Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d3632fbd-0ac2-3876-acf9-e3b61d6d4076.roa
File:                     d3632fbd-0ac2-3876-acf9-e3b61d6d4076.roa (raw, json)
Hash identifier:          QTlEgVDBWB2U23zpAGeG5R+JBBRKWsbpyXBlpS2ajd4=
Subject key identifier:   08:82:3E:85:D1:FF:4B:38:DA:03:78:6C:D4:EA:63:E8:69:A6:B8:F6
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584D3DFFEE1BB1AD5DCD8F257380
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d3632fbd-0ac2-3876-acf9-e3b61d6d4076.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     33363
IP address blocks:        107.144.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3d:ff:ee:1b:b1:ad:5d:cd:8f:25:73:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=1211cfbf-eb1a-401f-bfad-5af947d8fcdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:2d:d7:35:33:39:ef:2a:0a:d7:6f:f0:73:78:
                    06:7a:2d:d0:00:21:e7:20:8e:75:5e:64:47:f6:0c:
                    63:2b:d7:ce:e8:5a:02:4a:42:e8:6a:27:e5:b8:ec:
                    92:e8:7a:92:81:4d:dd:fd:0a:d7:3c:4d:b2:89:cc:
                    08:9a:b0:f5:bb:1c:67:a2:2d:d4:48:58:6e:3c:11:
                    34:cd:d3:e8:d7:77:a0:8e:a3:e8:3a:e6:ea:b2:39:
                    b5:34:7b:b9:c0:4b:4e:75:a9:c5:3a:ef:93:a1:34:
                    35:ec:bf:fe:0d:3d:c9:99:ea:4c:84:dc:4e:9f:11:
                    ef:ab:24:2f:16:96:17:f7:d4:dd:c3:b6:47:a0:b9:
                    04:4b:7c:6a:9e:65:34:f8:e5:d9:86:d3:b3:16:d0:
                    1d:38:7a:b7:1a:fb:47:dd:c3:ca:30:3f:64:9b:f8:
                    fd:6f:3e:8e:1c:b0:f2:fd:40:df:0e:14:68:65:53:
                    26:60:e5:97:5d:e7:a2:75:54:69:34:d4:f7:a0:b1:
                    36:75:61:fb:4d:bf:ab:7b:79:42:6a:ac:9d:f9:cf:
                    85:8e:9f:64:a1:ee:1c:31:28:4e:3c:bf:3d:19:c5:
                    ca:8f:70:bd:7b:52:f8:ff:31:a7:42:d1:58:bd:b6:
                    34:3e:30:fb:a5:7e:28:f9:d3:84:57:4d:b8:47:fa:
                    7b:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:82:3E:85:D1:FF:4B:38:DA:03:78:6C:D4:EA:63:E8:69:A6:B8:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d3632fbd-0ac2-3876-acf9-e3b61d6d4076.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.144.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:b8:5f:bc:d6:2a:22:94:49:81:76:99:f4:49:57:63:aa:d1:
         c4:13:54:5f:b8:78:9a:81:3f:5f:cd:d9:bb:cb:fe:e2:73:53:
         f4:91:9e:40:a2:fc:95:65:63:94:0a:dc:d1:cd:f3:7b:45:c9:
         6d:97:95:f2:c9:22:26:f0:83:31:17:f2:73:31:1a:2b:70:f9:
         86:42:5e:e8:bf:38:a4:55:62:a1:99:17:9a:cf:75:e5:8d:c7:
         01:bb:dc:1f:da:02:2e:08:46:a8:41:8d:99:5b:40:e1:b9:78:
         84:9d:c9:6e:93:9e:d4:85:03:04:17:19:6b:ca:27:69:f7:a9:
         a5:0e:dc:9a:b9:cd:de:9a:eb:ee:c2:10:da:f7:c1:7f:70:d4:
         45:f8:68:13:af:7e:1e:f0:e4:7b:e4:c3:9b:88:e2:28:08:18:
         89:59:b3:18:d8:71:94:dd:0b:27:92:88:38:50:f8:2d:1e:c1:
         9e:60:91:e4:0e:6c:dd:16:a1:49:6f:75:e6:1d:ee:8d:91:8b:
         07:72:aa:f6:56:dc:46:1d:77:3e:62:ac:77:b0:75:c0:1d:46:
         7c:63:17:e7:4c:88:ef:7e:e7:cb:cc:b0:50:a0:1f:c8:57:d5:
         79:89:86:6d:76:a2:66:c6:5b:be:7e:1c:e1:9f:ca:ba:5b:fe:
         27:71:75:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:19:39 2026 by rpki-client