Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b/2ef17a04-c0c5-3991-89d3-35cea9268db7.roa
File:                     2ef17a04-c0c5-3991-89d3-35cea9268db7.roa (raw, json)
Hash identifier:          vLEpzNOSPV/g0TIGbq5BW//LiS+e7gVUod9joP6JoWg=
Subject key identifier:   5F:7F:3A:D2:DB:3F:87:89:C3:D1:01:5E:1B:EE:39:28:9D:50:71:B0
Certificate issuer:       /CN=f962bda9-74d1-450f-9fe9-e8b75952543b
Certificate serial:       010D0C9F4328584D49486629B7BC23E587275180
Authority key identifier: 36:14:15:B6:3C:F9:48:FC:92:2D:2F:89:E5:04:12:0A:EF:F6:8B:DA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b/2ef17a04-c0c5-3991-89d3-35cea9268db7.roa
Signing time:             Wed 25 Mar 2026 14:01:28 +0000
ROA not before:           Wed 25 Mar 2026 14:01:28 +0000
ROA not after:            Tue 23 Jun 2026 14:01:28 +0000
asID:                     40676
IP address blocks:        199.249.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b/f962bda9-74d1-450f-9fe9-e8b75952543b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b/f962bda9-74d1-450f-9fe9-e8b75952543b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:49:48:66:29:b7:bc:23:e5:87:27:51:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f962bda9-74d1-450f-9fe9-e8b75952543b
        Validity
            Not Before: Mar 25 14:01:28 2026 GMT
            Not After : Jun 23 14:01:28 2026 GMT
        Subject: CN=eeb5e3f7-e86c-410e-954d-b329542f4f72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:ce:cb:7a:72:94:ba:70:cb:af:d3:2a:8c:81:
                    f7:12:9a:4f:be:b7:54:5c:4f:cf:4f:c8:3f:b2:19:
                    e6:bd:77:e0:79:cf:ff:9b:2a:b7:59:d4:73:b0:7b:
                    de:ab:99:47:a3:1d:6c:04:6f:c4:7b:50:73:74:2e:
                    a6:a8:a6:7a:34:19:29:c9:51:59:78:9d:1e:33:52:
                    ad:12:2f:cb:e9:b9:f5:49:24:48:1a:a5:7e:83:99:
                    98:a1:52:7f:23:80:27:06:93:cd:ab:27:c0:ec:a1:
                    bc:fb:12:5c:2d:4d:06:69:ba:cb:c8:2a:1c:c1:30:
                    4f:79:d5:cf:5f:7a:6c:b5:a3:3c:1e:7b:d5:39:3e:
                    e6:a7:8d:1d:4d:4d:9f:25:f9:6f:d2:bf:ce:36:c4:
                    37:f0:94:c9:14:ec:1e:c2:56:de:1b:84:fe:76:0a:
                    69:3e:1c:c4:5e:cd:63:3d:31:5e:a9:1f:45:3a:05:
                    b9:56:34:23:ea:28:ec:f4:74:8d:da:38:97:da:ca:
                    7a:b0:e6:c8:09:4e:c9:9b:14:6e:61:ce:7e:c4:44:
                    39:b2:50:9e:ba:20:55:22:31:a7:60:b4:d2:73:af:
                    28:01:b5:6e:35:01:b1:de:73:dd:36:ad:e6:64:a4:
                    94:9c:44:1c:10:65:b1:9a:06:bd:db:ee:d6:4e:9e:
                    bd:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:7F:3A:D2:DB:3F:87:89:C3:D1:01:5E:1B:EE:39:28:9D:50:71:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b/2ef17a04-c0c5-3991-89d3-35cea9268db7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b/f962bda9-74d1-450f-9fe9-e8b75952543b.crl

            X509v3 Authority Key Identifier:
                keyid:36:14:15:B6:3C:F9:48:FC:92:2D:2F:89:E5:04:12:0A:EF:F6:8B:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.249.182.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:bf:1a:4f:2b:ea:ea:d0:c6:46:88:5e:ad:5c:6f:00:ee:bc:
         a3:6f:f6:59:52:5f:97:cd:24:77:90:0d:23:e3:29:2d:76:bd:
         a0:36:a8:dc:23:e7:a7:12:fb:02:3d:43:b3:ee:8d:48:1e:8a:
         01:7c:2d:b6:6b:c7:de:62:da:6e:de:28:c9:ba:b6:17:8b:9c:
         60:37:fd:dc:49:b2:db:2a:ee:4a:4c:50:d2:f3:aa:d9:29:21:
         2e:d2:30:d7:5f:5d:e2:f0:eb:78:67:00:69:28:1c:07:86:6a:
         e2:a3:c9:95:d6:95:41:4c:a5:86:0a:b8:44:7d:83:59:5d:33:
         63:b4:fb:28:19:20:65:8e:fc:a4:4a:c2:f5:36:01:91:e0:6a:
         2a:ca:d2:cf:04:dc:5a:ef:80:67:32:48:a4:bc:44:94:b8:f6:
         2d:69:4a:07:b9:0b:6c:dc:43:17:b8:51:59:24:84:6f:e4:73:
         6e:ea:75:5a:48:4c:51:15:ee:ea:a2:08:d3:9f:82:65:8e:30:
         3f:56:df:cb:b9:da:d6:2a:b9:8a:69:85:76:5f:6a:66:8d:97:
         95:a9:7f:53:a4:11:ec:eb:47:b4:e4:32:5d:af:9f:74:37:8d:
         b5:da:ff:34:a3:02:ef:3b:7f:54:95:8c:e7:98:90:18:ed:98:
         83:d3:48:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:03:19 2026 by rpki-client