Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/9c97edaf-665e-35c8-ad4e-c89baeccd9fc.roa
File:                     9c97edaf-665e-35c8-ad4e-c89baeccd9fc.roa (raw, json)
Hash identifier:          unKv3X0cdI/W/2WjjfckPnrzXGWzw59LIRxglnTkQSw=
Subject key identifier:   20:60:D3:07:97:8C:80:E2:D6:BC:85:08:9C:7E:18:88:F9:96:FA:33
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584D3DFFBE25157AB88D46B00F80
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/9c97edaf-665e-35c8-ad4e-c89baeccd9fc.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     33363
IP address blocks:        97.69.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3d:ff:be:25:15:7a:b8:8d:46:b0:0f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=0e50a59f-21ef-44ba-9c8f-f3d8defd24e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:af:55:5a:6c:16:ee:4c:e8:b5:b2:f9:10:e8:
                    41:18:01:84:07:ce:3e:7b:c4:54:e9:7b:37:e4:f6:
                    b2:37:b9:f3:1e:b5:d0:c6:ae:94:1b:2e:00:81:99:
                    42:e7:19:8d:28:01:76:73:82:6a:83:57:d6:c0:e7:
                    67:e4:c3:42:fd:a0:ec:f5:c7:ed:95:86:06:34:fb:
                    09:ef:27:27:70:ca:a9:38:5f:4e:03:6e:0a:af:5e:
                    2f:bf:47:69:e7:11:37:6e:6b:9e:bd:06:3a:6b:d5:
                    01:97:7b:2e:a3:4a:8a:8e:38:d7:b1:5c:d7:e4:62:
                    6b:d3:2d:a6:95:b2:5c:c5:98:ec:7c:ef:54:04:5f:
                    e2:ac:ad:b3:31:9e:92:73:7e:96:58:5a:4f:59:31:
                    49:62:a9:85:39:f3:93:3a:94:72:be:fd:11:a1:3e:
                    83:47:24:f5:90:17:47:5c:95:34:a2:1a:d5:4f:ae:
                    76:e6:25:01:36:42:2e:69:9b:e1:31:cd:91:06:fc:
                    93:6e:ac:83:f2:fe:d0:5e:ab:fd:0f:c2:94:b4:0d:
                    98:aa:d6:ba:76:e3:ea:60:a2:73:78:f8:13:4e:87:
                    b9:c8:7d:33:f0:05:79:34:81:1a:fb:7e:c0:48:cb:
                    13:de:a5:54:ff:fc:e8:40:51:28:c6:87:dc:2d:b2:
                    35:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:60:D3:07:97:8C:80:E2:D6:BC:85:08:9C:7E:18:88:F9:96:FA:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/9c97edaf-665e-35c8-ad4e-c89baeccd9fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.69.178.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:9d:e4:c5:51:27:16:9b:6d:7b:fb:f1:6b:4f:f6:a3:92:8b:
         fc:3e:47:81:61:6b:3f:71:22:2c:12:19:7d:a4:45:ef:df:5e:
         f4:a9:b8:da:2f:40:da:e9:52:16:0f:db:b7:1b:fa:15:38:04:
         43:87:53:27:66:76:0d:55:f3:b8:d8:2c:3b:26:0c:28:c4:f1:
         9c:a5:59:33:d5:b5:24:c9:73:fc:a7:58:e2:71:c0:6a:22:c0:
         cc:72:91:c3:02:06:29:19:b2:4f:16:f4:d5:68:b8:22:45:a9:
         a7:bd:a1:90:b9:e9:7e:32:83:52:34:35:55:18:88:18:06:4e:
         d9:74:a1:6c:8a:f9:42:3d:4b:64:bf:9f:04:71:d8:4f:54:f6:
         eb:b5:f5:57:f2:17:a4:cf:cd:f7:77:f8:2f:13:0c:1d:76:0a:
         75:f6:3d:3f:40:69:cb:e9:46:16:11:62:43:27:7f:d3:66:41:
         de:e0:b2:9f:f2:03:8f:27:46:91:c4:2c:2d:19:15:a8:32:7f:
         e4:e4:f4:b5:f8:71:ab:dc:15:27:90:60:37:af:34:87:d4:6a:
         e4:3b:2a:3e:18:5e:b1:a6:86:c2:9d:26:47:fe:ba:cc:b1:d7:
         44:6f:2d:96:cf:fa:e3:75:d8:2d:fe:1a:20:16:65:c8:4f:bf:
         84:f8:6a:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:26:57 2026 by rpki-client