Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/308feeb8-70f9-3009-aff2-80c008242007.roa
File:                     308feeb8-70f9-3009-aff2-80c008242007.roa (raw, json)
Hash identifier:          dCkTQLRYrZdU4j2VDuENn3FDOVrv5KyeQm2kcfIm5Ko=
Subject key identifier:   06:00:E6:4E:47:6D:42:97:D7:97:5F:83:0B:3A:98:88:A4:42:F7:30
Certificate issuer:       /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial:       010D0C9F4328584D343A1E6AACC7CFCFB44BBC80
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/308feeb8-70f9-3009-aff2-80c008242007.roa
Signing time:             Wed 18 Mar 2026 01:00:33 +0000
ROA not before:           Wed 18 Mar 2026 01:00:33 +0000
ROA not after:            Tue 16 Jun 2026 01:00:33 +0000
asID:                     28753
IP address blocks:        141.193.99.0/24 maxlen: 24
                          172.98.168.0/24 maxlen: 24
                          172.98.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:34:3a:1e:6a:ac:c7:cf:cf:b4:4b:bc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
        Validity
            Not Before: Mar 18 01:00:33 2026 GMT
            Not After : Jun 16 01:00:33 2026 GMT
        Subject: CN=35bf8ae9-b69d-4e97-a9bf-470fb5ca5ff3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:66:11:97:81:ce:ab:50:e6:88:4b:74:98:6f:
                    f7:3f:bf:39:a1:26:be:25:90:f7:03:c7:d9:50:ea:
                    52:88:6f:ac:75:0d:2b:64:9e:6d:e4:e5:3a:ab:1f:
                    f0:d5:8f:07:8c:eb:c1:86:84:37:aa:93:7b:66:f0:
                    5d:3a:4e:8b:a2:79:3b:5e:2d:73:7d:72:8b:99:4b:
                    d7:3d:ab:22:61:fc:96:05:d1:76:82:84:0a:bc:97:
                    6b:9a:a1:bd:dd:b6:d0:ae:8c:68:2a:e1:07:09:c5:
                    42:d2:83:23:01:9d:02:f5:f0:91:ed:4c:74:c8:e3:
                    f4:b2:45:30:7d:70:08:22:38:35:65:a5:44:15:05:
                    47:29:7d:99:0b:60:a2:e3:c5:1e:2c:19:96:d3:41:
                    ff:da:ba:c0:7a:d1:ff:3f:ee:fb:61:fd:b1:1c:41:
                    98:5f:c7:f9:d1:bb:80:91:20:3e:40:3f:ed:d5:07:
                    b6:5a:6b:83:50:36:d8:4e:20:cc:fd:86:e6:62:6b:
                    a7:37:c9:1d:b9:f5:25:3a:73:b1:d2:af:b6:9c:cd:
                    12:47:97:24:21:c0:f5:ea:fc:ee:f8:df:df:01:28:
                    a8:71:4c:3f:68:59:07:65:e4:1f:df:7d:53:22:e3:
                    6a:55:e1:db:07:d7:d9:a0:4c:f4:e1:39:22:e3:af:
                    47:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:00:E6:4E:47:6D:42:97:D7:97:5F:83:0B:3A:98:88:A4:42:F7:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/308feeb8-70f9-3009-aff2-80c008242007.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl

            X509v3 Authority Key Identifier:
                keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.193.99.0/24
                  172.98.168.0/24
                  172.98.180.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:c7:d1:75:fd:fa:65:28:6f:51:d1:2b:57:ed:0e:3a:f4:21:
         d1:ae:e5:10:74:fd:ca:bf:a3:ef:8d:a8:b8:0e:55:ec:b4:af:
         d2:d0:3d:c4:43:5b:bc:08:df:85:bb:7b:49:65:ba:ba:46:c1:
         06:38:64:0b:37:bb:cd:68:2c:11:bd:7c:1d:45:98:ba:1c:c7:
         b6:0f:e6:bf:57:ff:90:48:bc:5a:df:98:e3:e8:48:ca:e2:2f:
         1d:49:53:1d:27:4d:eb:ca:6c:4e:4e:26:7d:49:65:77:b9:e3:
         32:9c:cd:f4:2f:ac:24:a2:38:1d:68:73:8b:7f:c8:fc:3b:63:
         45:80:47:65:c3:22:0d:e7:35:23:bf:c1:c5:98:23:e1:a6:aa:
         fe:50:c5:62:4c:b8:09:3a:84:8c:60:40:49:07:90:b5:5e:26:
         ee:0f:73:9b:86:81:75:b9:6c:22:08:5b:f4:55:84:77:e5:a6:
         e4:b3:be:28:8c:82:58:2b:f7:9b:fa:8d:3c:aa:ec:1e:4b:c0:
         55:64:0c:dd:7d:ac:1c:01:0f:03:c3:7c:83:12:4e:93:b6:75:
         7f:fe:7a:cf:64:d4:25:d2:4e:0c:6d:73:17:01:95:f1:cd:c2:
         0e:10:29:18:27:ee:e1:ac:7a:ab:43:38:50:d1:e6:f7:e4:5a:
         1d:69:21:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:42:05 2026 by rpki-client