Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/977bc849-5b1d-34c5-91eb-81e2477f1b1a.roa
File:                     977bc849-5b1d-34c5-91eb-81e2477f1b1a.roa (raw, json)
Hash identifier:          7rgwxkw27blIxROug07QHvlHeA3j4fej/acelTLEgCo=
Subject key identifier:   D2:A1:FC:AF:69:71:67:B1:F6:2F:18:57:19:A0:BC:B6:B0:B7:B4:3C
Certificate issuer:       /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
Certificate serial:       010D0C9F4328584D24E0E56061AE8E634A98A600
Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/977bc849-5b1d-34c5-91eb-81e2477f1b1a.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     36492
IP address blocks:        209.107.176.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e0:e5:60:61:ae:8e:63:4a:98:a6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=32a5d571-05b4-4145-9864-c2f975d1e88b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:0b:7f:f3:b7:97:ef:2f:f1:18:5d:51:8b:82:
                    75:0a:a0:a5:10:31:70:32:c3:4a:84:ee:90:a4:5a:
                    c3:51:6a:e0:ae:b3:99:47:46:9e:16:b7:f2:e6:fd:
                    bf:68:5a:0e:e9:04:46:60:f2:15:0f:3c:21:de:b4:
                    39:ce:37:86:56:e0:9e:32:c6:35:77:05:c5:c3:43:
                    1b:78:67:3a:c0:89:0c:02:4f:c1:92:fe:71:d2:be:
                    b9:53:8e:bb:fa:bb:5b:cf:d7:91:96:84:c3:55:35:
                    00:5b:6f:cf:53:77:07:29:2a:1f:5d:f0:f2:0c:d8:
                    19:09:78:97:c9:94:a9:2e:fd:01:ca:6f:09:a4:b7:
                    8f:9e:db:17:98:46:97:a9:d0:e2:d0:b2:3c:f2:96:
                    71:45:9e:a5:c5:0b:23:39:13:cc:48:3c:6c:f3:b7:
                    e8:77:bf:46:bc:1c:53:63:07:2b:d7:57:fd:4c:fc:
                    01:31:ad:10:47:aa:f7:5b:4a:8a:8b:53:4e:02:36:
                    56:fe:39:d5:b8:a1:2e:59:bc:85:4b:62:f9:81:50:
                    a0:cb:c6:29:ee:d8:10:c5:7e:7c:b7:d8:3b:eb:50:
                    74:63:57:24:da:9d:c2:cb:7a:49:20:af:1c:fc:a5:
                    07:0d:59:ac:3a:15:55:ed:3e:0d:e3:ae:1a:44:93:
                    37:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:A1:FC:AF:69:71:67:B1:F6:2F:18:57:19:A0:BC:B6:B0:B7:B4:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/977bc849-5b1d-34c5-91eb-81e2477f1b1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl

            X509v3 Authority Key Identifier:
                keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.107.176.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:15:4b:b7:80:9f:d2:db:fb:1f:1f:fd:b1:7a:35:4f:89:5f:
         1c:21:ea:4e:06:be:a9:a5:5e:4f:ed:d8:0e:b0:26:30:a1:8a:
         bc:8d:8a:8e:fe:69:e1:48:e6:b1:17:37:df:84:68:1e:7f:19:
         3d:c9:00:fc:07:24:3e:33:95:82:4b:84:2f:74:8f:82:f2:f1:
         84:83:06:4b:b5:43:a1:03:47:ed:d6:01:3a:d5:60:1f:73:4f:
         90:3d:75:cc:e5:91:d9:e2:2e:bc:26:37:f5:02:00:c7:c3:35:
         5e:a6:2a:d2:4b:eb:10:52:e3:d7:84:55:72:3e:97:c9:ed:1f:
         a0:da:71:d2:07:87:2d:7f:bb:8d:16:bd:20:81:6a:87:0e:3c:
         43:27:84:f6:51:b4:39:e4:ce:02:80:8a:4d:2d:df:45:c4:b0:
         9e:40:84:06:61:d5:b3:1e:ba:52:a6:55:50:47:76:00:61:b1:
         dd:35:ab:75:ba:4d:26:4a:f4:9d:79:0d:1a:9f:1c:f7:cb:99:
         95:7b:e7:c4:2f:7b:a3:73:6f:f3:a4:1c:05:ea:f3:84:af:8c:
         ba:29:81:c1:c0:4a:23:aa:5e:eb:6b:d0:82:83:df:dd:86:95:
         f1:f4:4c:95:5c:8d:03:c3:62:03:fd:8c:40:8d:fd:12:3e:07:
         a1:b0:49:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:43:58 2026 by rpki-client