Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48c974e9-82f6-4ede-812c-5b9302f0c7cc/b9c162a7-dd50-370e-bdb8-9e856eee014c.roa
File:                     b9c162a7-dd50-370e-bdb8-9e856eee014c.roa (raw, json)
Hash identifier:          /Ry2fJOoTodsMkTti09uOsGALN/lUszlOE7WiXd5UkU=
Subject key identifier:   D9:B7:E9:BD:25:CC:B7:CD:35:0C:67:DB:34:07:82:DE:65:7A:F5:E1
Certificate issuer:       /CN=48c974e9-82f6-4ede-812c-5b9302f0c7cc
Certificate serial:       010D0C9F4328584D1707B66CF11435F5EE6BBB00
Authority key identifier: C4:16:34:F3:51:6F:6B:E6:30:BB:50:16:8D:70:1D:08:1A:18:28:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48c974e9-82f6-4ede-812c-5b9302f0c7cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48c974e9-82f6-4ede-812c-5b9302f0c7cc/b9c162a7-dd50-370e-bdb8-9e856eee014c.roa
Signing time:             Sat 07 Mar 2026 14:00:41 +0000
ROA not before:           Sat 07 Mar 2026 14:00:41 +0000
ROA not after:            Fri 05 Jun 2026 13:00:41 +0000
asID:                     54103
IP address blocks:        207.199.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48c974e9-82f6-4ede-812c-5b9302f0c7cc/48c974e9-82f6-4ede-812c-5b9302f0c7cc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48c974e9-82f6-4ede-812c-5b9302f0c7cc/48c974e9-82f6-4ede-812c-5b9302f0c7cc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48c974e9-82f6-4ede-812c-5b9302f0c7cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:17:07:b6:6c:f1:14:35:f5:ee:6b:bb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48c974e9-82f6-4ede-812c-5b9302f0c7cc
        Validity
            Not Before: Mar  7 14:00:41 2026 GMT
            Not After : Jun  5 13:00:41 2026 GMT
        Subject: CN=74cc3df3-53b0-403a-96cb-bbf2a22a9769
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:54:b4:12:20:61:29:27:b7:4e:b2:b7:cc:c8:
                    e6:84:66:8e:c3:c9:12:c7:be:73:3d:96:1d:9a:0f:
                    cc:58:6a:16:1b:02:d2:44:96:b5:1f:d5:72:99:0e:
                    7d:50:61:a5:fd:e1:4f:dd:d7:1b:74:e0:f8:0a:6c:
                    00:e4:b0:5e:ea:57:a0:0c:b0:19:e7:3b:a8:71:46:
                    3e:46:fd:b6:d7:44:db:a7:d1:30:75:8f:05:33:98:
                    e9:f1:75:d7:0e:81:02:29:8c:78:b4:dc:9a:3b:5e:
                    46:ac:50:94:40:79:de:44:ab:fe:a7:88:f9:d7:f8:
                    8d:16:d5:07:47:67:24:23:2c:a4:10:1d:7d:e5:ff:
                    47:fc:02:da:ad:f9:29:60:13:3d:8c:81:f5:2b:3e:
                    0b:ba:f5:1a:b3:a1:74:85:70:78:8c:9a:78:aa:c7:
                    46:66:84:ad:0b:fb:0f:dc:18:76:c3:0e:c0:f0:28:
                    4d:da:d2:29:c7:d6:b4:24:56:4d:40:ef:97:ac:5e:
                    8e:97:7a:15:d1:a0:2d:d5:2f:b3:48:ef:0a:ab:67:
                    5f:f9:c9:a9:26:f5:6a:f4:7d:1f:b2:96:f9:67:8e:
                    be:44:84:c9:d2:5e:74:e5:75:60:ec:18:5e:a3:10:
                    b0:eb:0b:f2:ee:e9:bd:f8:54:a5:9c:7f:9c:99:4a:
                    68:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:B7:E9:BD:25:CC:B7:CD:35:0C:67:DB:34:07:82:DE:65:7A:F5:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48c974e9-82f6-4ede-812c-5b9302f0c7cc/b9c162a7-dd50-370e-bdb8-9e856eee014c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48c974e9-82f6-4ede-812c-5b9302f0c7cc/48c974e9-82f6-4ede-812c-5b9302f0c7cc.crl

            X509v3 Authority Key Identifier:
                keyid:C4:16:34:F3:51:6F:6B:E6:30:BB:50:16:8D:70:1D:08:1A:18:28:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48c974e9-82f6-4ede-812c-5b9302f0c7cc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.199.147.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:ea:91:e7:25:bd:7c:7f:fd:74:08:1b:c6:a7:c0:f8:14:7a:
         d6:fb:f0:b5:6e:08:70:84:ea:b4:cd:58:89:c3:8d:02:fa:ec:
         24:32:cb:51:28:e1:1c:bc:aa:65:83:04:e4:df:58:4e:2a:56:
         ef:fd:48:f7:a2:92:db:eb:95:ae:da:fd:2f:87:dd:be:e6:4f:
         53:86:71:f9:4b:39:19:3b:18:44:d2:df:f1:48:32:44:80:27:
         3d:48:0e:5f:60:45:44:5a:26:fe:08:d5:c3:9d:83:a8:6c:6f:
         ec:c0:92:94:2f:a9:bd:30:1d:e0:81:01:0e:85:85:6e:36:4e:
         55:d9:81:fc:97:63:1c:bf:cc:dc:2e:7b:9e:87:f7:5c:ce:60:
         58:82:11:bf:ca:86:2a:4f:c8:6a:69:e2:a3:9d:71:f5:34:48:
         78:b7:e8:1a:ae:87:04:b9:0a:60:f7:e0:cf:ac:12:d9:c4:5c:
         61:5d:67:b2:bd:99:0a:7b:d8:77:6e:83:f3:2b:16:76:b2:f0:
         5e:cb:ef:98:15:bb:c6:81:a3:ba:46:1a:00:9c:e4:97:fe:7c:
         6d:70:25:be:cc:9d:24:15:94:69:8f:d4:92:e8:7f:54:bf:d9:
         5b:c6:60:d4:00:4a:c5:19:74:0c:09:74:8c:97:05:56:76:7e:
         11:de:e9:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:05:00 2026 by rpki-client