Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/371480f6-0537-3986-b3c5-aa21734f1bfc.roa
File:                     371480f6-0537-3986-b3c5-aa21734f1bfc.roa (raw, json)
Hash identifier:          i2evfKmwatZh3IRMKnkScaPWOjJOYQXNwxZukOTwlNQ=
Subject key identifier:   30:74:04:44:F6:B0:BB:13:0E:49:52:C2:7D:C6:D8:C8:12:9B:CE:01
Certificate issuer:       /CN=51407cd8-c830-49e6-9db4-7ddac75eb03f
Certificate serial:       010D0C9F4328584D3DFF88375F3954899E00CC60
Authority key identifier: CB:B5:D5:82:48:AA:4D:D8:D6:8A:85:42:03:C4:A9:BB:89:C6:56:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/371480f6-0537-3986-b3c5-aa21734f1bfc.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     13213
IP address blocks:        174.127.84.0/24 maxlen: 24
                          174.127.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3d:ff:88:37:5f:39:54:89:9e:00:cc:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51407cd8-c830-49e6-9db4-7ddac75eb03f
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=24ef0a4a-5735-4ddd-8dc1-b02783e98915
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:77:6b:69:63:62:e1:95:b2:11:5b:d5:aa:73:
                    46:33:15:11:f5:dc:35:13:94:78:59:0a:b0:31:ed:
                    11:95:3d:4e:87:50:48:03:e1:93:a8:a3:f3:b9:c1:
                    e5:7e:8a:7c:d8:a0:ab:8b:bb:a0:80:99:34:25:83:
                    f1:56:c7:ca:66:fc:57:75:49:25:e0:d0:f6:e3:25:
                    f6:71:98:a4:7c:e6:35:be:53:79:c8:de:a3:39:8a:
                    f2:cf:77:53:78:4d:95:af:fa:e9:a0:44:f2:a8:20:
                    57:73:62:59:bd:93:b4:0d:bf:0d:dd:4c:53:34:9c:
                    d1:ed:fe:5c:69:98:95:ef:4c:69:f5:c3:ea:6b:7b:
                    32:94:55:62:9d:e1:ce:b7:1e:29:5c:92:94:e8:04:
                    ab:00:cf:6a:af:16:2f:e1:bc:47:ee:e7:92:85:53:
                    ab:86:60:8d:04:fd:c7:cd:2e:6c:dd:ec:70:34:6f:
                    23:a3:f6:30:a2:9d:42:5d:31:90:46:f7:33:fe:32:
                    7e:e3:29:b5:a2:30:60:87:50:81:77:06:8e:75:a1:
                    67:09:ef:46:ff:e5:f5:47:ee:8c:7b:32:fd:7d:b0:
                    f4:af:5c:e4:dc:d4:6f:cc:3e:f0:96:01:f2:4f:e1:
                    7e:74:2e:45:e4:e5:3b:b4:fc:7d:4e:08:68:8e:e4:
                    81:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:74:04:44:F6:B0:BB:13:0E:49:52:C2:7D:C6:D8:C8:12:9B:CE:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/371480f6-0537-3986-b3c5-aa21734f1bfc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.crl

            X509v3 Authority Key Identifier:
                keyid:CB:B5:D5:82:48:AA:4D:D8:D6:8A:85:42:03:C4:A9:BB:89:C6:56:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.127.84.0/24
                  174.127.87.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:60:40:e2:b0:67:6d:72:03:28:ae:7b:dd:92:53:99:d5:ab:
         dd:03:df:76:68:81:81:16:39:28:64:fd:46:34:24:39:ae:79:
         28:fc:e2:6f:2d:ba:30:db:2f:39:59:34:b2:cf:b8:f1:d3:71:
         fb:50:65:a7:ea:f9:36:95:64:38:50:a2:be:89:f2:15:3d:20:
         83:33:08:54:9e:13:8b:4e:5e:01:5c:09:5c:26:91:dd:c9:57:
         63:94:63:fb:4c:b2:de:4c:e7:49:82:3e:d6:ce:03:94:c8:ad:
         1e:17:9f:73:21:59:2f:56:f5:43:51:9a:b2:0e:9d:44:d3:12:
         1e:d4:18:f0:91:1a:64:f8:8b:62:64:10:2f:7e:c3:39:5e:ab:
         a2:20:a8:0a:47:08:9c:3a:42:5e:6f:57:2a:e6:c9:3a:1c:7e:
         ef:32:85:11:a0:ff:a0:80:16:ac:26:a1:44:ac:bb:69:ac:09:
         56:b5:71:9f:0a:f2:3b:01:ef:84:eb:d5:f1:71:0d:4e:19:fd:
         1c:ed:f7:06:75:4c:8f:ec:8c:38:2a:c6:bc:be:7b:1b:f5:2a:
         66:2e:de:ed:6f:4f:57:56:7d:07:4d:25:4a:e0:2c:c5:70:d9:
         e0:b1:d5:10:81:56:e8:61:cd:60:eb:53:d2:a3:3a:f0:0a:cc:
         7e:14:51:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:07:07 2026 by rpki-client