Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef1af8ad-1716-3d65-a0e9-3cdee82182f0.roa
File:                     ef1af8ad-1716-3d65-a0e9-3cdee82182f0.roa (raw, json)
Hash identifier:          Zyn65nmrlTm2NYKthTk/VKRJzwve4TYeZunKWCSRS7M=
Subject key identifier:   DF:1D:18:E1:FD:5D:06:A8:28:52:E8:5A:9E:9B:F9:1F:80:34:51:D2
Certificate issuer:       /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
Certificate serial:       010D0C9F4328584D24E0F4CC82DF34A4C93F1E00
Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef1af8ad-1716-3d65-a0e9-3cdee82182f0.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     36492
IP address blocks:        172.102.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e0:f4:cc:82:df:34:a4:c9:3f:1e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=35c457f6-b042-4987-aa64-763b629a2c96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:60:44:40:ba:13:74:1d:58:aa:3f:e8:29:a6:
                    7f:5b:1b:78:09:2e:d2:26:cb:c9:58:43:82:ec:f3:
                    4e:70:77:d0:3b:26:7e:f9:f5:bf:a2:3e:71:9f:46:
                    6a:32:52:3f:83:2c:7a:45:6f:9e:35:67:fc:fe:ec:
                    08:fe:32:69:fe:34:24:5e:9f:74:41:e5:ec:5c:18:
                    7a:a5:76:bb:e2:a4:24:b2:6b:63:48:4c:f3:50:99:
                    6c:62:0a:39:a1:8b:30:89:22:ae:c3:b7:5c:95:78:
                    38:2a:7f:22:d8:49:4a:84:e1:9a:13:da:48:50:fd:
                    73:ff:9e:ce:eb:1c:ba:89:ff:ed:34:07:84:df:a7:
                    71:31:84:95:5b:03:7c:f7:e4:28:e3:d7:09:be:fe:
                    76:da:47:6a:71:b5:5b:56:75:78:58:e7:1c:b6:af:
                    cf:ef:2e:08:bc:16:26:9d:9a:af:56:2a:93:90:86:
                    22:5a:68:87:dc:28:19:27:be:29:72:c5:aa:43:1d:
                    94:a4:dc:c3:95:05:7c:8a:f8:9a:9a:e2:b0:a4:05:
                    2d:7c:66:1f:3c:07:34:06:a6:d7:42:a8:03:f0:7c:
                    ea:4d:6f:0b:d6:7a:ee:cd:b5:0a:65:ce:1a:9b:71:
                    0d:0a:92:eb:e1:ce:ac:10:07:24:c6:0d:8b:54:5c:
                    08:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:1D:18:E1:FD:5D:06:A8:28:52:E8:5A:9E:9B:F9:1F:80:34:51:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef1af8ad-1716-3d65-a0e9-3cdee82182f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl

            X509v3 Authority Key Identifier:
                keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.102.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:5d:86:fc:d1:3f:f0:41:81:18:fc:17:f5:45:d3:0e:5b:3a:
         21:8e:9f:e2:6d:dd:68:69:ea:10:5b:70:95:79:4f:3c:9f:bd:
         ac:45:da:39:dc:93:3a:c2:85:a9:1a:25:e3:da:3e:1b:23:a7:
         81:03:0b:5f:df:06:83:44:76:50:14:57:05:09:2d:34:5e:dc:
         de:62:83:8d:b2:73:d0:06:9c:4e:53:46:f6:db:ea:93:ab:41:
         49:dd:5c:ca:9f:f6:21:1b:29:5e:c9:45:f6:82:70:39:40:55:
         fb:32:ff:f0:a0:95:e6:29:1c:2f:c6:39:e6:2f:3d:48:43:9a:
         56:4f:e6:8a:2e:3d:a8:cc:86:74:cb:28:a3:53:8b:30:b8:41:
         57:8c:f9:68:43:33:68:8b:92:72:1f:33:2a:f6:a8:41:d7:45:
         be:6b:0c:4b:36:81:dc:79:56:e3:89:bb:18:66:9c:78:6e:af:
         f1:71:ff:f6:fd:30:6a:52:30:b4:cd:00:18:ce:79:b3:2e:b1:
         42:c7:88:45:56:37:0b:d9:64:45:3b:e5:70:3e:09:42:cc:10:
         ea:cf:a7:64:ef:82:e2:e8:77:bc:b4:f9:12:e3:65:19:25:d4:
         0d:74:a3:70:e5:09:8e:69:06:0d:10:76:ce:45:27:e8:10:b2:
         13:27:49:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:19:26 2026 by rpki-client