Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/7a888043-beb0-31c5-9d07-936396c8d27a.roa
File:                     7a888043-beb0-31c5-9d07-936396c8d27a.roa (raw, json)
Hash identifier:          u5S60Fd9AQdhVwKksjrPTAekFoHc8uXyu/FzQvUOAmM=
Subject key identifier:   D2:DC:37:69:8D:D3:AF:F9:C4:B1:A1:6A:89:63:7E:65:3B:99:44:5F
Certificate issuer:       /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
Certificate serial:       010D0C9F4328584D300A642FB574B5DF05396B00
Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/7a888043-beb0-31c5-9d07-936396c8d27a.roa
Signing time:             Mon 16 Mar 2026 13:00:40 +0000
ROA not before:           Mon 16 Mar 2026 13:00:40 +0000
ROA not after:            Sun 14 Jun 2026 13:00:40 +0000
asID:                     25645
IP address blocks:        137.239.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:30:0a:64:2f:b5:74:b5:df:05:39:6b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
        Validity
            Not Before: Mar 16 13:00:40 2026 GMT
            Not After : Jun 14 13:00:40 2026 GMT
        Subject: CN=f8198801-914d-40c8-a716-fda9f177bbaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:10:38:4c:2e:26:c9:0c:23:a2:c1:67:a4:bf:
                    4b:29:41:39:2f:f3:bc:14:d0:26:66:6c:66:71:8d:
                    b8:c4:6a:3e:03:ff:be:7c:d6:78:5a:a9:6f:ec:cf:
                    39:70:72:e3:43:00:4b:bd:2a:06:9e:2e:8a:da:ad:
                    ca:57:34:98:e1:a1:7d:91:28:0b:ce:49:3c:b2:9f:
                    24:51:c1:9b:a4:8b:9d:91:da:8b:cf:cd:ca:58:cd:
                    4f:90:ae:0d:be:f8:ef:f3:34:2d:59:34:68:0e:56:
                    20:3c:01:f8:93:51:b6:97:45:75:38:44:44:df:a0:
                    5b:e9:90:d8:23:d8:74:6b:90:05:26:db:ee:85:7f:
                    ac:a3:b7:75:c2:a6:85:80:b7:80:ce:7c:71:0b:09:
                    42:ee:fc:74:67:19:a7:ef:65:ba:09:0d:b0:78:a9:
                    e8:b7:f7:72:a8:67:2b:7c:c4:d9:bb:0f:53:d2:26:
                    df:77:fe:4f:72:7c:95:00:b5:bf:17:f7:da:4d:1b:
                    76:c9:bf:4f:ac:f9:35:ca:58:ce:01:6d:87:fb:e2:
                    16:b3:a5:0a:ef:40:65:e8:d6:dd:59:ae:88:90:56:
                    97:9a:e9:1f:4c:83:29:ed:f3:b6:26:66:ac:8e:1e:
                    0d:d8:27:1b:b3:56:e5:3e:40:fa:2f:33:d8:9e:a4:
                    76:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:DC:37:69:8D:D3:AF:F9:C4:B1:A1:6A:89:63:7E:65:3B:99:44:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/7a888043-beb0-31c5-9d07-936396c8d27a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl

            X509v3 Authority Key Identifier:
                keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.239.210.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:f9:03:e0:04:e9:fc:ad:ff:cc:79:41:8b:4a:76:95:7a:6e:
         0b:14:48:60:91:39:3d:9c:7d:74:4a:da:25:51:9d:f1:59:85:
         81:b1:5b:2e:04:b1:9b:b6:91:18:84:14:7a:51:63:1a:5f:02:
         49:6f:9b:07:db:59:9b:a7:9d:42:7c:ca:cb:1d:16:87:3d:8c:
         b2:86:41:c6:48:68:b8:7d:9f:2b:aa:5c:2d:b7:77:93:ef:02:
         6d:f7:7a:09:e2:a5:85:8d:47:64:1b:9f:9c:cb:74:87:42:89:
         56:1d:70:93:f0:b8:ae:20:2a:79:a8:be:5f:3d:b6:df:bd:95:
         ed:b6:d0:bb:4c:06:f8:2f:36:90:10:39:17:b3:eb:b0:fb:e5:
         e8:09:94:48:b4:8c:d2:11:6c:34:c7:6b:83:22:b9:4c:85:ed:
         53:99:fe:a2:86:09:2d:23:fa:51:f2:14:43:84:f0:f1:ed:06:
         a3:8e:71:d4:8a:ea:b0:2a:32:9d:45:21:c7:e6:dc:e7:5c:1f:
         5f:c2:92:92:c1:4c:d3:6d:6f:fb:55:20:28:f8:c7:c5:e9:2f:
         21:1d:41:35:20:cf:5f:5b:e7:87:ce:6b:c1:ba:f6:8e:41:3c:
         f4:fa:5d:6e:a8:6b:4e:86:fa:16:f9:ae:d3:a5:b2:90:ce:05:
         cb:73:b0:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:41:08 2026 by rpki-client