Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/ff8b5724-01ec-389a-86f2-d1ccc865d11e.roa
File:                     ff8b5724-01ec-389a-86f2-d1ccc865d11e.roa (raw, json)
Hash identifier:          8QP47VmFb+8Zf/1l+mxw6Cquq8/+imzhMFnbCxflw2I=
Subject key identifier:   AF:A6:71:CA:B3:22:37:A7:2D:12:81:F2:90:32:C6:CD:85:BF:B7:47
Certificate issuer:       /CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
Certificate serial:       010D0C9F4328584D3C9A17EFFB92677ACB8D0700
Authority key identifier: EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/ff8b5724-01ec-389a-86f2-d1ccc865d11e.roa
Signing time:             Sat 21 Mar 2026 01:00:30 +0000
ROA not before:           Sat 21 Mar 2026 01:00:30 +0000
ROA not after:            Fri 19 Jun 2026 01:00:30 +0000
asID:                     54252
IP address blocks:        216.185.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3c:9a:17:ef:fb:92:67:7a:cb:8d:07:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
        Validity
            Not Before: Mar 21 01:00:30 2026 GMT
            Not After : Jun 19 01:00:30 2026 GMT
        Subject: CN=45cc805c-79b8-47bb-95a6-d247403d2db6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:2a:f1:bc:b5:5c:75:53:aa:05:c6:14:8d:71:
                    3d:61:5f:f5:cc:c5:16:5d:38:d7:90:b6:ef:53:bc:
                    8f:ca:4c:93:bd:93:ba:99:8e:10:9b:2e:e2:b3:a2:
                    cd:91:a8:e5:6b:bc:e4:1c:27:b3:99:56:46:a7:30:
                    81:66:93:49:27:8e:b0:5d:64:8c:5d:c7:c6:9f:b2:
                    20:51:f5:c2:6a:ef:5a:20:af:66:65:da:ae:e5:5b:
                    aa:8e:01:de:89:f5:62:d0:cf:5a:1b:db:c0:a6:3c:
                    58:6f:83:3a:78:8b:c1:5b:38:ca:7f:ac:07:58:8e:
                    46:10:32:c6:8b:fb:fe:36:e8:0e:cb:c1:a8:6c:71:
                    05:12:5f:12:e5:9b:b0:89:88:27:81:78:84:68:ea:
                    fb:3c:61:e1:30:56:41:9b:95:b2:bf:56:78:f1:8c:
                    0e:9f:c2:58:16:05:ed:3e:ae:8f:00:5c:f3:94:de:
                    51:b4:1f:98:87:7b:ae:b2:7d:be:8a:47:10:79:6d:
                    46:79:d4:84:e4:0d:65:f5:8b:5e:29:21:fe:ce:83:
                    d3:cc:8a:70:04:86:c3:fa:42:b1:6f:19:da:b3:e9:
                    dd:70:d2:e9:0e:93:70:b6:fb:ab:ad:6b:10:79:d3:
                    5c:8b:06:c0:23:54:50:51:2f:63:28:53:2d:00:2e:
                    b6:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:A6:71:CA:B3:22:37:A7:2D:12:81:F2:90:32:C6:CD:85:BF:B7:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/ff8b5724-01ec-389a-86f2-d1ccc865d11e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl

            X509v3 Authority Key Identifier:
                keyid:EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.185.41.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:04:94:dd:ed:8f:73:7f:f6:62:20:b8:ad:25:6c:df:23:26:
         eb:48:5f:b6:84:98:8b:03:99:73:f2:4b:a6:47:bd:d7:f0:18:
         4f:2e:2f:de:f6:23:0f:ba:2b:63:4b:77:6a:a2:ac:34:d6:29:
         6c:1a:fb:7c:16:85:91:21:12:17:3c:c5:40:17:ed:2d:eb:86:
         b1:ba:82:f9:67:9d:cd:8b:40:b6:0a:c3:7e:b5:d4:46:03:fb:
         06:a2:af:27:49:2b:31:09:36:6d:42:41:74:97:fe:c7:40:5c:
         c8:a4:99:47:53:a9:94:55:0e:f4:cb:89:99:dc:fd:f8:12:34:
         7a:32:96:13:36:c5:08:bf:56:aa:05:d6:81:dc:34:24:2f:c1:
         54:c2:ea:51:ae:fe:0a:a2:b2:df:bb:7e:3f:24:26:56:68:80:
         0f:be:0b:44:51:ca:69:c9:b8:89:57:d8:ea:81:22:7c:a8:d6:
         e8:b5:2e:34:b2:88:fb:cb:56:f3:de:68:f8:e1:f3:1a:6f:89:
         bc:38:da:17:a1:e2:7c:5e:69:d1:76:bb:1e:ed:0f:a1:89:4c:
         58:5b:c7:56:dc:35:f9:b2:6b:10:29:c9:3d:32:94:a0:da:0b:
         52:41:2c:b9:d5:81:63:15:58:1d:bd:74:02:3f:c1:b3:f6:21:
         94:99:f3:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:48:19 2026 by rpki-client