Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/62dd0302-3085-3f70-8edd-449ecdbc6149.roa
File:                     62dd0302-3085-3f70-8edd-449ecdbc6149.roa (raw, json)
Hash identifier:          XbQAu8wY6D6JAYxwh0qEyX9k0ZFkuLR7zUyx9drnYB0=
Subject key identifier:   D0:C1:70:26:84:6F:7D:68:C6:C0:1F:69:9B:38:EB:78:35:48:55:2A
Certificate issuer:       /CN=8ac31463-974b-4676-9328-200202ae4d6e
Certificate serial:       010D0C9F4328584D3F64F1DF1BFCEE4662F47B40
Authority key identifier: 66:4A:CF:7A:87:80:2E:D5:96:69:93:6E:0E:BD:6C:EA:41:57:66:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/62dd0302-3085-3f70-8edd-449ecdbc6149.roa
Signing time:             Sun 22 Mar 2026 01:00:32 +0000
ROA not before:           Sun 22 Mar 2026 01:00:32 +0000
ROA not after:            Sat 20 Jun 2026 01:00:32 +0000
asID:                     33211
IP address blocks:        206.41.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/8ac31463-974b-4676-9328-200202ae4d6e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/8ac31463-974b-4676-9328-200202ae4d6e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3f:64:f1:df:1b:fc:ee:46:62:f4:7b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ac31463-974b-4676-9328-200202ae4d6e
        Validity
            Not Before: Mar 22 01:00:32 2026 GMT
            Not After : Jun 20 01:00:32 2026 GMT
        Subject: CN=a21409a5-4d63-4ecb-a125-6f1c1f518c1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:96:1b:ef:8c:2a:cd:c8:8e:85:dd:60:41:f0:
                    a0:98:4f:9a:23:51:2f:e2:9c:7c:e6:aa:43:38:1f:
                    91:49:d3:4a:de:a3:ff:10:2d:83:2d:e6:db:f3:d5:
                    f3:17:93:1b:66:77:e2:3a:fa:18:e9:df:4d:58:88:
                    85:f5:b8:dd:30:f5:8f:11:10:7e:f7:01:6d:82:3c:
                    77:88:18:14:bb:b5:76:dd:82:00:30:d0:48:7a:ae:
                    68:16:fb:65:38:a1:32:34:e5:ab:ae:fe:5b:69:70:
                    41:0a:de:c6:b9:1a:72:05:40:c5:30:d1:94:11:6c:
                    3a:9d:5f:d7:2a:fc:81:64:35:fb:0a:df:f8:a7:89:
                    f0:18:26:78:77:80:2a:f4:76:68:34:61:50:e5:34:
                    24:f8:07:79:a5:da:1c:b5:a5:96:c7:db:97:3e:46:
                    0f:8b:b3:08:71:f7:7b:6f:d0:31:60:7e:0f:93:1d:
                    7d:e0:6c:bb:48:c0:4a:25:0e:52:e6:df:c0:a7:41:
                    68:cc:8d:7f:6e:61:7d:82:c7:eb:61:17:4d:37:c0:
                    e3:be:bd:3f:30:83:ef:05:fa:89:b3:e7:93:70:99:
                    eb:9c:b5:ff:e9:c1:5d:45:9b:83:4e:01:df:9e:38:
                    64:2c:47:4e:19:c6:31:2c:72:0b:ce:9b:83:65:da:
                    e8:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:C1:70:26:84:6F:7D:68:C6:C0:1F:69:9B:38:EB:78:35:48:55:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/62dd0302-3085-3f70-8edd-449ecdbc6149.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/8ac31463-974b-4676-9328-200202ae4d6e.crl

            X509v3 Authority Key Identifier:
                keyid:66:4A:CF:7A:87:80:2E:D5:96:69:93:6E:0E:BD:6C:EA:41:57:66:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.41.125.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:4c:c3:8a:05:84:31:59:3f:0b:90:18:22:ee:37:74:03:1b:
         f3:ea:00:e0:45:79:b3:3c:28:3e:07:57:a9:29:8a:42:ae:3d:
         52:ff:10:9e:92:e9:bf:63:29:99:ff:68:29:2f:fb:48:a0:43:
         3c:80:2b:83:b0:e9:e1:a7:fb:75:f2:85:cb:89:0f:fd:18:d6:
         2e:aa:29:14:27:dd:5a:3a:a0:38:f4:49:32:9d:9e:25:66:72:
         88:83:13:c9:30:f6:b5:dc:bd:23:d8:77:1d:5b:7d:e0:32:3e:
         20:6c:6c:2c:90:e0:69:de:c2:b7:9c:a0:d6:98:18:e7:26:97:
         c3:16:0a:1c:22:94:1a:f7:7d:94:d5:0f:7f:a5:1c:70:7a:56:
         37:8e:fb:f6:d1:6d:e2:cb:df:ae:ac:e3:6e:25:a0:56:4a:d9:
         2c:b3:6f:5f:57:09:4d:bf:f9:20:cc:56:28:7c:f5:5d:52:db:
         32:e0:cb:bf:92:13:ab:d4:31:70:e6:5a:c7:4e:6b:b7:e4:13:
         19:0d:dd:43:a7:a6:74:c2:f5:c4:ad:c6:21:cc:1d:17:57:ac:
         7d:ba:2e:ec:8f:6c:12:93:70:a0:c2:91:7e:46:84:61:ac:01:
         7a:b8:66:31:9d:70:05:66:e3:5a:95:1a:5d:1a:36:9c:2e:65:
         8c:84:76:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 06:41:31 2026 by rpki-client