Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5d6a5d7a-51a2-4a83-b5b5-d8c154b8d306/7dc5f10e-ddce-3970-80f8-6a11e52e6c28.roa
File:                     7dc5f10e-ddce-3970-80f8-6a11e52e6c28.roa (raw, json)
Hash identifier:          WC6/eAB/+2zMuc6j0nUEceyCiIaFhhv3RZ2MXZDRqzQ=
Subject key identifier:   E4:4B:EF:04:D5:39:41:5E:2A:79:6A:0D:CE:84:56:AC:FC:9D:4D:38
Certificate issuer:       /CN=5d6a5d7a-51a2-4a83-b5b5-d8c154b8d306
Certificate serial:       010D0C9F4328584D386A4E45B3A3F8641CD93400
Authority key identifier: A0:92:D8:21:7C:49:33:E4:FA:A7:F1:31:06:BB:75:92:C6:C8:0F:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5d6a5d7a-51a2-4a83-b5b5-d8c154b8d306.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5d6a5d7a-51a2-4a83-b5b5-d8c154b8d306/7dc5f10e-ddce-3970-80f8-6a11e52e6c28.roa
Signing time:             Thu 19 Mar 2026 13:00:41 +0000
ROA not before:           Thu 19 Mar 2026 13:00:41 +0000
ROA not after:            Wed 17 Jun 2026 13:00:41 +0000
asID:                     399213
IP address blocks:        104.167.227.0/24 maxlen: 24
                          2602:f8d9::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5d6a5d7a-51a2-4a83-b5b5-d8c154b8d306/5d6a5d7a-51a2-4a83-b5b5-d8c154b8d306.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5d6a5d7a-51a2-4a83-b5b5-d8c154b8d306/5d6a5d7a-51a2-4a83-b5b5-d8c154b8d306.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5d6a5d7a-51a2-4a83-b5b5-d8c154b8d306.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:38:6a:4e:45:b3:a3:f8:64:1c:d9:34:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d6a5d7a-51a2-4a83-b5b5-d8c154b8d306
        Validity
            Not Before: Mar 19 13:00:41 2026 GMT
            Not After : Jun 17 13:00:41 2026 GMT
        Subject: CN=548ad711-ff06-4f4c-b828-e66c88f8e21a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:72:ae:40:42:fc:90:89:1a:b6:e8:c8:cb:ca:
                    59:b2:71:27:ff:b9:a2:5b:9c:25:75:7f:36:c1:5f:
                    e7:6b:0b:f3:80:f5:3f:c3:6e:f2:8e:d8:a5:76:4f:
                    65:ef:99:bb:9a:7f:1c:83:9b:64:ae:e5:01:5a:09:
                    b2:8b:7d:14:8e:9b:3c:d2:c9:eb:4e:59:c4:39:dc:
                    d0:5c:7f:39:f8:29:17:9a:d3:56:c6:70:5e:06:ed:
                    ca:16:c6:e3:c3:df:e3:e4:2d:b9:20:bc:64:e9:86:
                    fd:58:1b:94:59:d7:7c:6f:82:30:b2:36:67:1d:6b:
                    71:33:a0:9d:38:bc:fe:da:30:e8:85:59:8a:30:ab:
                    ac:1a:09:d5:a0:87:53:9c:60:3d:a9:0a:64:18:0f:
                    32:5d:50:60:2f:e3:fa:5f:2d:1f:25:2d:8e:6c:b5:
                    10:6b:4b:14:24:9b:93:c6:f2:ff:66:39:ea:78:2a:
                    f9:6f:bb:b8:99:78:f9:a2:c9:d0:bc:41:08:d3:b7:
                    95:c6:32:0b:f2:bb:93:f8:2b:9a:ed:f4:50:66:c3:
                    32:6d:49:8b:4b:04:e8:9c:ec:b5:04:5a:c2:ae:bd:
                    32:5a:fc:8d:a9:6e:14:45:0d:e1:7d:59:0c:9c:de:
                    d9:a7:c6:f9:98:aa:6f:b9:2c:8e:50:cd:c9:07:b2:
                    d9:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:4B:EF:04:D5:39:41:5E:2A:79:6A:0D:CE:84:56:AC:FC:9D:4D:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5d6a5d7a-51a2-4a83-b5b5-d8c154b8d306/7dc5f10e-ddce-3970-80f8-6a11e52e6c28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5d6a5d7a-51a2-4a83-b5b5-d8c154b8d306/5d6a5d7a-51a2-4a83-b5b5-d8c154b8d306.crl

            X509v3 Authority Key Identifier:
                keyid:A0:92:D8:21:7C:49:33:E4:FA:A7:F1:31:06:BB:75:92:C6:C8:0F:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5d6a5d7a-51a2-4a83-b5b5-d8c154b8d306.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.167.227.0/24
                IPv6:
                  2602:f8d9::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:64:61:7e:eb:41:df:f4:86:8a:aa:6b:d5:9d:9e:75:fd:8e:
         c5:c3:23:2a:36:b8:f4:e4:f7:89:32:de:8c:53:e9:cb:f6:7c:
         d6:e3:2e:5f:a1:76:eb:a1:ee:19:b3:b3:9c:1d:9a:f1:00:8b:
         34:8a:25:7c:f6:b2:84:1e:57:d4:26:cb:f9:35:4c:c3:d4:02:
         72:a7:5a:31:14:b9:4f:48:fc:30:e6:c3:87:91:d5:2f:9f:ac:
         83:e9:b4:27:8c:76:d5:3a:8e:6e:fd:17:25:68:7d:c2:0e:c4:
         4c:77:7c:83:9a:59:fb:b6:b1:76:55:f1:ae:d6:4e:91:9a:ab:
         ab:49:2e:d0:5f:46:6d:63:d8:0d:68:d1:e6:e1:80:9b:c5:33:
         10:16:21:fe:05:66:05:a8:4c:5b:db:96:f1:77:de:d8:82:53:
         50:84:81:cd:84:8b:1f:6e:65:36:0c:b9:4c:38:05:18:b7:bf:
         ee:d7:81:f3:b0:46:2f:ff:d5:1c:48:60:41:c0:14:91:9d:9a:
         ab:ca:92:92:aa:bd:b0:79:0f:57:9f:33:13:91:9c:ac:e6:91:
         5b:b8:b3:ab:01:79:b4:e8:87:f4:d3:08:a7:11:ff:f1:fc:b5:
         23:59:29:c6:45:e3:91:b9:cb:d8:9c:78:68:1e:01:7f:88:59:
         e2:5a:a1:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:34:27 2026 by rpki-client