Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac0d9976-00da-49c9-826b-3d3a349b0fb4/7859fd51-803c-3326-9da8-998df7dca439.roa
File:                     7859fd51-803c-3326-9da8-998df7dca439.roa (raw, json)
Hash identifier:          NO5Lw5dXsSl78KeFBIwY9Y4VXS0Y++kF3/vNS5ezwi8=
Subject key identifier:   3D:85:4D:BB:C1:81:97:35:EE:FE:BA:02:BD:D8:1A:73:2C:22:C1:54
Certificate issuer:       /CN=ac0d9976-00da-49c9-826b-3d3a349b0fb4
Certificate serial:       010D0C9F4328584D1F4A43106E138C718389FCC0
Authority key identifier: 13:B0:2D:8C:D0:F0:5A:9A:D9:F1:1D:5E:CD:15:FF:04:B0:22:84:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac0d9976-00da-49c9-826b-3d3a349b0fb4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac0d9976-00da-49c9-826b-3d3a349b0fb4/7859fd51-803c-3326-9da8-998df7dca439.roa
Signing time:             Tue 10 Mar 2026 13:00:41 +0000
ROA not before:           Tue 10 Mar 2026 13:00:41 +0000
ROA not after:            Mon 08 Jun 2026 13:00:41 +0000
asID:                     40027
IP address blocks:        207.45.72.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac0d9976-00da-49c9-826b-3d3a349b0fb4/ac0d9976-00da-49c9-826b-3d3a349b0fb4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac0d9976-00da-49c9-826b-3d3a349b0fb4/ac0d9976-00da-49c9-826b-3d3a349b0fb4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac0d9976-00da-49c9-826b-3d3a349b0fb4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:4a:43:10:6e:13:8c:71:83:89:fc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac0d9976-00da-49c9-826b-3d3a349b0fb4
        Validity
            Not Before: Mar 10 13:00:41 2026 GMT
            Not After : Jun  8 13:00:41 2026 GMT
        Subject: CN=3f3f6fd4-3656-47e7-b336-829fdd7b689b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:cf:20:c6:45:48:8c:9d:84:0e:b3:c9:3f:40:
                    56:a5:7e:57:d2:d9:f7:27:3b:9d:0b:4f:9c:cf:8e:
                    d5:70:c0:b2:b5:de:94:ed:01:d8:a4:f5:2e:46:78:
                    c0:04:77:94:d0:c3:cd:01:24:64:cb:90:d2:f8:ee:
                    1d:aa:9a:80:c5:a7:87:00:f3:b2:85:b5:c5:e0:94:
                    0b:e8:23:8a:62:c2:02:59:e9:1b:60:0c:f7:de:20:
                    81:cb:3d:b0:4b:d7:d0:a5:41:df:d7:c0:56:46:83:
                    c2:8d:62:e5:87:da:16:21:e2:e1:67:87:4a:4e:80:
                    44:08:ef:85:51:d5:d7:f6:89:e8:25:3a:06:b7:55:
                    01:3e:88:fb:c2:5b:c8:76:f1:5c:03:1f:f6:f5:4f:
                    28:b9:b4:2b:92:99:73:01:ff:79:44:4a:e0:09:98:
                    ce:7c:80:31:e0:d5:f4:d0:fd:7c:bf:46:fc:35:19:
                    5a:0a:c5:76:b4:1f:8f:15:5d:42:3e:97:54:10:ca:
                    e4:30:11:9d:33:fc:fe:4a:ee:e1:d6:dc:8c:0e:70:
                    74:09:79:44:b1:71:ce:75:72:82:b3:82:02:fd:d1:
                    7b:a5:e9:20:f5:09:ad:56:d8:ea:bf:d3:95:da:1c:
                    fd:7f:1a:7b:46:92:52:a0:09:94:47:9e:d5:5a:31:
                    af:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:85:4D:BB:C1:81:97:35:EE:FE:BA:02:BD:D8:1A:73:2C:22:C1:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac0d9976-00da-49c9-826b-3d3a349b0fb4/7859fd51-803c-3326-9da8-998df7dca439.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac0d9976-00da-49c9-826b-3d3a349b0fb4/ac0d9976-00da-49c9-826b-3d3a349b0fb4.crl

            X509v3 Authority Key Identifier:
                keyid:13:B0:2D:8C:D0:F0:5A:9A:D9:F1:1D:5E:CD:15:FF:04:B0:22:84:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac0d9976-00da-49c9-826b-3d3a349b0fb4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.45.72.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:62:74:5e:c9:14:cd:11:91:72:cb:d6:48:e0:fe:b4:ae:2a:
         22:88:4e:e2:ee:16:6d:ef:3c:bd:6b:a7:f1:51:42:45:e2:aa:
         d8:37:19:2d:fd:27:24:d4:e4:e0:1e:bb:04:e4:8e:88:f3:75:
         62:a1:f4:3e:fd:a9:fa:97:6b:b1:62:5c:1a:45:36:99:3e:30:
         03:7a:24:62:49:fc:f8:f3:fd:22:8d:6a:dd:b4:05:e1:15:05:
         27:a3:49:f1:67:83:fa:f6:b9:0d:0b:d4:c5:6f:c7:66:55:91:
         84:78:b9:cd:5e:8e:03:4b:90:af:78:a5:bb:5e:39:94:f7:56:
         79:f2:77:43:7e:c0:ba:fd:60:af:e5:0a:94:7d:97:be:98:7a:
         b7:9f:9b:44:03:0f:47:eb:db:30:94:61:01:c5:e1:b6:3d:7f:
         52:69:f4:a6:32:6f:e7:e5:a1:f2:59:30:88:9e:34:3e:0d:d4:
         fb:b4:a9:90:f7:cf:99:51:37:5b:e4:62:63:d0:01:af:2c:7a:
         e8:37:d5:1c:a2:ed:f5:53:a9:4c:9b:8a:29:55:fe:58:ca:59:
         8b:9b:5f:0d:c9:af:55:d0:9a:69:c0:6c:7d:dd:97:be:0f:ee:
         61:fb:23:7a:06:22:85:87:f8:31:25:1a:b0:13:ec:82:d6:8a:
         5c:ed:02:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:54:18 2026 by rpki-client