Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/08381a91-5020-37c3-9474-58e7eb99bf27.roa
File:                     08381a91-5020-37c3-9474-58e7eb99bf27.roa (raw, json)
Hash identifier:          5rwZRTNUOsP1CkehyBDryD25+xUMipcfsEC2hClPEBQ=
Subject key identifier:   86:9E:BB:F0:3A:59:B1:C8:AA:96:A1:D4:44:B5:BE:91:2D:35:E6:FD
Certificate issuer:       /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
Certificate serial:       010D0C9F4328584D143D4BB6023EAB5F2A99D160
Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/08381a91-5020-37c3-9474-58e7eb99bf27.roa
Signing time:             Fri 06 Mar 2026 14:00:40 +0000
ROA not before:           Fri 06 Mar 2026 14:00:40 +0000
ROA not after:            Thu 04 Jun 2026 13:00:40 +0000
asID:                     19886
IP address blocks:        171.162.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:14:3d:4b:b6:02:3e:ab:5f:2a:99:d1:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
        Validity
            Not Before: Mar  6 14:00:40 2026 GMT
            Not After : Jun  4 13:00:40 2026 GMT
        Subject: CN=a71fe003-bd1a-47ea-af2b-599f68c6c0dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:33:e2:fd:75:d7:38:2d:ec:78:e6:5c:b1:da:
                    a7:e0:38:bf:83:52:24:1c:6d:9e:ea:e7:db:d6:83:
                    2a:9e:e7:09:11:db:c1:6d:96:f9:d9:da:b1:05:3f:
                    81:8b:0f:32:39:f6:2c:d0:45:63:71:11:3a:4b:fa:
                    9f:3c:c2:e8:2d:14:b3:a3:6d:72:7d:51:19:3e:3c:
                    4d:2e:e1:94:d8:a6:7e:a6:7c:08:76:3c:6d:a5:fa:
                    29:2d:d6:76:d7:9e:16:56:7e:30:76:c0:22:38:d0:
                    eb:1a:3a:45:3c:18:08:2b:ff:a7:bb:c3:e4:8c:6b:
                    6b:e0:02:d6:17:eb:a3:07:43:4f:9f:35:b0:a3:ff:
                    8d:06:f9:cd:f2:7c:a8:c1:92:0f:8c:16:7d:61:36:
                    a1:b6:d6:f9:ef:d8:02:82:a9:a4:7e:93:5f:78:d3:
                    ce:07:c5:01:4e:fe:ff:51:37:a7:22:c7:52:bf:d6:
                    a3:b5:ae:38:fc:27:3e:03:5c:25:4b:62:a7:91:66:
                    8e:05:2c:7a:86:20:5d:86:0d:3d:13:29:bb:74:a6:
                    51:b2:af:92:c2:3d:d9:5c:29:45:2e:32:bf:ea:64:
                    d4:7f:51:d8:b3:ab:49:96:da:37:c3:6e:de:d8:45:
                    5e:fe:c9:ab:48:25:b9:e1:7b:78:bf:c1:32:63:f2:
                    9b:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:9E:BB:F0:3A:59:B1:C8:AA:96:A1:D4:44:B5:BE:91:2D:35:E6:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/08381a91-5020-37c3-9474-58e7eb99bf27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl

            X509v3 Authority Key Identifier:
                keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  171.162.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:48:c2:91:64:a5:31:93:73:6a:dd:65:29:bc:cb:59:63:ea:
         0a:57:a3:35:15:1f:d7:c9:c7:52:fb:2f:81:eb:73:00:8d:41:
         4b:85:47:ca:81:2f:6b:ac:14:58:b7:36:cc:37:de:88:00:85:
         0b:15:83:b4:01:84:13:48:28:81:a4:fa:73:23:d9:ff:93:0a:
         66:a6:61:66:e8:f3:6a:0e:39:92:6d:d6:f2:c0:2a:1e:af:98:
         9e:50:dd:a1:c1:39:10:f3:09:70:64:e2:be:35:2f:9d:b1:85:
         c3:a4:df:fe:1b:5d:52:78:4f:e9:fe:31:08:71:53:3a:97:39:
         5b:2f:0d:d2:2c:99:7c:0e:3a:9d:d7:c8:00:e5:cc:1e:f0:64:
         66:64:34:06:ed:e3:db:74:25:f8:90:c4:ad:c2:b2:79:cc:d6:
         20:57:f3:57:bc:1f:42:bf:20:1d:be:c8:34:a3:0b:13:01:48:
         30:26:d0:a9:a9:8c:03:7c:17:c3:64:d7:e6:3e:da:c2:64:10:
         3b:dd:c5:3f:6d:4f:23:8f:36:19:48:22:d0:7b:5f:35:ef:66:
         c2:bd:fa:59:62:2f:92:65:2e:d6:8f:b3:97:8f:d7:f7:77:24:
         b1:de:46:a4:ae:a6:4e:a8:63:7b:c1:ba:f1:80:c1:d2:ea:f2:
         01:4b:39:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:33:30 2026 by rpki-client