Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/df141cce-e537-3b84-9537-312fe29c24dd.roa
File:                     df141cce-e537-3b84-9537-312fe29c24dd.roa (raw, json)
Hash identifier:          FET/3kVnlGNsPJgiu48KdkSwQnKDeALlUy8D63Zt6Oo=
Subject key identifier:   C9:D0:36:AF:E1:C7:6D:CE:B7:6D:A3:01:7B:A8:92:DE:06:F1:6F:86
Certificate issuer:       /CN=a234649d-ab49-458b-a5e3-7765fe7a066c
Certificate serial:       010D0C9F4328584D359FF9B8F8906A2ADA01F500
Authority key identifier: 9F:03:E7:1A:5F:42:82:C9:DE:EC:0B:A1:1F:90:48:F4:57:7D:A1:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/df141cce-e537-3b84-9537-312fe29c24dd.roa
Signing time:             Wed 18 Mar 2026 13:00:40 +0000
ROA not before:           Wed 18 Mar 2026 13:00:40 +0000
ROA not after:            Tue 16 Jun 2026 13:00:40 +0000
asID:                     198025
IP address blocks:        208.68.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/a234649d-ab49-458b-a5e3-7765fe7a066c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/a234649d-ab49-458b-a5e3-7765fe7a066c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:35:9f:f9:b8:f8:90:6a:2a:da:01:f5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a234649d-ab49-458b-a5e3-7765fe7a066c
        Validity
            Not Before: Mar 18 13:00:40 2026 GMT
            Not After : Jun 16 13:00:40 2026 GMT
        Subject: CN=c2e8b561-4d29-42d3-882d-b5a15e8c0874
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ef:e1:bb:e9:66:89:2c:92:24:18:3f:b7:3b:
                    80:4b:b0:73:98:93:3a:9f:79:30:c1:8b:bc:89:d7:
                    8d:9f:f6:c1:d4:5c:6d:5e:c4:91:4f:f8:7a:40:ac:
                    47:71:9c:f9:14:6e:ea:01:6c:2c:cf:3a:e0:07:64:
                    7e:d4:a3:a5:b9:81:cd:69:b4:1e:3b:f5:cb:3f:1d:
                    c5:55:30:70:e3:27:2e:d2:89:3a:15:5b:83:3f:2e:
                    ba:5c:7d:eb:a3:2b:2b:f8:d6:fa:c8:72:5b:c3:ef:
                    24:de:89:ae:bd:6b:c4:1d:9a:80:2d:ec:b0:3f:dd:
                    b2:05:d3:1c:12:01:4f:68:88:ff:08:dd:ff:b7:7b:
                    06:14:78:bd:73:bd:16:ed:33:e3:8f:8d:99:5f:f0:
                    57:d9:bd:36:75:43:f0:4b:57:55:ba:d5:60:ae:5e:
                    a8:f2:ca:19:5f:8d:6f:c0:b6:76:e5:3b:ad:5f:2f:
                    44:28:39:2e:35:40:fe:3e:75:35:16:ea:b6:14:0d:
                    cf:1b:59:9c:ee:eb:80:40:45:77:d8:37:35:34:17:
                    ca:e5:1b:4b:05:5e:b2:fa:77:6d:bf:85:48:25:1c:
                    03:bb:43:52:17:09:86:00:f9:41:80:8a:65:74:d7:
                    f9:2f:3e:ba:3a:a0:39:c8:77:16:78:57:d3:5b:78:
                    d2:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:D0:36:AF:E1:C7:6D:CE:B7:6D:A3:01:7B:A8:92:DE:06:F1:6F:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/df141cce-e537-3b84-9537-312fe29c24dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/a234649d-ab49-458b-a5e3-7765fe7a066c.crl

            X509v3 Authority Key Identifier:
                keyid:9F:03:E7:1A:5F:42:82:C9:DE:EC:0B:A1:1F:90:48:F4:57:7D:A1:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.68.181.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:55:41:8f:31:5e:67:ca:4e:ff:9f:4b:bc:c7:46:79:b5:92:
         dd:fb:c9:e2:ce:89:b3:94:17:0f:04:a5:99:ca:fe:1a:71:52:
         5d:df:54:a2:a0:41:6b:51:12:37:2a:65:93:12:91:e2:ee:18:
         5d:37:41:e8:97:7b:7e:f9:05:a0:33:2f:72:9d:93:05:59:73:
         f8:50:22:e0:03:eb:2a:d3:56:8f:55:c9:4b:9d:ee:dc:77:0f:
         1a:8e:aa:13:11:f0:68:73:d1:33:57:49:b1:ec:52:0c:2a:36:
         2f:05:d8:fb:41:92:b7:07:db:e2:1c:45:50:20:47:9d:33:33:
         24:b5:1a:50:17:2e:1b:33:d3:90:c9:2b:a6:4c:cd:30:c0:7b:
         ef:48:33:64:69:84:90:88:c4:90:ad:b0:6d:f2:5a:c8:e5:8b:
         7a:c7:ac:1c:2a:c5:28:f4:5f:43:b1:b8:5d:b7:0a:98:7a:cb:
         49:3c:d6:5a:d5:23:b3:71:9b:77:09:55:38:28:88:a5:25:2b:
         04:47:2c:71:ac:89:e5:4e:f7:d8:b7:19:69:bb:41:2c:31:75:
         9b:57:7e:54:86:62:06:0d:eb:40:68:c4:a1:98:cc:66:f2:7c:
         9c:4f:8f:d2:d8:24:d0:6b:05:c2:da:96:50:20:70:4c:50:2c:
         33:5d:60:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 03:06:05 2026 by rpki-client