Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/19061c41-5891-3f97-9d63-54bcf39601e6.roa
File:                     19061c41-5891-3f97-9d63-54bcf39601e6.roa (raw, json)
Hash identifier:          /NAHGIZp2dBuY0xhPTpjxTWDNbcxEyedyEmNeyURj/k=
Subject key identifier:   3B:E3:DC:97:0B:76:46:F5:53:B3:85:CF:88:A9:9A:AE:DC:07:22:25
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584D2BDA3C413FBF2E3F71D61740
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/19061c41-5891-3f97-9d63-54bcf39601e6.roa
Signing time:             Sun 15 Mar 2026 01:00:32 +0000
ROA not before:           Sun 15 Mar 2026 01:00:32 +0000
ROA not after:            Sat 13 Jun 2026 01:00:32 +0000
asID:                     8070
IP address blocks:        170.85.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:2b:da:3c:41:3f:bf:2e:3f:71:d6:17:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Mar 15 01:00:32 2026 GMT
            Not After : Jun 13 01:00:32 2026 GMT
        Subject: CN=0773f8f0-e2b3-4188-8b96-48713c1fc183
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e5:ca:ff:c5:82:c7:24:89:ab:90:40:3d:49:
                    ec:11:0a:71:71:d3:2d:ae:78:63:cc:13:64:10:2d:
                    43:99:13:60:fb:1d:b9:d1:18:bf:02:c8:24:40:ac:
                    1c:62:12:e7:7b:b4:28:37:af:f8:c3:f5:18:af:b2:
                    81:59:9b:86:9c:56:b6:41:11:e7:7b:d2:2b:cc:f7:
                    3a:ad:99:23:36:5a:a3:c0:b2:e3:fc:00:4e:c6:7f:
                    92:f7:b9:9d:f4:a3:17:d5:d1:2c:d0:62:85:a1:9c:
                    4e:fc:18:63:6a:1d:26:e7:4b:3a:f9:a5:cb:37:01:
                    8f:8f:0c:2f:e0:83:b8:a4:bb:f8:66:73:de:19:36:
                    b4:f5:23:53:d4:65:ec:d6:e9:ef:22:19:f1:2e:b8:
                    7f:03:93:8a:3c:8d:81:60:1f:4d:29:04:a0:00:61:
                    1e:45:51:ca:42:a9:47:cc:eb:fd:1a:a7:7a:fa:6a:
                    50:91:4d:35:af:8d:85:56:19:e7:aa:70:96:3e:36:
                    2d:87:97:75:1a:cd:18:98:92:20:07:c3:9f:bb:ed:
                    a3:39:e6:e9:aa:fb:da:e0:ff:76:fc:05:f1:e3:b8:
                    db:2a:fd:67:44:5a:18:24:e6:a7:1f:16:46:db:fc:
                    cb:57:7c:39:07:9b:2b:98:bb:ae:9b:43:99:f6:1b:
                    dc:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:E3:DC:97:0B:76:46:F5:53:B3:85:CF:88:A9:9A:AE:DC:07:22:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/19061c41-5891-3f97-9d63-54bcf39601e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.85.197.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:08:f3:73:78:20:17:de:0b:ac:04:33:3a:ee:ef:0d:ee:02:
         5d:7a:29:7d:30:64:66:26:79:3d:b6:2a:38:59:1a:2b:ca:df:
         70:04:a4:c4:d9:b6:fc:49:9c:7c:c0:b9:c1:eb:59:2e:6b:e7:
         43:d0:f8:a9:56:f2:5b:ae:5f:30:ed:e9:98:b3:40:ed:68:e8:
         f7:d4:4e:3b:d1:15:d0:4a:80:f2:07:0b:78:b8:94:39:86:8e:
         94:62:48:50:90:1c:9d:1c:a4:b6:b4:c5:cd:ff:41:bd:10:33:
         1c:ea:e1:91:b9:25:92:52:35:65:e8:1f:2a:e8:23:f9:9b:7e:
         96:c7:8b:59:e5:21:68:0e:e0:ec:1c:dc:fe:94:75:3d:5b:9b:
         2c:b9:6d:ab:a2:56:9d:0c:c5:2e:49:5e:33:94:a8:20:b1:0c:
         ad:a4:6b:ea:9d:da:82:f4:2d:78:11:25:7f:2c:6d:e8:50:24:
         35:a7:a7:88:ac:00:10:ab:90:c1:74:40:6f:98:de:85:c4:c9:
         58:9d:72:b1:a3:16:f9:de:8c:6d:ee:7e:a8:f7:aa:1d:02:6c:
         f9:15:0c:a7:ee:65:15:98:cd:cc:6f:66:4c:a2:e6:ad:a9:a7:
         f8:f6:40:87:4b:c1:07:42:86:1e:aa:af:05:38:9b:08:99:d7:
         de:9a:5c:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:29:29 2026 by rpki-client