Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb327032-4e1e-4c38-9cae-206da2d15d25/3dc26fd3-5382-34da-8235-9bfadd47dd34.roa
File:                     3dc26fd3-5382-34da-8235-9bfadd47dd34.roa (raw, json)
Hash identifier:          oJVLqJb4cNTXsUfpo0gJ+o83BArYWv2kuICPeseMjCg=
Subject key identifier:   C8:08:A2:B2:9F:48:FF:B9:9E:91:91:C3:6A:9A:EF:23:FD:F6:78:DF
Certificate issuer:       /CN=eb327032-4e1e-4c38-9cae-206da2d15d25
Certificate serial:       010D0C9F4328584D4A8FB99B07AE1E5D79257A80
Authority key identifier: CF:71:0A:CB:39:5D:5D:43:6A:A6:C2:CB:D3:CC:CB:CD:28:B5:44:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb327032-4e1e-4c38-9cae-206da2d15d25.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb327032-4e1e-4c38-9cae-206da2d15d25/3dc26fd3-5382-34da-8235-9bfadd47dd34.roa
Signing time:             Thu 26 Mar 2026 01:00:32 +0000
ROA not before:           Thu 26 Mar 2026 01:00:32 +0000
ROA not after:            Wed 24 Jun 2026 01:00:32 +0000
asID:                     8075
IP address blocks:        157.207.4.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb327032-4e1e-4c38-9cae-206da2d15d25/eb327032-4e1e-4c38-9cae-206da2d15d25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb327032-4e1e-4c38-9cae-206da2d15d25/eb327032-4e1e-4c38-9cae-206da2d15d25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb327032-4e1e-4c38-9cae-206da2d15d25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4a:8f:b9:9b:07:ae:1e:5d:79:25:7a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb327032-4e1e-4c38-9cae-206da2d15d25
        Validity
            Not Before: Mar 26 01:00:32 2026 GMT
            Not After : Jun 24 01:00:32 2026 GMT
        Subject: CN=94322587-8ea3-4dbc-aee5-b280a80264a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:19:5e:81:52:89:3c:f4:da:1e:6f:29:a1:d1:
                    de:77:d7:d8:ed:1e:73:6e:4a:63:9b:2c:dc:67:06:
                    92:b5:fa:63:fe:80:de:61:ed:6b:20:e8:e3:7b:20:
                    b1:49:38:2d:c7:59:c2:d6:7f:0f:69:0a:e0:b5:a7:
                    9b:50:ad:55:f1:ef:7c:ca:eb:c7:24:54:ac:21:c0:
                    09:eb:87:95:80:5c:64:ae:95:50:f4:c6:5a:df:e3:
                    3b:13:58:8d:c8:e1:85:eb:31:1e:9d:cb:8d:64:8f:
                    d7:7b:fb:f5:95:e4:fb:9f:61:ca:e4:91:be:99:73:
                    92:f4:33:30:82:13:07:10:94:68:d8:40:e8:5c:4a:
                    c9:14:c2:0b:18:bd:f9:da:5e:5b:8c:6f:8a:9c:97:
                    96:6d:28:85:37:59:04:b2:2b:fe:c9:a9:fd:15:f9:
                    cc:b9:13:4c:58:b3:32:0f:cf:64:3c:74:e0:27:1a:
                    ee:19:6c:60:5e:c2:9b:bf:8b:1e:43:c5:a5:36:20:
                    76:78:2c:af:fc:1c:3c:25:f7:d7:ee:6e:12:65:2a:
                    1f:9b:2e:bb:12:56:e5:82:e6:4d:b9:70:6f:de:3c:
                    67:39:3f:7a:58:93:b6:5f:d3:b1:fe:7c:59:92:1a:
                    5e:5f:f7:bb:10:e7:08:3d:45:80:8f:ff:ba:a5:15:
                    08:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:08:A2:B2:9F:48:FF:B9:9E:91:91:C3:6A:9A:EF:23:FD:F6:78:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb327032-4e1e-4c38-9cae-206da2d15d25/3dc26fd3-5382-34da-8235-9bfadd47dd34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb327032-4e1e-4c38-9cae-206da2d15d25/eb327032-4e1e-4c38-9cae-206da2d15d25.crl

            X509v3 Authority Key Identifier:
                keyid:CF:71:0A:CB:39:5D:5D:43:6A:A6:C2:CB:D3:CC:CB:CD:28:B5:44:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb327032-4e1e-4c38-9cae-206da2d15d25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.207.4.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:fa:39:0c:9b:69:8f:92:7d:50:5a:43:a5:47:fe:07:25:f0:
         5a:2f:09:e2:b8:67:96:f6:91:de:c4:2e:d8:2b:0f:fb:7d:42:
         a7:db:9e:16:74:06:90:33:e8:94:07:7d:cc:32:8b:0b:a2:1e:
         32:8d:44:63:d7:83:5d:15:df:57:9e:24:f0:b7:aa:dc:a4:42:
         36:62:04:d9:38:60:c6:de:38:71:1b:10:20:79:6d:62:83:55:
         e3:88:3f:49:0b:ef:c7:29:fc:3c:07:af:59:16:49:1e:93:ec:
         6b:73:3a:50:5f:f2:c0:e0:8b:44:3b:1d:be:fe:f9:7c:be:ce:
         9e:17:3f:bb:d5:f4:f0:d9:0a:5e:ea:3c:ec:4c:3d:1d:89:92:
         b1:11:1b:df:75:42:d2:44:68:cd:cd:97:12:58:ee:5c:71:bb:
         a6:fc:db:2f:55:f0:c9:7f:2e:77:9e:64:f7:d4:4b:f5:e4:86:
         07:94:69:0c:18:53:e3:56:aa:fb:21:ce:1e:e3:7a:75:17:90:
         20:4d:92:6f:ef:1f:d9:e3:88:78:f0:03:fe:aa:40:ee:6c:25:
         de:08:5c:bf:7a:5c:f6:99:4a:75:bd:0e:f1:3f:6c:46:71:a8:
         f9:8d:9a:b2:28:10:89:50:6f:7e:4b:c4:cf:70:66:7d:8b:8d:
         37:1f:ee:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:32:43 2026 by rpki-client