Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/3b1ea8e5-56ae-388d-82be-349a81e2e6df.roa
File:                     3b1ea8e5-56ae-388d-82be-349a81e2e6df.roa (raw, json)
Hash identifier:          xq76d/TGfmGdCUUBtEJHZM7yBJN9P29+zK9fG5eNT+M=
Subject key identifier:   AC:87:3E:C5:6E:FB:CD:A5:DD:66:26:A2:EC:DF:D5:A8:94:5F:63:BF
Certificate issuer:       /CN=63817736-7e5e-4740-8ee1-ac6f2317f08d
Certificate serial:       010D0C9F4328584D0C7DDE7D8D432B370F3F4E80
Authority key identifier: B5:F4:FF:81:CB:E0:A0:26:F5:12:35:A7:B3:44:73:D0:89:4F:FC:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/3b1ea8e5-56ae-388d-82be-349a81e2e6df.roa
Signing time:             Tue 03 Mar 2026 19:24:53 +0000
ROA not before:           Tue 03 Mar 2026 19:24:53 +0000
ROA not after:            Mon 01 Jun 2026 18:24:53 +0000
asID:                     46407
IP address blocks:        173.199.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/63817736-7e5e-4740-8ee1-ac6f2317f08d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/63817736-7e5e-4740-8ee1-ac6f2317f08d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0c:7d:de:7d:8d:43:2b:37:0f:3f:4e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63817736-7e5e-4740-8ee1-ac6f2317f08d
        Validity
            Not Before: Mar  3 19:24:53 2026 GMT
            Not After : Jun  1 18:24:53 2026 GMT
        Subject: CN=08e5ce07-0cc2-4317-a6d8-81fa8c6f0bf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:85:b7:1a:17:18:be:61:e0:90:74:f5:09:ce:
                    52:59:4c:5e:16:d5:59:f0:e9:84:d3:34:a9:72:f4:
                    63:cf:00:b1:a6:4c:4e:f2:2b:52:98:4e:cf:95:e5:
                    8b:f1:b2:14:b9:c9:a1:4d:74:31:fe:80:1b:29:e0:
                    f8:02:c4:fe:4c:64:30:77:52:db:17:40:e2:d5:7d:
                    cc:23:6c:b0:0d:35:1f:6e:6d:8f:8d:54:bd:fc:8d:
                    02:a7:ec:f1:e5:05:af:63:b8:82:04:04:c7:60:7e:
                    02:e4:86:6a:5b:87:e4:e5:52:83:e4:e0:fc:cd:09:
                    bc:22:22:c8:e4:02:d2:c1:5c:e6:38:0e:86:75:1e:
                    b8:9f:87:05:42:79:9f:e9:22:74:31:e4:ff:97:54:
                    90:6f:84:83:8f:e6:67:00:d9:f9:04:6d:52:4f:24:
                    80:26:f0:58:2b:1e:6f:7b:22:c1:f4:d9:65:50:79:
                    8f:fe:97:d3:c2:16:a3:69:26:4f:92:7c:10:4c:7c:
                    cf:4c:05:5e:4d:8a:e0:91:8f:9f:d9:94:36:ff:9a:
                    bc:96:92:88:fa:53:ba:64:44:68:6e:43:d4:8a:2f:
                    76:22:b7:ab:ce:7f:2e:63:72:f7:a5:ab:76:2e:f7:
                    2f:d5:c4:50:c2:a0:ff:30:bc:75:7c:e0:41:ea:ea:
                    11:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:87:3E:C5:6E:FB:CD:A5:DD:66:26:A2:EC:DF:D5:A8:94:5F:63:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/3b1ea8e5-56ae-388d-82be-349a81e2e6df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/63817736-7e5e-4740-8ee1-ac6f2317f08d.crl

            X509v3 Authority Key Identifier:
                keyid:B5:F4:FF:81:CB:E0:A0:26:F5:12:35:A7:B3:44:73:D0:89:4F:FC:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.199.98.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:9d:7d:7b:0f:b4:9d:e3:6f:82:f0:26:e4:bc:bf:3c:70:a9:
         59:dc:a0:d9:da:a0:cf:1d:34:f6:cc:ad:78:8a:c6:a8:b3:79:
         3c:2d:69:70:71:ba:87:9e:21:00:20:c5:ae:01:22:2d:77:fa:
         a7:0e:1c:a0:57:a4:c9:c5:53:ed:8e:4e:3a:45:3c:a2:ec:1d:
         6d:d2:5b:da:68:89:da:bb:70:bc:61:a8:9e:cb:bd:60:d8:5a:
         4e:71:88:9e:48:80:dd:78:74:13:20:71:4b:bd:81:41:56:20:
         b0:97:16:bc:1f:38:5d:fa:11:c1:29:e3:c9:48:b4:90:b4:63:
         d4:ea:3b:3b:bf:dc:bd:e6:ad:06:bc:2a:f8:59:89:48:43:07:
         7e:b8:17:0b:aa:fb:6e:7d:87:ac:de:4c:1c:b6:55:72:24:28:
         d5:be:6a:2e:28:27:4a:51:3c:8e:fd:f9:27:03:be:43:03:27:
         c9:da:cb:cb:49:8c:83:e4:35:b1:16:9d:79:ad:0e:03:80:46:
         a5:93:85:d3:a5:11:91:ae:2c:33:e5:3a:25:b6:a9:2e:a6:e5:
         15:0c:e6:d6:16:95:98:92:6a:d2:b4:03:3f:3a:c5:8c:03:86:
         15:4c:ae:31:09:d8:03:c4:42:1f:3f:c4:bd:19:84:4b:86:34:
         54:7b:49:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:53:18 2026 by rpki-client