Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/977fc0d5-f38a-3cd3-a9b9-5c0bb7ef145b.roa
File:                     977fc0d5-f38a-3cd3-a9b9-5c0bb7ef145b.roa (raw, json)
Hash identifier:          gIO4K5oKEFUeGNA0VEidQyuuwUAKPM6tU6pbxNt9AP4=
Subject key identifier:   69:DA:43:3B:A6:BB:03:07:82:47:22:5B:D6:EA:0D:AF:E3:88:F5:12
Certificate issuer:       /CN=5fab6378-e15d-4471-b01f-be15fc5bfa04
Certificate serial:       010D0C9F4328584DBD058EDB534F7ADFB8B94680
Authority key identifier: 61:40:43:BF:E2:50:B3:47:64:FC:D1:73:0F:62:98:03:50:32:18:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/977fc0d5-f38a-3cd3-a9b9-5c0bb7ef145b.roa
Signing time:             Wed 06 May 2026 01:00:24 +0000
ROA not before:           Wed 06 May 2026 01:00:24 +0000
ROA not after:            Tue 04 Aug 2026 01:00:24 +0000
asID:                     7029
IP address blocks:        207.170.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/5fab6378-e15d-4471-b01f-be15fc5bfa04.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/5fab6378-e15d-4471-b01f-be15fc5bfa04.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bd:05:8e:db:53:4f:7a:df:b8:b9:46:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5fab6378-e15d-4471-b01f-be15fc5bfa04
        Validity
            Not Before: May  6 01:00:24 2026 GMT
            Not After : Aug  4 01:00:24 2026 GMT
        Subject: CN=ee01935b-d125-4f7e-b85c-598b21d7824a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:50:4c:90:8f:bf:ad:54:ea:fa:6c:ac:8a:bf:
                    a1:46:26:83:6e:32:79:e8:c0:68:79:21:6b:d3:5a:
                    d8:0d:49:b2:93:a7:66:fd:87:df:b6:10:27:71:b7:
                    d7:1b:4a:18:7b:12:92:9d:c1:c1:09:45:d7:ee:74:
                    ba:59:c1:4f:78:30:2b:68:22:24:c8:d4:3b:52:5d:
                    db:9b:52:24:a7:ed:2c:83:4e:a2:ad:84:a8:7a:28:
                    73:2d:72:a7:da:14:29:f9:ac:e5:1c:14:58:5e:3e:
                    d8:80:ea:8d:34:4d:f5:8e:69:13:82:b2:8a:37:19:
                    52:ee:ad:5d:7c:27:a8:b7:22:a1:cc:d4:45:30:fb:
                    35:c8:fe:3d:00:1f:64:04:df:9f:f6:f2:ea:d6:6f:
                    8f:73:55:02:69:fa:43:8e:8f:f2:59:ee:df:ed:cc:
                    ff:4c:6a:54:53:1b:37:7a:32:88:a3:64:7a:5f:73:
                    dc:d9:1c:a7:67:e9:d3:9c:5f:c7:d3:38:8a:d4:b6:
                    c4:19:dd:9e:8b:99:81:88:53:3f:24:ab:20:d1:49:
                    cf:a2:4d:13:ad:fe:ae:7c:f1:5f:ac:c3:e3:ad:35:
                    13:8c:13:57:7a:15:3e:f2:8f:c2:f5:67:40:65:bb:
                    fc:ee:20:4f:2e:dd:fc:1e:a9:9f:f8:b4:18:bf:54:
                    30:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:DA:43:3B:A6:BB:03:07:82:47:22:5B:D6:EA:0D:AF:E3:88:F5:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/977fc0d5-f38a-3cd3-a9b9-5c0bb7ef145b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/5fab6378-e15d-4471-b01f-be15fc5bfa04.crl

            X509v3 Authority Key Identifier:
                keyid:61:40:43:BF:E2:50:B3:47:64:FC:D1:73:0F:62:98:03:50:32:18:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.170.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:b9:33:cd:48:8b:c3:8a:49:95:1c:38:dc:cb:eb:9e:b1:62:
         83:c2:a4:a3:e9:45:17:99:da:e7:ae:92:47:62:d3:8a:0e:70:
         b2:d4:64:64:2b:73:89:3b:12:d9:19:cb:38:de:7c:f7:3c:5d:
         e0:4a:76:94:29:24:c1:98:bb:3f:36:ac:bc:9d:85:fc:23:5c:
         23:92:3b:9f:a5:3f:69:f7:93:be:73:8c:a0:dd:d2:6d:4a:2b:
         71:d0:09:f9:6c:ac:ee:5b:3c:df:63:78:3e:95:3e:96:1f:2f:
         67:14:2d:67:8e:60:f4:78:88:7d:1b:01:63:1d:8c:eb:fd:83:
         f2:e7:ed:d9:ea:14:f9:25:0f:f0:4a:df:41:50:40:df:e7:62:
         af:4c:a1:ec:d3:9b:4d:51:4b:cb:72:e0:20:49:a4:ab:3b:b7:
         83:07:85:28:b7:65:f6:4e:95:8b:66:97:e8:a2:0a:46:50:f0:
         d1:f8:19:b8:0f:0f:a8:b8:14:6e:86:c1:0a:67:1f:95:13:46:
         51:6c:ac:29:32:3a:4d:02:4c:0d:5a:26:27:ce:06:b0:b0:9e:
         dd:e2:e8:11:81:3e:38:19:ad:6b:57:35:5f:15:ab:05:26:86:
         c0:fd:8e:67:ae:f8:17:d4:fd:57:43:7f:9a:cf:e4:22:fc:28:
         25:2f:df:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:04:05 2026 by rpki-client