Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a0f8be0e-785d-312d-a92a-2977e2cf31cd.roa
File:                     a0f8be0e-785d-312d-a92a-2977e2cf31cd.roa (raw, json)
Hash identifier:          MZSnm+O+/F5SYRC+lYpFbL5tZxIWDeeiqAgi+zrv5B4=
Subject key identifier:   7A:3D:0F:90:E5:26:DB:D3:3C:08:BA:55:62:8F:3D:59:9D:D8:45:FE
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584D39CF703471D5DE326B978A00
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a0f8be0e-785d-312d-a92a-2977e2cf31cd.roa
Signing time:             Fri 20 Mar 2026 01:00:32 +0000
ROA not before:           Fri 20 Mar 2026 01:00:32 +0000
ROA not after:            Thu 18 Jun 2026 01:00:32 +0000
asID:                     274195
IP address blocks:        209.61.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:39:cf:70:34:71:d5:de:32:6b:97:8a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Mar 20 01:00:32 2026 GMT
            Not After : Jun 18 01:00:32 2026 GMT
        Subject: CN=70f14588-a0b1-4ad3-9e5e-8d00cec95ae4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ca:45:d3:e6:59:3b:8d:d0:c1:e9:ca:47:07:
                    79:ac:c8:d0:5b:66:38:cb:15:54:dd:b9:4f:98:ad:
                    b8:2b:dd:53:be:e0:15:09:fd:1c:6c:03:6b:38:db:
                    4a:e8:44:6a:32:52:c2:f7:a1:07:21:41:74:6a:f9:
                    60:42:3e:00:d6:eb:e0:6b:ac:eb:3a:60:05:61:7b:
                    34:4d:93:3b:f1:ce:89:1a:88:43:ea:19:3a:87:41:
                    89:a9:22:ba:c8:88:15:12:91:58:d6:7a:b4:04:47:
                    35:d1:05:bc:da:c9:c1:78:c3:2e:c3:d5:2c:33:12:
                    22:9d:79:ac:3d:91:8c:ae:88:48:44:b4:22:55:c7:
                    d9:a9:d6:34:95:c3:bc:24:7d:be:fd:86:7c:99:37:
                    50:4b:ec:77:ef:2a:11:02:e1:25:9d:e2:7d:bd:b9:
                    cf:c3:ae:1f:4f:99:97:5c:31:3a:69:4b:86:0b:43:
                    b7:86:f3:41:72:d1:10:85:c7:e8:d9:d3:8d:6a:d8:
                    55:d0:7e:f9:78:51:ce:45:73:04:97:9d:d7:2c:1b:
                    f2:15:f1:00:37:23:d6:ad:35:e9:bd:1f:aa:4f:db:
                    ff:84:71:d5:d1:8b:70:0e:82:88:04:f4:02:1d:48:
                    71:1f:96:7f:b9:fd:ca:1b:0b:53:b8:af:70:32:80:
                    0a:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:3D:0F:90:E5:26:DB:D3:3C:08:BA:55:62:8F:3D:59:9D:D8:45:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a0f8be0e-785d-312d-a92a-2977e2cf31cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.61.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:23:c0:ee:24:0e:b9:f6:12:ed:fd:bb:61:69:f8:67:c3:04:
         5b:e5:84:da:8f:95:78:d3:4d:44:8b:3f:56:7f:c9:44:4b:4f:
         2a:b8:01:29:a8:a0:fe:2a:79:66:86:79:6b:68:8a:00:55:33:
         6f:11:00:e4:b3:0a:0c:50:45:33:05:c4:44:7d:b5:a3:47:15:
         2e:4f:b7:94:de:2c:ee:f9:d0:69:ed:5d:23:3d:86:69:51:4e:
         19:dd:7c:40:0b:28:8e:77:91:1c:6e:d9:39:3b:c0:2c:aa:fe:
         5c:0a:6b:95:35:bd:a3:6f:e8:e9:43:a3:53:1d:70:e1:3c:04:
         a8:7f:52:03:02:22:a9:03:38:5a:83:b6:0a:de:60:9a:36:2f:
         32:03:a6:38:4d:92:c2:ae:f2:b4:1c:2a:90:91:01:83:17:13:
         8c:6a:a3:84:a2:08:89:b8:c8:4f:1e:79:8c:60:c0:57:21:b4:
         e8:db:b3:03:cd:3d:6e:79:d4:96:9f:34:b6:0a:be:4b:d3:49:
         4b:90:8d:a6:e5:06:b5:43:e0:5a:08:3c:41:c2:f0:18:61:ca:
         e3:a7:66:fb:cb:8a:5b:8a:0a:2b:4a:a3:6b:dd:6b:c3:a9:f5:
         66:3e:0a:95:39:19:59:76:71:50:16:de:e3:a7:91:77:10:a6:
         d7:39:a5:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:14:51 2026 by rpki-client