Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/141d1fb1-9841-4771-b75f-7e85f1329175/a98fe038-3c0c-3a7e-9276-a2e4ea788b9a.roa
File:                     a98fe038-3c0c-3a7e-9276-a2e4ea788b9a.roa (raw, json)
Hash identifier:          l/ajb7Q4Wty7UMZMP33/hILORGx98zOmm5pTIhbtumA=
Subject key identifier:   F4:E7:D0:8F:B5:78:94:48:DA:85:FB:3D:3F:ED:3F:77:D9:25:83:F8
Certificate issuer:       /CN=141d1fb1-9841-4771-b75f-7e85f1329175
Certificate serial:       010D0C9F4328584D0D424B08844FA07F1DDFD620
Authority key identifier: 32:F7:5B:FA:D4:1D:B4:2F:67:4A:39:86:40:97:21:08:A4:FB:86:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/141d1fb1-9841-4771-b75f-7e85f1329175.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/141d1fb1-9841-4771-b75f-7e85f1329175/a98fe038-3c0c-3a7e-9276-a2e4ea788b9a.roa
Signing time:             Wed 04 Mar 2026 02:00:32 +0000
ROA not before:           Wed 04 Mar 2026 02:00:32 +0000
ROA not after:            Tue 02 Jun 2026 01:00:32 +0000
asID:                     0
IP address blocks:        206.223.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/141d1fb1-9841-4771-b75f-7e85f1329175/141d1fb1-9841-4771-b75f-7e85f1329175.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/141d1fb1-9841-4771-b75f-7e85f1329175/141d1fb1-9841-4771-b75f-7e85f1329175.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/141d1fb1-9841-4771-b75f-7e85f1329175.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0d:42:4b:08:84:4f:a0:7f:1d:df:d6:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=141d1fb1-9841-4771-b75f-7e85f1329175
        Validity
            Not Before: Mar  4 02:00:32 2026 GMT
            Not After : Jun  2 01:00:32 2026 GMT
        Subject: CN=383d982d-27b2-450e-b97f-2bc03d3cd1e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f6:e0:3c:ab:cf:44:3e:80:1b:60:2e:00:14:
                    65:f0:64:44:0d:df:16:9c:30:6e:cc:57:40:7d:c4:
                    f5:f8:94:a0:e0:99:b1:56:37:42:e2:c9:0d:55:93:
                    16:d1:2a:36:7f:c8:5a:4c:e5:6a:ac:3f:e1:c8:24:
                    ee:d3:51:c6:10:93:f4:9f:40:bf:2c:b6:5f:9e:47:
                    29:4d:03:a3:1c:63:98:08:68:02:bd:bb:14:d7:cc:
                    de:81:50:34:bd:4d:50:83:4f:03:31:1f:91:b0:34:
                    65:2b:c8:e2:14:f4:82:01:e9:b8:53:54:6c:8f:db:
                    d8:03:40:0c:03:e2:f8:bc:22:48:29:9e:b8:cd:b8:
                    8d:11:f5:5b:1b:1b:a2:65:51:c3:d9:cf:0e:4e:1d:
                    85:a0:f3:be:78:4b:95:e2:61:76:9a:97:2e:79:94:
                    39:c3:ab:a2:73:a7:fb:e9:e6:2b:73:56:76:77:2b:
                    38:06:17:26:12:25:63:1c:02:d2:3d:34:01:de:94:
                    85:a7:34:4c:a2:d0:5d:b0:b0:c3:5c:9b:35:83:3c:
                    fe:fa:7c:97:bb:62:c8:13:49:07:ba:dc:6a:71:b7:
                    e0:60:93:ff:c6:97:8e:ee:1c:9f:bb:0f:0b:39:27:
                    5e:25:59:58:15:89:af:af:1d:dd:65:66:d9:e2:ed:
                    d5:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:E7:D0:8F:B5:78:94:48:DA:85:FB:3D:3F:ED:3F:77:D9:25:83:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/141d1fb1-9841-4771-b75f-7e85f1329175/a98fe038-3c0c-3a7e-9276-a2e4ea788b9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/141d1fb1-9841-4771-b75f-7e85f1329175/141d1fb1-9841-4771-b75f-7e85f1329175.crl

            X509v3 Authority Key Identifier:
                keyid:32:F7:5B:FA:D4:1D:B4:2F:67:4A:39:86:40:97:21:08:A4:FB:86:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/141d1fb1-9841-4771-b75f-7e85f1329175.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.223.119.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:4a:df:ee:1a:24:5b:3f:3c:44:bf:9e:5d:72:cd:0e:8c:1d:
         63:9a:39:75:e5:fa:bd:52:00:c4:60:b4:43:f5:65:18:cc:47:
         38:b4:f0:db:b9:76:d6:e4:43:00:f1:29:ba:51:4b:da:4d:bc:
         ea:5c:8d:68:2c:93:ab:4e:14:fe:27:40:2e:56:fd:5b:33:ec:
         c4:42:fb:d4:e1:47:97:1b:54:d5:14:b2:8e:2b:a4:e5:9c:2d:
         d1:95:83:ae:75:0d:2c:d7:37:61:22:e4:70:47:29:46:a7:bb:
         a7:78:38:79:80:74:a1:f1:f3:a6:85:12:23:ad:fa:ce:01:d9:
         f7:cc:7c:fe:91:08:4c:cd:49:d2:cb:ba:86:77:8e:1b:94:4f:
         a9:5b:29:fa:4c:b7:db:26:cd:ea:1b:d5:5b:31:dd:b1:b5:ab:
         7b:05:89:a7:7b:90:9a:05:ef:6b:cf:bc:9b:fd:68:38:53:9c:
         f4:9d:0e:13:2b:fd:37:de:91:06:64:22:cd:9d:1f:7a:cf:34:
         d1:66:62:4b:53:a3:e2:ae:db:59:44:e4:d8:85:dc:a4:df:0a:
         53:10:87:2a:14:a6:e8:9a:31:6c:78:9c:41:31:04:46:eb:b0:
         3e:be:8e:e0:60:4e:82:88:0b:94:09:61:6e:75:72:f1:84:83:
         6f:23:01:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:59:22 2026 by rpki-client