Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/70365dde-34c9-3e80-8bae-bc5a44113469.roa
File:                     70365dde-34c9-3e80-8bae-bc5a44113469.roa (raw, json)
Hash identifier:          DJTqodX9wVNxzqMo8Yj4fBkoZnXAD4roXQo85GeMVGk=
Subject key identifier:   77:AE:26:79:8B:1F:B0:11:A4:69:39:50:E7:BE:48:2B:92:97:9A:04
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584D2532CB6C87A78603CC07E780
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/70365dde-34c9-3e80-8bae-bc5a44113469.roa
Signing time:             Thu 12 Mar 2026 15:48:50 +0000
ROA not before:           Thu 12 Mar 2026 15:48:50 +0000
ROA not after:            Wed 10 Jun 2026 15:48:50 +0000
asID:                     21859
IP address blocks:        168.93.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:25:32:cb:6c:87:a7:86:03:cc:07:e7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Mar 12 15:48:50 2026 GMT
            Not After : Jun 10 15:48:50 2026 GMT
        Subject: CN=bc07ccbd-128f-425f-9663-8717490e8bb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c1:b5:3b:f3:d3:5b:d9:ea:f0:0d:79:b6:20:
                    ed:90:6e:77:90:1b:2f:11:6a:2d:27:8c:e3:0d:07:
                    d0:5d:cc:43:3c:35:9a:f3:f4:40:8c:7d:bd:72:9e:
                    8f:ed:5c:5e:d4:b2:a9:26:59:e1:c1:38:d3:ab:8f:
                    d9:8e:5a:e6:52:13:e5:46:aa:99:0b:ff:46:fc:c0:
                    fb:e9:23:a9:b1:bd:d3:e3:c2:85:76:5c:a3:bc:aa:
                    54:c5:74:b4:15:52:13:3d:aa:13:b4:44:06:ba:2e:
                    66:0e:27:5f:d2:ba:d0:0a:29:1d:ad:df:dd:9e:5d:
                    3f:ed:6f:10:df:25:f5:d5:9d:fa:82:e1:4e:81:56:
                    3d:d5:75:0f:71:1f:b6:41:fe:d5:51:5a:58:6c:f4:
                    e3:bd:cb:96:13:e3:8d:43:92:77:50:0b:d9:34:02:
                    73:4c:ba:19:82:5b:52:7e:49:68:02:dd:91:41:e2:
                    21:86:6c:89:85:ba:16:b1:38:61:eb:f3:b4:d6:bb:
                    a7:c8:6e:d5:28:cf:4a:9c:60:a4:5d:0d:5f:00:f4:
                    b2:1d:99:fc:06:9b:6a:61:37:7f:e6:a6:d5:fa:b3:
                    ff:bf:18:ec:39:70:5d:60:09:b9:64:75:81:60:93:
                    f2:09:78:8f:12:1d:e2:4b:d9:57:20:90:d8:ef:23:
                    15:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:AE:26:79:8B:1F:B0:11:A4:69:39:50:E7:BE:48:2B:92:97:9A:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/70365dde-34c9-3e80-8bae-bc5a44113469.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.93.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:6c:40:b6:97:d7:98:77:38:fe:26:ab:19:07:5c:54:81:25:
         aa:1a:03:4a:94:16:6c:7f:28:40:df:29:79:8a:b0:2a:e9:ae:
         15:8e:37:f6:e7:37:bd:d4:be:6d:17:f3:41:91:a1:4a:c6:03:
         e3:a5:cb:2c:b3:fa:b9:2c:2e:0f:5b:5c:65:36:41:8c:74:28:
         fa:69:83:20:30:ec:dc:82:d9:30:e1:84:84:09:cb:88:72:3d:
         4c:ab:3b:9f:0e:95:5f:76:06:db:d9:aa:12:34:cd:98:85:d3:
         79:c2:f1:9d:01:9b:76:83:b8:d5:ec:b4:ac:aa:29:02:40:9b:
         62:18:4d:3c:0d:3d:b7:20:28:dd:f8:f5:a4:10:d1:04:d3:45:
         cb:49:76:99:51:d6:c1:96:77:cb:74:25:57:32:33:9f:b8:a9:
         a3:f1:cd:06:34:44:0e:e6:c1:e2:1b:d1:1f:22:d9:97:b3:d5:
         0f:44:6b:a9:17:15:d2:0d:cd:2e:ef:0e:7a:9a:8c:f5:40:6f:
         bc:4e:67:90:d7:14:d9:ec:fe:6c:18:cc:c5:03:fe:78:c1:06:
         64:0c:82:a7:81:1a:69:8b:60:5b:16:ef:66:89:11:88:c5:70:
         ab:ea:e4:f1:1d:e3:9e:92:24:53:74:f3:47:b1:02:61:18:f9:
         49:a2:85:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:50:06 2026 by rpki-client