Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51/5791e6d3-9396-343e-9dab-5e8ffb3dc8fe.roa
File:                     5791e6d3-9396-343e-9dab-5e8ffb3dc8fe.roa (raw, json)
Hash identifier:          n32HpeP4cMdPTtFVaDdugq4GUOpcHXTDJE4mked/zZ8=
Subject key identifier:   3D:91:2E:D0:90:59:6C:8E:AE:4A:B7:05:04:F7:89:E9:C5:EC:88:9C
Certificate issuer:       /CN=a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51
Certificate serial:       010D0C9F4328584D343A21374D68570AC0F73BA0
Authority key identifier: B7:57:15:BF:89:DA:5C:E0:31:74:EC:EF:F6:CB:59:B2:F8:B8:3A:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51/5791e6d3-9396-343e-9dab-5e8ffb3dc8fe.roa
Signing time:             Wed 18 Mar 2026 01:00:33 +0000
ROA not before:           Wed 18 Mar 2026 01:00:33 +0000
ROA not after:            Tue 16 Jun 2026 01:00:33 +0000
asID:                     399870
IP address blocks:        170.205.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:34:3a:21:37:4d:68:57:0a:c0:f7:3b:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51
        Validity
            Not Before: Mar 18 01:00:33 2026 GMT
            Not After : Jun 16 01:00:33 2026 GMT
        Subject: CN=349cef74-d00c-4535-b54a-0c705e3e284d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:38:a1:4f:2f:4b:f4:e9:60:f7:c8:49:99:47:
                    1c:81:63:de:f7:20:f4:3c:0f:fe:ca:71:5f:e7:ea:
                    92:14:dd:23:70:59:0c:21:04:75:69:c9:af:60:dc:
                    ee:a3:81:24:5d:4c:bc:de:f2:a5:1b:d6:a1:78:ac:
                    85:3a:17:87:34:59:51:53:7f:82:c8:31:38:7c:e5:
                    1b:a6:62:cb:2c:43:c2:dc:0b:80:f4:41:1a:58:21:
                    42:ee:44:46:cd:bf:06:d5:33:a4:d9:a9:43:dd:1f:
                    16:71:2a:b8:d1:8d:ab:2f:15:40:d2:46:28:e9:9d:
                    09:8b:b2:ee:53:76:48:70:57:f5:fa:84:8e:53:57:
                    79:69:60:3a:cf:b0:10:a5:b7:0c:9b:7a:c1:5d:27:
                    c8:b4:40:4d:b7:76:e0:38:92:44:ff:76:b9:04:b0:
                    8b:66:06:b8:04:d3:66:69:ee:4a:fe:c1:b5:13:fb:
                    f4:0e:29:e9:8e:66:93:86:f3:89:2b:d2:d5:8e:79:
                    29:01:8b:2d:e7:01:0e:54:17:bc:7b:d9:38:50:bf:
                    8f:73:73:a9:9d:e9:f4:ea:e3:91:df:91:b7:90:69:
                    f7:1a:b5:de:19:16:1f:cd:ff:ae:f5:1e:07:71:eb:
                    03:be:d8:2d:67:51:8c:a5:72:41:88:b1:58:0a:d0:
                    11:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:91:2E:D0:90:59:6C:8E:AE:4A:B7:05:04:F7:89:E9:C5:EC:88:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51/5791e6d3-9396-343e-9dab-5e8ffb3dc8fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51.crl

            X509v3 Authority Key Identifier:
                keyid:B7:57:15:BF:89:DA:5C:E0:31:74:EC:EF:F6:CB:59:B2:F8:B8:3A:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.205.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:b6:2c:5c:c2:f7:06:10:c4:02:e9:94:34:c1:60:24:85:6e:
         e1:d4:57:02:8d:82:3e:93:8c:82:87:49:de:4f:3b:95:31:09:
         57:2b:06:51:90:89:fd:be:11:cc:d0:c7:da:be:53:86:80:9a:
         51:8b:49:f9:91:bb:db:33:ae:0d:f9:68:47:dd:02:95:75:65:
         d3:d7:4f:e4:de:dd:10:29:37:8c:f9:6f:0e:e1:6b:81:56:ff:
         d2:88:b7:54:f9:9a:7d:24:c4:09:c2:48:b5:42:8f:b5:7d:37:
         98:7c:28:08:a9:0d:ef:96:6b:89:95:bd:75:33:36:7e:ab:40:
         80:6e:ad:e0:02:fd:76:d9:56:7a:30:6c:08:fb:bd:9d:92:fc:
         63:0d:b7:aa:36:d1:b4:67:16:e0:f4:6b:57:a9:b0:44:d8:aa:
         ad:00:e9:3c:62:d0:af:d1:0b:a1:d2:bd:17:ed:06:a1:0c:33:
         31:b9:cf:17:e3:3d:c3:23:fd:e1:34:3b:42:4e:d1:5e:ff:29:
         dc:0a:9b:aa:f2:0b:ee:fa:f5:ee:e7:12:5f:52:80:8e:00:67:
         ba:d3:c0:70:5d:dc:8e:91:1e:43:bc:f2:bf:20:44:c0:f3:40:
         d3:7b:2f:46:77:51:13:8d:9c:11:52:fb:ce:8b:80:2e:dc:ed:
         2c:9a:21:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:28:18 2026 by rpki-client