Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/8aab3cd7-e34d-30e9-84b1-7403ab620d41.roa
File:                     8aab3cd7-e34d-30e9-84b1-7403ab620d41.roa (raw, json)
Hash identifier:          NAFz0ZsIG8UNZygpyOrbZ0XSx4ySsmxwdGwLP7aZeVc=
Subject key identifier:   57:26:80:F0:C4:90:73:DF:1D:D8:A7:B8:9F:86:98:D6:71:53:16:2E
Certificate issuer:       /CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52
Certificate serial:       010D0C9F4328584D143D1F400C2E49F0D5540F42
Authority key identifier: 06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/8aab3cd7-e34d-30e9-84b1-7403ab620d41.roa
Signing time:             Fri 06 Mar 2026 14:00:40 +0000
ROA not before:           Fri 06 Mar 2026 14:00:40 +0000
ROA not after:            Thu 04 Jun 2026 13:00:40 +0000
asID:                     40466
IP address blocks:        170.186.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:14:3d:1f:40:0c:2e:49:f0:d5:54:0f:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52
        Validity
            Not Before: Mar  6 14:00:40 2026 GMT
            Not After : Jun  4 13:00:40 2026 GMT
        Subject: CN=9cb5e53a-c366-45a4-af41-4480d71a2a47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:90:6e:c1:4f:24:44:36:2f:48:8a:b9:fb:bf:
                    67:3e:33:b8:f4:3d:a0:43:57:96:12:f5:f4:80:2c:
                    ff:0e:12:2b:76:68:13:6d:8b:2f:4d:21:ef:ce:a7:
                    c5:27:01:43:19:da:37:4c:a1:ab:2c:28:dc:41:24:
                    d6:31:50:52:95:b2:00:9b:59:c0:10:85:ec:2f:e1:
                    b0:ed:8d:2b:2f:5d:f0:af:40:6c:3d:72:7f:0e:a9:
                    36:ca:99:e4:88:7b:db:c4:8d:21:f5:c9:c1:7a:94:
                    d5:66:61:22:63:37:e7:64:cb:0c:03:75:7e:26:e7:
                    d5:e8:7d:cb:60:02:3a:9d:ce:9f:ed:a7:d7:96:d2:
                    db:a5:96:73:6f:c5:11:f3:c4:11:6c:b8:72:fb:d7:
                    1a:51:d2:d0:21:24:4d:ae:bc:8e:e3:01:28:18:28:
                    33:53:89:65:c4:77:1a:40:50:4d:9a:31:11:70:84:
                    1f:3a:4a:7e:f2:72:d9:49:fc:6a:8f:8b:04:e4:39:
                    bb:6a:b5:b9:df:1b:e7:6d:1b:e2:a4:c0:76:91:7e:
                    e0:47:17:b5:69:76:3f:8e:0c:de:2c:01:dc:6d:f5:
                    ab:b0:f6:55:14:7c:2a:70:65:ec:c8:3d:73:05:e5:
                    10:34:81:34:d0:e5:8b:bb:b5:8b:78:f3:19:73:78:
                    1c:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:26:80:F0:C4:90:73:DF:1D:D8:A7:B8:9F:86:98:D6:71:53:16:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/8aab3cd7-e34d-30e9-84b1-7403ab620d41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl

            X509v3 Authority Key Identifier:
                keyid:06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.186.142.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:4c:79:6f:3f:50:19:b1:10:93:c0:ed:aa:06:45:ab:69:5c:
         da:52:d7:62:a1:cb:4f:5a:c3:c9:33:02:64:9c:b0:63:fb:d5:
         bf:84:e6:ad:2e:5e:f8:f2:6c:28:91:54:ab:70:5d:a6:19:69:
         78:42:23:e3:cd:e0:43:2c:21:8d:60:01:a5:36:b2:fa:a7:02:
         7a:82:b7:ee:30:eb:8e:73:96:eb:04:1e:de:58:a9:43:4d:e5:
         87:bf:87:83:59:0d:46:5a:eb:b1:1c:56:58:f9:cb:f7:35:2d:
         05:a8:54:6e:83:47:0e:c5:b5:64:c8:23:53:f8:8b:3f:78:f8:
         c6:28:cf:44:b6:4c:cf:54:33:cf:d4:05:ed:8d:40:06:c2:9d:
         56:01:9f:85:05:5a:3c:a9:9b:ad:f4:e7:3f:bc:f8:56:26:b6:
         50:e3:3f:2b:d9:d8:5b:b6:70:38:9b:99:33:a2:82:a4:0b:01:
         42:1d:29:bd:30:6f:83:a2:33:fb:dd:aa:af:f8:5e:a8:cd:e6:
         98:2d:4f:bd:80:d7:4c:fc:cc:66:bc:e6:c5:16:bc:c9:79:be:
         79:5d:49:ac:d7:61:9c:10:3f:7a:67:89:52:98:83:de:51:3b:
         9d:28:9e:07:b4:18:54:e8:ec:74:f3:5b:de:c7:58:54:1f:5f:
         96:a9:fb:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:19:15 2026 by rpki-client