Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/fc1aae7f-4a31-3915-9aa1-5be3860efe1a.roa
File:                     fc1aae7f-4a31-3915-9aa1-5be3860efe1a.roa (raw, json)
Hash identifier:          8gZ1xjLGfUxWwlJLJEHIn+nH5BmdUGMXB++e2vyAVjI=
Subject key identifier:   31:3D:81:2F:1C:E4:1B:74:75:E8:DE:66:66:9D:EF:F1:6B:C8:74:2E
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F4328584D343A1D7E48CF752516F58280
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/fc1aae7f-4a31-3915-9aa1-5be3860efe1a.roa
Signing time:             Wed 18 Mar 2026 01:00:33 +0000
ROA not before:           Wed 18 Mar 2026 01:00:33 +0000
ROA not after:            Tue 16 Jun 2026 01:00:33 +0000
asID:                     55246
IP address blocks:        209.237.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:34:3a:1d:7e:48:cf:75:25:16:f5:82:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Mar 18 01:00:33 2026 GMT
            Not After : Jun 16 01:00:33 2026 GMT
        Subject: CN=d68d3431-64c9-4e70-ac19-85613674567e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:85:6b:be:0f:54:3e:ed:0f:7e:ef:f5:ab:05:
                    e0:9d:3b:3a:03:f4:3f:28:c0:02:94:47:14:6d:f0:
                    7d:5f:58:be:87:2d:ca:88:c1:db:9a:00:5d:e3:72:
                    af:cd:09:4d:c1:0d:29:74:92:bf:ec:ab:c5:b0:3a:
                    bf:6a:6d:7e:1a:7d:03:b2:a3:ee:f2:6e:cb:99:a9:
                    f9:8d:45:7b:70:92:e0:19:4a:c7:19:51:18:bc:0f:
                    c3:60:fb:75:29:d0:1b:4a:aa:29:ba:c3:40:4c:02:
                    96:52:4a:68:18:e9:f9:6d:0a:2f:49:2d:a6:db:97:
                    22:07:d7:4c:e6:a7:21:49:7d:4a:58:4f:c6:ee:b2:
                    17:3d:45:fb:fb:f4:6c:c7:f2:9a:18:fd:ba:b1:de:
                    f4:e8:69:66:ef:4e:5b:32:c8:68:17:03:64:b8:64:
                    47:dc:2a:24:c9:41:14:52:3d:b9:44:98:13:22:bf:
                    86:83:54:02:bb:a6:f4:99:e5:8a:49:4b:67:d3:e6:
                    40:78:64:ad:79:b0:bf:c3:05:55:43:27:69:5e:c8:
                    e4:0c:53:e6:ab:c6:1a:02:c1:c7:f4:14:45:8a:45:
                    2c:8c:e8:99:72:47:98:d2:a2:2d:22:fe:d0:63:40:
                    ee:87:41:16:13:38:56:12:99:67:ab:cb:a8:4b:68:
                    b0:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:3D:81:2F:1C:E4:1B:74:75:E8:DE:66:66:9D:EF:F1:6B:C8:74:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/fc1aae7f-4a31-3915-9aa1-5be3860efe1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.237.74.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:33:7a:90:60:6b:0a:68:be:56:af:ea:ab:38:e1:03:94:e3:
         53:a4:42:6f:7a:34:69:7c:ea:07:6f:14:3a:ae:12:de:b6:a9:
         f1:5f:37:ef:41:1d:0e:50:e5:07:ee:e0:6b:13:45:79:f6:89:
         92:6c:13:cd:fe:72:4a:0b:65:1e:7b:b5:03:5d:0a:26:c8:44:
         37:33:00:46:c4:16:1a:6d:14:95:5e:f3:08:a6:34:ed:9f:b6:
         d2:e9:14:2d:d9:2a:f5:c0:84:b3:3d:90:29:48:86:67:cb:b3:
         b1:71:3d:3c:9c:29:c1:78:92:63:3f:26:53:73:73:e5:5b:ea:
         46:23:6a:f8:62:c8:43:47:20:f4:6a:26:82:35:ba:fc:b7:8a:
         25:73:a7:ea:a5:f7:8e:62:4c:0e:34:ec:af:cc:e5:47:6e:d6:
         b4:ae:37:69:3b:7f:a9:04:ac:cf:e9:09:0a:19:8a:bb:ee:59:
         63:90:28:09:01:a0:5a:8b:83:85:3d:d4:fa:bc:49:c8:eb:17:
         c7:7b:77:12:11:92:11:76:28:a8:07:1d:41:79:2d:51:f7:a3:
         d0:ba:5a:61:ae:36:e4:00:94:2e:45:ab:3c:cc:f0:cf:72:71:
         f2:8c:30:df:fe:b2:0b:17:c1:a6:6f:50:b6:33:6a:cc:c7:f3:
         23:e8:a1:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:57:17 2026 by rpki-client