42:e7:48:01:37:d8:0a:8d:de:
         ef:a1:4d:18:4f:95:ae:d3:e5:81:99:c2:b9:6c:13:16:50:be:
         5c:79:07:46:6e:37:63:c4:25:43:50:d9:37:5e:41:ca:5f:b4:
         82:50:85:6c:6f:ec:85:ee:96:85:13:17:fe:44:5c:55:b9:45:
         0c:05:e7:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:07:14 2026 by rpki-client