Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e/27f79c66-ade1-34d1-b698-4ce6813ddd0f.roa
File:                     27f79c66-ade1-34d1-b698-4ce6813ddd0f.roa (raw, json)
Hash identifier:          jUQPq4DuNkwjyeQaqzyot5U34PI9/ewK0RvIVHCVjWs=
Subject key identifier:   18:9B:1B:15:9F:CA:66:EC:66:0C:95:5E:55:47:B8:05:0F:82:3B:E6
Certificate issuer:       /CN=2775f7c3-c238-47d5-98c9-835a28d9095e
Certificate serial:       010D0C9F4328584D300A5D183C2AE4F32F522080
Authority key identifier: D1:24:DF:CC:7F:5B:80:D2:8D:EC:FE:EE:8C:CF:52:33:8E:B5:21:44
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e/27f79c66-ade1-34d1-b698-4ce6813ddd0f.roa
Signing time:             Mon 16 Mar 2026 13:00:40 +0000
ROA not before:           Mon 16 Mar 2026 13:00:40 +0000
ROA not after:            Sun 14 Jun 2026 13:00:40 +0000
asID:                     62467
IP address blocks:        104.167.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e/2775f7c3-c238-47d5-98c9-835a28d9095e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e/2775f7c3-c238-47d5-98c9-835a28d9095e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:30:0a:5d:18:3c:2a:e4:f3:2f:52:20:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2775f7c3-c238-47d5-98c9-835a28d9095e
        Validity
            Not Before: Mar 16 13:00:40 2026 GMT
            Not After : Jun 14 13:00:40 2026 GMT
        Subject: CN=87dda67a-1e3a-4bd8-b577-a64a6e30eeb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:5b:92:88:82:86:7d:27:52:e8:5a:b0:3e:13:
                    a4:f3:52:f6:40:d9:9d:b9:69:ee:17:c8:c8:3f:4b:
                    c0:83:0e:88:1c:5a:a3:2c:53:0d:be:5e:fe:6d:f8:
                    27:85:d8:3c:99:35:62:8c:5c:2d:5b:1a:bd:80:ac:
                    c4:0f:56:f6:f0:43:d6:90:47:c0:dd:60:00:73:66:
                    8c:7c:8c:66:d5:cd:5b:7b:f0:86:de:89:a7:4a:ed:
                    32:c6:90:26:76:32:ba:a8:24:5c:3c:40:b3:e7:25:
                    b3:64:be:eb:77:08:45:53:cb:27:cf:4f:63:19:56:
                    99:18:fc:7e:4c:aa:e5:4d:ad:a7:ca:b3:78:ce:51:
                    b7:c9:32:81:9f:f4:8a:e6:b6:5b:c7:52:3e:0a:a0:
                    af:88:f0:fb:db:94:b3:f3:ab:c0:12:3c:d7:79:1c:
                    7e:a4:0a:89:46:e1:d6:89:83:93:02:99:6f:b8:98:
                    6f:69:53:a1:57:b3:bd:13:5b:0f:14:ff:80:dd:e1:
                    bf:6b:e9:17:38:d2:9f:92:b4:1b:b1:21:18:e1:19:
                    b6:83:9c:c0:8b:82:9a:89:18:f1:75:27:8d:81:79:
                    68:af:a2:02:b6:5a:10:7c:61:ea:dd:5b:89:08:fb:
                    e4:ba:c2:39:93:ed:44:91:e2:f4:37:66:72:5a:23:
                    c0:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:9B:1B:15:9F:CA:66:EC:66:0C:95:5E:55:47:B8:05:0F:82:3B:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e/27f79c66-ade1-34d1-b698-4ce6813ddd0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e/2775f7c3-c238-47d5-98c9-835a28d9095e.crl

            X509v3 Authority Key Identifier:
                keyid:D1:24:DF:CC:7F:5B:80:D2:8D:EC:FE:EE:8C:CF:52:33:8E:B5:21:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.167.240.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:45:cb:38:c4:d3:da:b8:6d:e4:f4:0c:ba:54:ed:32:16:65:
         84:39:d6:7d:5f:50:83:5b:87:2f:f4:e0:d9:fc:c8:66:db:e2:
         e8:d3:02:fe:e2:a2:4c:b2:84:b1:d5:36:36:2c:9c:84:13:fc:
         41:13:87:23:cc:79:80:3d:ee:1a:4b:b3:21:fd:0b:5e:bc:d8:
         38:07:51:a2:a5:9b:b9:ea:48:d7:7b:7d:6d:d1:6d:cb:ac:12:
         16:2a:27:e2:60:13:02:ca:ac:27:82:d5:a4:7a:ef:0f:78:bb:
         30:e5:e6:87:35:51:3f:48:cf:b1:b1:80:c9:1d:ac:d1:ed:62:
         94:4c:58:c5:46:01:00:10:01:ea:6f:10:cf:cc:da:60:6e:ba:
         e6:84:9f:3c:5f:9c:31:f7:e4:f6:a5:86:17:b9:80:9a:34:02:
         f9:d4:9e:71:66:07:06:ac:56:64:0a:97:bb:8a:79:d9:bc:ab:
         00:59:c4:9d:f5:c6:4c:fe:60:1f:37:bd:fb:f8:58:09:ce:25:
         3f:6b:ba:1e:e9:fd:7f:7c:91:4d:b6:7e:8f:14:a8:08:ab:d8:
         82:ef:16:6f:e1:42:91:7a:5d:b3:79:a7:86:61:8e:bd:a2:9a:
         f8:aa:58:de:85:08:43:7e:7a:f8:7e:4a:f0:6a:ec:57:4b:d1:
         68:3a:f0:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:01:17 2026 by rpki-client