Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a0ba0ad5-2a7d-3e5f-867f-37232e3f8dbd.roa
File:                     a0ba0ad5-2a7d-3e5f-867f-37232e3f8dbd.roa (raw, json)
Hash identifier:          VkvYpKQ07EU0BcwEQeXbKRxlavXWs9uMXD1hQ6mDVfE=
Subject key identifier:   45:31:06:38:33:56:A6:BB:DD:BE:12:F0:06:74:0F:A8:BB:D9:CB:4D
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584D0A77C09982EF09588CB96780
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a0ba0ad5-2a7d-3e5f-867f-37232e3f8dbd.roa
Signing time:             Tue 03 Mar 2026 02:00:32 +0000
ROA not before:           Tue 03 Mar 2026 02:00:32 +0000
ROA not after:            Mon 01 Jun 2026 01:00:32 +0000
asID:                     0
IP address blocks:        204.29.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0a:77:c0:99:82:ef:09:58:8c:b9:67:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar  3 02:00:32 2026 GMT
            Not After : Jun  1 01:00:32 2026 GMT
        Subject: CN=023c5f65-3c8c-40db-9bd0-039de7f1f73f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:6b:1e:62:ed:5d:a1:c1:64:e7:8b:33:40:f5:
                    43:09:ba:d6:2d:ac:a3:00:2d:be:21:b1:f1:fb:0d:
                    f0:e5:10:0e:9b:38:29:84:7c:f4:01:b3:71:90:0c:
                    45:70:67:0d:1f:30:29:1a:5e:ba:a1:ff:77:24:9d:
                    24:98:f0:80:af:2d:3a:db:1f:27:10:d6:b6:f0:7c:
                    0a:7d:f9:48:53:af:ff:89:26:3f:aa:80:7e:09:3c:
                    b9:d4:df:a2:a4:7e:d6:1e:85:58:c9:10:ab:b2:82:
                    f5:09:ca:c8:b2:6a:bd:c2:db:17:a0:5c:f3:08:23:
                    e0:cc:1c:3e:18:11:b8:fe:6b:97:5d:33:27:ce:8a:
                    70:5f:7d:be:58:25:57:03:a3:0b:87:12:ad:77:65:
                    d2:f3:fa:99:31:1e:8e:70:30:5b:e7:6d:e2:55:96:
                    ad:3e:1e:66:cd:55:3c:f2:75:81:4e:47:cc:bc:8c:
                    6e:6b:fe:8d:94:c7:01:15:84:0c:e5:02:41:44:d8:
                    17:d5:72:c2:aa:03:8d:50:82:e8:5e:e1:1d:ba:d1:
                    0b:69:32:ab:dc:3a:02:b2:d3:3b:70:65:2c:75:6c:
                    51:22:d8:b4:18:f8:4b:c4:3c:ee:cb:81:2d:17:b2:
                    7b:e1:df:d7:6b:da:cd:3a:d9:35:00:0a:16:b9:bd:
                    c3:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:31:06:38:33:56:A6:BB:DD:BE:12:F0:06:74:0F:A8:BB:D9:CB:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a0ba0ad5-2a7d-3e5f-867f-37232e3f8dbd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.29.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:4b:60:bb:18:9d:04:e4:7e:87:1e:93:f3:26:fd:f7:99:fc:
         eb:e8:d1:82:9f:1d:e9:36:d8:8d:8c:a0:24:cb:7b:7c:47:ce:
         89:35:ab:eb:ca:97:9b:15:36:45:49:9f:f8:0c:f7:72:a0:d1:
         9a:18:e1:50:f8:b5:7d:b9:0c:49:1f:7c:7e:2d:20:dc:1b:35:
         1d:d2:cf:cd:95:b1:0e:a3:a3:12:77:1e:8f:bb:a7:9a:e3:35:
         c8:1c:b9:96:63:ce:d9:7f:18:a3:d2:fc:08:d4:9c:a3:85:4d:
         49:44:44:e1:83:32:24:b7:4f:de:05:aa:dc:89:32:1a:3a:92:
         3e:0c:5a:38:e6:42:8e:72:ec:32:3b:54:3a:22:a7:35:5f:83:
         0c:c7:55:f2:2a:37:f8:be:ee:66:9b:66:42:8b:d8:1e:0f:af:
         ef:cc:c0:9c:8f:31:f3:f8:a4:e6:b2:b8:9e:87:15:3d:2e:db:
         1b:d5:9d:98:57:1a:0d:28:01:62:1b:9b:32:03:4a:a2:1e:f0:
         3f:8f:69:66:0d:bc:a8:b8:6d:49:43:b7:f7:8a:bf:95:7c:dd:
         1e:84:7f:a4:b8:03:61:2c:f2:56:6b:b2:ea:82:e8:04:03:17:
         ed:e0:ca:06:ba:75:03:89:a1:f2:10:ab:37:a0:17:0b:82:a5:
         21:a2:e1:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:40:27 2026 by rpki-client